Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9okK83FKGT1VJw1iWlaTYgZSQ8s.roa
File: 9okK83FKGT1VJw1iWlaTYgZSQ8s.roa (raw, json)
Hash identifier: uQH2eaZdymOmsfgWHuGWTnTWyGEIHEimRmmHha6sCOE=
Subject key identifier: F6:89:0A:F3:71:4A:19:3D:55:27:0D:62:5A:56:93:62:06:52:43:CB
Certificate issuer: /CN=253a3b5f51808168c212c094a2baaff38e16464a
Certificate serial: 018BA8F42CF0A7C427F6D5F1075EFC7BCDCC
Authority key identifier: 25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9okK83FKGT1VJw1iWlaTYgZSQ8s.roa
Signing time: Tue 07 Nov 2023 08:44:16 +0000
ROA not before: Tue 07 Nov 2023 08:44:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208626
IP address blocks: 193.232.53.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a8:f4:2c:f0:a7:c4:27:f6:d5:f1:07:5e:fc:7b:cd:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253a3b5f51808168c212c094a2baaff38e16464a
Validity
Not Before: Nov 7 08:44:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6890af3714a193d55270d625a569362065243cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8d:56:5c:f8:12:d5:fc:2a:13:82:a3:0e:ce:
5f:7c:90:95:b6:7f:bc:cc:95:01:12:33:61:49:a8:
1d:0d:c0:7d:b1:9a:2b:c3:16:56:c2:be:89:b0:30:
1d:a0:f2:04:cb:7e:b2:75:67:bc:cd:b2:0b:2a:2a:
97:f8:8a:c4:05:d1:01:07:7a:0c:7c:af:d3:de:87:
da:b3:f5:48:87:d5:7d:87:74:f4:9b:e7:7e:ad:71:
c8:81:88:35:a6:d3:e8:8d:8f:06:af:18:7a:ee:8b:
41:c4:1d:95:fb:40:1b:e8:07:81:c6:3e:f4:4a:ec:
02:38:5f:3e:5a:e2:0c:85:5d:55:50:0a:83:b6:68:
17:a2:bc:a7:95:13:31:66:01:95:41:14:83:1c:e0:
3b:c2:83:4a:06:a4:57:39:79:85:56:06:f4:fa:da:
7c:16:bb:5f:30:c3:46:65:c3:a8:f1:0e:e0:d1:ff:
99:98:dd:66:98:51:72:d7:39:ea:27:2d:ae:95:5b:
e7:2e:02:e7:97:e8:a3:ce:d5:70:70:50:e1:ad:ea:
a4:c0:6f:6a:b2:b8:72:b6:cf:54:56:7b:3d:67:45:
9d:a2:b9:3e:42:c4:2a:c4:68:d9:9f:68:5a:90:ba:
e8:ae:9f:45:0e:88:9f:fa:5a:5c:0f:01:4b:b8:bb:
42:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:89:0A:F3:71:4A:19:3D:55:27:0D:62:5A:56:93:62:06:52:43:CB
X509v3 Authority Key Identifier:
keyid:25:3A:3B:5F:51:80:81:68:C2:12:C0:94:A2:BA:AF:F3:8E:16:46:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JTo7X1GAgWjCEsCUorqv844WRko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/9okK83FKGT1VJw1iWlaTYgZSQ8s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/97474c-1dc2-462c-aadd-9e9a1e03738e/1/JTo7X1GAgWjCEsCUorqv844WRko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.53.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:95:f4:3d:3d:d2:41:a8:06:84:31:96:b8:fa:ad:21:ac:41:
