Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-jlZ0K1uQYanhX3SC6xsDtiReH8.roa
File: 1-jlZ0K1uQYanhX3SC6xsDtiReH8.roa (raw, json)
Hash identifier: 2g8lr0qVKhYqi7TGaLr9GggeUtwN6LYo/3hjTP7wb9M=
Subject key identifier: FA:39:59:D0:AD:6E:41:86:A7:85:7D:D2:0B:AC:6C:0E:D8:91:78:7F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018844BCCFEF44FCB6DBFF50C38E34EA03BF
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-jlZ0K1uQYanhX3SC6xsDtiReH8.roa
Signing time: Mon 22 May 2023 18:33:24 +0000
ROA not before: Mon 22 May 2023 18:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.16.0/24 maxlen: 24
193.233.252.0/23 maxlen: 23
193.233.192.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:44:bc:cf:ef:44:fc:b6:db:ff:50:c3:8e:34:ea:03:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 22 18:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa3959d0ad6e4186a7857dd20bac6c0ed891787f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:89:44:8a:dd:10:70:d2:d6:f7:8f:2d:d8:
e3:b8:0f:7b:7c:75:ef:45:ac:aa:11:76:12:f8:9a:
19:55:fd:3c:ae:4a:77:ac:33:67:de:8b:c7:fb:63:
14:c9:6e:e4:92:19:c7:be:9a:1e:51:98:4d:28:71:
a6:fa:0e:75:82:56:b1:be:5b:b3:aa:2f:5e:26:c1:
ed:f9:02:49:0d:30:0b:f1:2f:53:f0:84:be:99:a2:
3b:5f:9d:51:22:81:21:95:4e:ec:f8:57:7d:24:89:
7f:50:e7:f3:84:5b:7b:a0:e4:43:0f:11:6b:3a:ab:
48:81:bf:a9:7f:a2:2d:a8:ec:7c:6c:2f:a0:b9:ed:
6a:41:8e:14:e2:9d:e3:61:b9:dc:6d:d5:b0:81:66:
be:5d:0a:39:c0:d7:27:d2:d4:f3:f5:f3:b0:de:3c:
ae:5c:9f:0e:87:0d:a5:48:4f:16:54:0e:40:f3:c7:
9b:2c:ab:36:78:7f:10:28:31:ad:09:2d:2b:22:32:
71:f8:71:91:c2:de:f0:58:83:e9:09:f6:f9:50:1a:
ec:38:1e:ca:7d:5b:7e:7a:f9:75:2f:ac:1b:59:d2:
35:e1:6c:0e:f8:af:20:5f:19:3d:02:2a:cf:73:f2:
f7:0d:d8:c9:98:f9:fa:f1:04:d4:99:e2:99:bf:57:
ca:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:39:59:D0:AD:6E:41:86:A7:85:7D:D2:0B:AC:6C:0E:D8:91:78:7F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-jlZ0K1uQYanhX3SC6xsDtiReH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.16.0/24
193.233.85.0-193.233.86.255
193.233.192.0/24
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:73:94:a9:57:b1:94:b3:e7:40:7d:f1:07:c8:94:ce:a0:32:
8d:41:f7:ad:a8:53:5e:fb:5a:5a:3e:a0:f4:78:18:ea:88:ec:
96:af:c3:e2:e4:0f:78:67:6f:06:fc:4e:1e:2d:fd:e7:b5:92:
5c:22:1f:44:71:4b:37:ca:e4:18:3a:96:1e:37:34:f5:76:6a:
fd:f8:a7:99:78:4b:49:a2:9f:23:b1:60:df:40:6f:fc:84:0d:
9c:fc:e3:d5:3d:5e:a5:5e:82:78:48:b7:a5:be:de:3b:1b:a5:
ad:ac:2a:bd:40:ad:63:cc:6d:59:51:ac:35:1a:21:1a:23:e4:
aa:4c:cb:e8:29:69:05:1a:d0:d4:3c:14:b6:9e:4f:0b:11:7b:
96:32:33:ac:2b:52:31:77:9e:da:0b:3b:83:0e:ce:2c:27:60:
7f:be:c8:a1:51:7a:6d:42:38:1b:71:1a:91:1e:fc:c6:74:68:
24:33:96:18:84:36:ab:02:6e:4f:ef:9c:7d:84:17:86:93:d4:
4c:a1:ac:64:78:e8:c0:eb:a3:4e:21:37:1c:0e:7e:f3:e9:d9:
2b:75:a5:19:09:5a:97:d0:63:d1:cf:b6:f2:1d:13:b0:e1:38:
10:c6:d3:2e:a2:85:f0:90:69:02:92:fd:fc:47:c6:d8:d5:9e:
36:1a:9f:08
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgISAYhEvM/vRPy22/9Qw4406gO/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwNTIyMTgzMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYTM5NTlkMGFkNmU0MTg2YTc4NTdkZDIwYmFjNmMwZWQ4OTE3ODdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0J2JRIrdEHDS1vePLdjjuA97fHXv
RayqEXYS+JoZVf08rkp3rDNn3ovH+2MUyW7kkhnHvpoeUZhNKHGm+g51glaxvluz
qi9eJsHt+QJJDTAL8S9T8IS+maI7X51RIoEhlU7s+Fd9JIl/UOfzhFt7oORDDxFr
OqtIgb+pf6ItqOx8bC+gue1qQY4U4p3jYbncbdWwgWa+XQo5wNcn0tTz9fOw3jyu
XJ8Ohw2lSE8WVA5A88ebLKs2eH8QKDGtCS0rIjJx+HGRwt7wWIPpCfb5UBrsOB7K
fVt+evl1L6wbWdI14WwO+K8gXxk9AirPc/L3DdjJmPn68QTUmeKZv1fKLQIDAQAB
o4ICJDCCAiAwHQYDVR0OBBYEFPo5WdCtbkGGp4V90gusbA7YkXh/MB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvMS1qbFowSzF1UVlhbmhYM1NDNnhzRHRpUmVIOC5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMGMvYWM1OGVhLWM0NTktNDhjYS1iODJiLTRkZWM0ZGFmZWU0
OS8xL2h0Wkl2YnFXVkdHeDZNRWJuZFEyeGhPQ2h6dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgwJgQCAAEwIAMEAMHpEDAM
AwQAwelVAwQAwelWAwQAwenAAwQBwen8MA0GCSqGSIb3DQEBCwUAA4IBAQA9c5Sp
V7GUs+dAffEHyJTOoDKNQfetqFNe+1paPqD0eBjqiOyWr8Pi5A94Z28G/E4eLf3n
tZJcIh9EcUs3yuQYOpYeNzT1dmr9+KeZeEtJop8jsWDfQG/8hA2c/OPVPV6lXoJ4
SLelvt47G6WtrCq9QK1jzG1ZUaw1GiEaI+SqTMvoKWkFGtDUPBS2nk8LEXuWMjOs
K1Ixd57aCzuDDs4sJ2B/vsihUXptQjgbcRqRHvzGdGgkM5YYhDarAm5P75x9hBeG
k9RMoaxkeOjA66NOITccDn7z6dkrdaUZCVqX0GPRz7byHROw4TgQxtMuooXwkGkC
kv38R8bY1Z42Gp8I
-----END CERTIFICATE-----
Generated at Thu Sep 21 20:18:47 2023 by rpki-client on console-ams.rpki-client.org