Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/DOvxaVEc0WsJ1fKitu6cwYIem_4.roa
File: DOvxaVEc0WsJ1fKitu6cwYIem_4.roa (raw, json)
Hash identifier: jcaYwenVi9Kc3XOIczk0QMK9FfgpaTTPs7Z+3tCtdkk=
Subject key identifier: 0C:EB:F1:69:51:1C:D1:6B:09:D5:F2:A2:B6:EE:9C:C1:82:1E:9B:FE
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 0189A2E6E505709008296B7F2EAE03A50677
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/DOvxaVEc0WsJ1fKitu6cwYIem_4.roa
Signing time: Sat 29 Jul 2023 18:26:28 +0000
ROA not before: Sat 29 Jul 2023 18:26:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 193.218.204.0/24 maxlen: 24
193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Aug 2023 11:30:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a2:e6:e5:05:70:90:08:29:6b:7f:2e:ae:03:a5:06:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jul 29 18:26:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0cebf169511cd16b09d5f2a2b6ee9cc1821e9bfe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:99:ec:22:52:e6:e5:45:e6:65:93:ae:c8:d6:
d4:08:f4:1a:a9:55:02:d8:35:ec:55:f8:35:63:42:
70:c7:64:1e:39:27:f2:1d:2b:cb:e9:81:bb:e1:8c:
5f:74:a8:92:68:1f:2c:b6:7d:7b:e6:0f:e1:fb:17:
0c:49:d9:6a:65:39:01:aa:30:a5:ba:cf:e4:fd:cd:
ba:f2:3d:65:fa:20:f5:f8:3c:90:d5:34:7f:54:0b:
65:87:23:00:24:1f:43:11:57:07:45:88:ac:94:e1:
56:e6:71:2b:e5:dd:64:f6:f2:ed:59:fe:7a:49:15:
0c:fe:dd:e9:19:20:b0:ee:69:88:30:15:43:05:18:
07:ee:32:b8:de:2e:32:a9:c2:b1:8d:93:67:3b:3c:
c9:06:23:4f:a0:cf:98:04:b2:0f:51:be:15:19:08:
74:7d:8e:d8:3a:c1:ca:74:b1:94:d0:e5:ab:e0:c5:
7d:0c:ea:62:18:1a:1a:47:9f:b7:9c:60:d2:e0:cf:
2e:7d:b2:1c:d4:a2:fd:35:fc:64:0f:dd:a2:9f:96:
e8:15:f4:e8:2e:46:9c:49:db:05:25:40:d4:94:0c:
bb:32:9f:c1:14:ee:29:c1:a2:ae:aa:c6:16:a9:e7:
fd:1d:0a:28:83:4a:72:61:80:2d:7b:fb:6a:a7:eb:
4c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:EB:F1:69:51:1C:D1:6B:09:D5:F2:A2:B6:EE:9C:C1:82:1E:9B:FE
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/DOvxaVEc0WsJ1fKitu6cwYIem_4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.204.0/24
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
21:01:d0:0a:b4:e6:9c:db:31:4a:0c:33:02:5c:cf:c5:c0:d2:
b0:8d:69:89:bf:ed:41:30:5c:2d:9e:c2:10:59:9c:58:85:c1:
79:eb:02:e4:a3:7e:38:2b:30:62:00:68:b1:fe:ff:3f:6e:f7:
e8:75:bc:26:3c:56:f3:3d:7d:5d:1e:0d:cb:e3:ee:da:05:c6:
2d:c5:c5:28:04:b2:bf:d9:84:2a:03:06:97:f7:c5:e6:98:d3:
58:20:08:28:2c:07:81:f3:cd:af:8c:2a:f2:d4:3a:88:c8:6f:
bb:31:55:d4:41:be:2a:2c:c7:8f:e6:77:b0:2c:70:d2:7e:55:
08:5b:f4:c4:8e:54:42:6f:1f:33:0b:92:96:7d:72:28:6f:f7:
d9:35:37:ba:b0:8f:71:f9:2e:7e:1e:be:c6:ca:bb:91:e1:b6:
ee:ce:c7:e1:56:1b:c0:82:a6:51:fc:42:10:90:4a:b7:c1:a8:
a6:ba:e1:7f:59:47:8b:80:44:f0:59:8b:50:dd:53:ef:f6:8a:
91:0c:14:d7:0b:48:17:2d:94:c7:25:7f:96:d1:90:28:d5:ad:
7a:8f:7d:ed:aa:38:dc:60:79:15:8f:49:f8:e2:29:41:1b:26:
ce:7f:b5:11:66:d2:a4:71:03:7c:2a:83:51:25:0d:e6:9d:b4:
c9:79:c2:5a
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYmi5uUFcJAIKWt/Lq4DpQZ3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjMwNzI5MTgyNjI4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwY2ViZjE2OTUxMWNkMTZiMDlkNWYyYTJiNmVlOWNjMTgyMWU5YmZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJnsIlLm5UXmZZOuyNbUCPQaqVUC
2DXsVfg1Y0Jwx2QeOSfyHSvL6YG74YxfdKiSaB8stn175g/h+xcMSdlqZTkBqjCl
us/k/c268j1l+iD1+DyQ1TR/VAtlhyMAJB9DEVcHRYislOFW5nEr5d1k9vLtWf56
SRUM/t3pGSCw7mmIMBVDBRgH7jK43i4yqcKxjZNnOzzJBiNPoM+YBLIPUb4VGQh0
fY7YOsHKdLGU0OWr4MV9DOpiGBoaR5+3nGDS4M8ufbIc1KL9NfxkD92in5boFfTo
LkacSdsFJUDUlAy7Mp/BFO4pwaKuqsYWqef9HQoog0pyYYAte/tqp+tMpwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFAzr8WlRHNFrCdXyorbunMGCHpv+MB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvRE92eGFWRWMwV3NKMWZLaXR1NmN3WUllbV80LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwdrMAwQA
wdreAwQAwdsAMA0GCSqGSIb3DQEBCwUAA4IBAQAhAdAKtOac2zFKDDMCXM/FwNKw
jWmJv+1BMFwtnsIQWZxYhcF56wLko344KzBiAGix/v8/bvfodbwmPFbzPX1dHg3L
4+7aBcYtxcUoBLK/2YQqAwaX98XmmNNYIAgoLAeB882vjCry1DqIyG+7MVXUQb4q
LMeP5newLHDSflUIW/TEjlRCbx8zC5KWfXIob/fZNTe6sI9x+S5+Hr7GyruR4bbu
zsfhVhvAgqZR/EIQkEq3waimuuF/WUeLgETwWYtQ3VPv9oqRDBTXC0gXLZTHJX+W
0ZAo1a16j33tqjjcYHkVj0n44ilBGybOf7URZtKkcQN8KoNRJQ3mnbTJecJa
-----END CERTIFICATE-----
Generated at Thu Jun 6 18:57:00 2024 by rpki-client on console-ams.rpki-client.org