30:61:88:97:61:73:7c:ac:19:46:ae:82:e9:65:40:5b:18:17:
dd:09:60:21:81:dc:28:7b:29:cb:e2:a7:54:5d:cb:7f:b3:65:
08:f9:82:0b:f2:7f:d2:18:94:1f:bd:9a:41:3c:b4:9b:2b:4a:
f6:0c:58:e5:29:af:cb:1d:88:f7:58:e0:a1:e2:65:8f:e1:d7:
ed:2c:be:99:a0:4e:27:84:cc:76:e7:4b:a1:2d:5f:25:28:6c:
98:d6:6a:cb:d4:e0:8c:0b:0b:23:5f:8b:30:0d:c7:88:94:69:
eb:0c:63:22:1a:0e:df:e6:0f:35:25:b5:e8:9d:a5:a6:24:6b:
8e:e3:d7:a5:ab:8a:1c:e7:e2:52:87:e4:f3:37:72:46:38:e5:
7f:c9:85:d5:5b:49:d6:b7:72:b7:c1:ac:40:04:be:71:2b:84:
ae:7b:fd:8b:d4:96:98:ba:5e:4e:05:4f:89:8e:c0:7c:db:dc:
73:4f:d8:07:52:52:77:57:3e:2d:62:db:bf:9d:d4:13:0c:04:
77:33:e0:06:3e:c3:7d:dd:59:4f:53:47:bb:97:03:f7:5c:b9:
59:d9:fb:51:8e:0b:2b:cb:7f:e2:60:39:c1:ef:89:28:d4:8c:
5b:80:1e:13
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYuo9Czwp8Qn9tXxB178e83MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1M2EzYjVmNTE4MDgxNjhjMjEyYzA5NGEyYmFhZmYzOGUx
NjQ2NGEwHhcNMjMxMTA3MDg0NDE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmNjg5MGFmMzcxNGExOTNkNTUyNzBkNjI1YTU2OTM2MjA2NTI0M2NiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY1WXPgS1fwqE4KjDs5ffJCVtn+8
zJUBEjNhSagdDcB9sZorwxZWwr6JsDAdoPIEy36ydWe8zbILKiqX+IrEBdEBB3oM
fK/T3ofas/VIh9V9h3T0m+d+rXHIgYg1ptPojY8Grxh67otBxB2V+0Ab6AeBxj70
SuwCOF8+WuIMhV1VUAqDtmgXorynlRMxZgGVQRSDHOA7woNKBqRXOXmFVgb0+tp8
FrtfMMNGZcOo8Q7g0f+ZmN1mmFFy1znqJy2ulVvnLgLnl+ijztVwcFDhreqkwG9q
srhyts9UVns9Z0Wdork+QsQqxGjZn2hakLrorp9FDoif+lpcDwFLuLtC4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFPaJCvNxShk9VScNYlpWk2IGUkPLMB8GA1UdIwQY
MBaAFCU6O19RgIFowhLAlKK6r/OOFkZKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQt
OWU5YTFlMDM3MzhlLzEvOW9rSzgzRktHVDFWSncxaVdsYVRZZ1pTUThzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS85NzQ3NGMtMWRjMi00NjJjLWFhZGQtOWU5YTFlMDM3Mzhl
LzEvSlRvN1gxR0FnV2pDRXNDVW9ycXY4NDRXUmtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAweg1MA0G
CSqGSIb3DQEBCwUAA4IBAQCjlfQ9PdJBqAaEMZa4+q0hrEEwYYiXYXN8rBlGroLp
ZUBbGBfdCWAhgdwoeynL4qdUXct/s2UI+YIL8n/SGJQfvZpBPLSbK0r2DFjlKa/L
HYj3WOCh4mWP4dftLL6ZoE4nhMx250uhLV8lKGyY1mrL1OCMCwsjX4swDceIlGnr
DGMiGg7f5g81JbXonaWmJGuO49elq4oc5+JSh+TzN3JGOOV/yYXVW0nWt3K3waxA
BL5xK4Sue/2L1JaYul5OBU+JjsB829xzT9gHUlJ3Vz4tYtu/ndQTDAR3M+AGPsN9
3VlPU0e7lwP3XLlZ2ftRjgsry3/iYDnB74ko1IxbgB4T
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:35:58 2024 by rpki-client on console-ams.rpki-client.org