Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa
File: Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa (raw, json)
Hash identifier: rtzFQxRqU7XB5BAH/kpLmytGTze1KTDf1XincIslw5I=
Subject key identifier: 26:DF:2D:70:CA:B0:73:7A:F7:C3:20:93:74:D3:BD:03:F5:A0:D7:DB
Certificate issuer: /CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Certificate serial: 01856E2FBFB0691007CCA8913436AAABC702
Authority key identifier: 05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa
Signing time: Sun 01 Jan 2023 16:35:01 +0000
ROA not before: Sun 01 Jan 2023 16:35:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48763
IP address blocks: 194.28.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:2f:bf:b0:69:10:07:cc:a8:91:34:36:aa:ab:c7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05b1d13c2e26e12786246a5ec4c5bea69864b20f
Validity
Not Before: Jan 1 16:35:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26df2d70cab0737af7c3209374d3bd03f5a0d7db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:7a:ec:93:40:0e:f3:d7:17:c4:ff:2e:68:
9a:e7:c9:0b:ac:d0:2f:38:a9:fb:df:8d:93:6d:43:
22:ba:89:47:dc:06:e3:23:20:8b:52:b8:1f:7a:e5:
67:85:c7:40:d3:81:b7:09:2a:87:64:f1:a7:af:49:
0b:e1:24:8f:7f:f4:87:d2:68:2f:d4:a0:c4:bd:71:
89:44:78:f3:06:4e:a1:b5:10:2a:58:fa:2e:0a:ad:
f4:8c:09:6a:6e:c8:7b:85:4e:04:30:d8:ae:9e:6c:
45:8d:7a:a8:35:15:aa:dc:30:cc:5a:83:57:c5:a9:
21:6d:cb:ea:f4:b9:f9:d2:41:1e:fa:ec:a2:a5:07:
91:d5:18:22:c3:b6:aa:48:7c:23:67:e4:2b:dd:7a:
a8:b3:03:5b:32:a8:83:ce:b4:2b:d8:47:11:44:be:
13:9f:16:c0:51:03:cc:cb:88:4c:3f:6f:c5:84:65:
42:5c:ab:6b:12:8a:d6:0a:dc:3a:fc:fc:14:e2:12:
f0:fa:a9:ff:6e:0e:1d:c6:c3:69:ed:c7:f0:53:7f:
e9:d4:44:b4:09:ae:92:0b:0a:94:0c:da:38:56:ce:
a6:44:4c:1e:57:90:b7:d9:c8:6f:f7:b0:ed:71:38:
69:9d:2f:de:79:09:7b:52:1d:3d:44:b0:2b:c7:0a:
19:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:DF:2D:70:CA:B0:73:7A:F7:C3:20:93:74:D3:BD:03:F5:A0:D7:DB
X509v3 Authority Key Identifier:
keyid:05:B1:D1:3C:2E:26:E1:27:86:24:6A:5E:C4:C5:BE:A6:98:64:B2:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BbHRPC4m4SeGJGpexMW-pphksg8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/Jt8tcMqwc3r3wyCTdNO9A_Wg19s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/c61092-734a-4eef-9d67-4905243bc828/1/BbHRPC4m4SeGJGpexMW-pphksg8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.193.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:a9:e3:be:77:3b:b5:4b:31:b9:f9:ad:08:1b:39:44:e6:bc:
ac:3f:3a:2c:87:02:58:54:19:b0:55:21:8f:73:08:c1:c4:b2:
81:6e:80:d1:22:78:3d:47:15:70:a0:8f:02:ec:7e:53:6f:e1:
5b:5b:f2:9b:39:93:0e:88:bf:f8:95:07:9d:29:6a:ef:a4:ff:
92:6b:24:fc:e5:7a:6f:81:09:96:21:e4:c6:60:91:3d:a7:5c:
e8:5b:a8:13:3b:d1:3b:eb:fb:26:a4:b4:76:74:ce:b9:ef:c9:
88:b3:48:82:da:6d:5c:47:58:84:8b:8e:f4:d0:3e:64:72:28:
f7:73:fc:ec:a1:77:28:92:f3:44:cf:36:00:1a:2a:7c:2f:9b:
ac:97:bc:e0:a0:a8:d5:9d:9e:d0:fb:7e:e5:75:c6:f0:0e:c4:
43:26:02:19:19:c3:9b:f1:83:1c:0a:84:a2:ed:bb:7d:1b:19:
9c:de:69:92:d4:04:8a:4b:23:68:91:fe:2d:3e:90:d4:04:a5:
c6:78:27:af:6a:bf:23:72:53:af:a5:8c:57:5d:25:87:33:08:
05:00:a2:49:19:c4:39:ff:b2:80:f1:27:d4:71:ca:3a:3e:6c:
c2:6a:a5:66:06:b3:a4:d5:e4:92:9c:59:5c:e4:ca:f1:c3:5d:
43:5b:0f:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVuL7+waRAHzKiRNDaqq8cCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA1YjFkMTNjMmUyNmUxMjc4NjI0NmE1ZWM0YzViZWE2OTg2
NGIyMGYwHhcNMjMwMTAxMTYzNTAxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNmRmMmQ3MGNhYjA3MzdhZjdjMzIwOTM3NGQzYmQwM2Y1YTBkN2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAB67JNADvPXF8T/Lmia58kLrNAv
OKn7342TbUMiuolH3AbjIyCLUrgfeuVnhcdA04G3CSqHZPGnr0kL4SSPf/SH0mgv
1KDEvXGJRHjzBk6htRAqWPouCq30jAlqbsh7hU4EMNiunmxFjXqoNRWq3DDMWoNX
xakhbcvq9Ln50kEe+uyipQeR1Rgiw7aqSHwjZ+Qr3XqoswNbMqiDzrQr2EcRRL4T
nxbAUQPMy4hMP2/FhGVCXKtrEorWCtw6/PwU4hLw+qn/bg4dxsNp7cfwU3/p1ES0
Ca6SCwqUDNo4Vs6mREweV5C32chv97DtcThpnS/eeQl7Uh09RLArxwoZcQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFCbfLXDKsHN698Mgk3TTvQP1oNfbMB8GA1UdIwQY
MBaAFAWx0TwuJuEnhiRqXsTFvqaYZLIPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjct
NDkwNTI0M2JjODI4LzEvSnQ4dGNNcXdjM3Izd3lDVGROTzlBX1dnMTlzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9jNjEwOTItNzM0YS00ZWVmLTlkNjctNDkwNTI0M2JjODI4
LzEvQmJIUlBDNG00U2VHSkdwZXhNVy1wcGhrc2c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwhzBMA0G
CSqGSIb3DQEBCwUAA4IBAQA7qeO+dzu1SzG5+a0IGzlE5rysPzoshwJYVBmwVSGP
cwjBxLKBboDRIng9RxVwoI8C7H5Tb+FbW/KbOZMOiL/4lQedKWrvpP+SayT85Xpv
gQmWIeTGYJE9p1zoW6gTO9E76/smpLR2dM6578mIs0iC2m1cR1iEi4700D5kcij3
c/zsoXcokvNEzzYAGip8L5usl7zgoKjVnZ7Q+37ldcbwDsRDJgIZGcOb8YMcCoSi
7bt9Gxmc3mmS1ASKSyNokf4tPpDUBKXGeCevar8jclOvpYxXXSWHMwgFAKJJGcQ5
/7KA8SfUcco6PmzCaqVmBrOk1eSSnFlc5Mrxw11DWw8a
-----END CERTIFICATE-----
Generated at Thu Jul 20 10:35:03 2023 by rpki-client on console-ams.rpki-client.org