Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2f9HlR6buFNYDVEb1TRDEy8ms2U.roa
File: 2f9HlR6buFNYDVEb1TRDEy8ms2U.roa (raw, json)
Hash identifier: UVjkIs8smsIheR6oiVAIon00lw3X7sKMp8qq/YkpEf8=
Subject key identifier: D9:FF:47:95:1E:9B:B8:53:58:0D:51:1B:D5:34:43:13:2F:26:B3:65
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26E6E8174792D2D31AC27041D046F9
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2f9HlR6buFNYDVEb1TRDEy8ms2U.roa
Signing time: Sun 01 Jan 2023 21:04:58 +0000
ROA not before: Sun 01 Jan 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49954
IP address blocks: 193.233.159.0/24 maxlen: 24
193.233.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e6:e8:17:47:92:d2:d3:1a:c2:70:41:d0:46:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d9ff47951e9bb853580d511bd53443132f26b365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a2:ed:09:91:04:b7:bc:94:09:fc:8d:91:7c:
4c:fd:23:1c:dc:07:8c:0f:8e:ce:f2:2d:07:41:a9:
4b:1b:e7:d3:c7:11:e3:16:dc:16:2a:31:f9:dc:bd:
a5:d0:66:28:8a:f4:ea:82:54:d2:fa:bc:b5:d7:5a:
86:73:9e:4a:42:82:36:73:2a:2b:62:49:2d:78:62:
ed:a7:75:2b:42:25:4a:68:45:ae:9f:3e:71:f7:c8:
42:b8:38:d4:51:9e:93:e2:58:8c:75:9c:52:33:a1:
db:ae:c5:74:43:44:d4:95:4d:01:f1:18:d4:b9:ba:
b1:cd:31:a4:5d:eb:4c:f6:40:9e:0e:85:cc:36:16:
c1:c5:71:e4:15:a2:04:13:f9:94:52:f9:0c:0b:8d:
3e:78:3e:4b:14:7e:64:c1:30:78:df:cb:96:3f:e1:
81:7b:0a:cd:52:86:64:78:d4:0c:ed:66:cc:66:29:
60:e2:b9:20:9c:39:6c:3e:18:51:6c:24:e7:19:47:
73:c6:72:d3:f0:12:da:fc:1f:b0:85:94:10:a9:e9:
27:ed:19:fd:ce:23:f2:1b:2a:e6:ea:93:c7:5e:02:
86:52:20:b6:0e:23:c2:2e:f6:c7:13:b6:22:52:2f:
f3:5d:17:7e:79:e1:6d:66:aa:62:ef:a7:81:0f:72:
4b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:47:95:1E:9B:B8:53:58:0D:51:1B:D5:34:43:13:2F:26:B3:65
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/2f9HlR6buFNYDVEb1TRDEy8ms2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.154.0/24
193.233.159.0/24
Signature Algorithm: sha256WithRSAEncryption
41:de:77:1b:09:be:13:0c:2e:cd:15:b1:db:14:74:0b:19:ba:
02:41:c1:2d:54:44:ff:ec:0b:3b:16:e1:78:c9:69:ad:2f:3c:
90:b1:9e:7a:a6:cb:8d:eb:16:ca:d3:b4:7a:4f:7f:e2:77:67:
6b:cf:f5:86:99:0e:34:b8:aa:5f:59:c1:ae:02:aa:e4:dd:52:
e6:20:99:93:a3:e3:59:db:37:ed:0c:c6:32:99:8b:67:26:7c:
05:a4:43:b0:c8:c9:98:55:58:e0:b6:11:ac:f5:3c:1f:ba:3e:
d1:78:ac:6f:3e:ed:63:d2:7b:8e:79:b1:7b:6b:ba:2a:2e:da:
82:96:d8:2d:ce:a5:f7:c9:4f:e9:64:3f:eb:2e:c3:34:dd:85:
83:0b:e5:ce:e5:a0:88:56:ee:06:61:a6:78:a7:93:65:1b:46:
2d:47:10:82:41:3e:dd:4d:b4:fd:ce:ec:90:c0:1d:89:01:37:
a7:89:8d:e8:5d:ff:59:c6:e0:3f:1b:87:83:e1:95:09:21:c1:
e3:d3:ef:5c:92:c4:96:3f:03:26:a6:3c:92:ee:5f:16:79:9b:
fa:07:35:c3:e1:82:2e:e0:7d:f9:df:fb:fb:1a:cc:3f:9a:60:
93:e6:fb:c7:71:46:97:a9:1f:68:4f:f2:5f:ac:57:f9:1c:fd:
60:c5:af:69
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvJuboF0eS0tMawnBB0Eb5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOWZmNDc5NTFlOWJiODUzNTgwZDUxMWJkNTM0NDMxMzJmMjZiMzY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaLtCZEEt7yUCfyNkXxM/SMc3AeM
D47O8i0HQalLG+fTxxHjFtwWKjH53L2l0GYoivTqglTS+ry111qGc55KQoI2cyor
YkkteGLtp3UrQiVKaEWunz5x98hCuDjUUZ6T4liMdZxSM6HbrsV0Q0TUlU0B8RjU
ubqxzTGkXetM9kCeDoXMNhbBxXHkFaIEE/mUUvkMC40+eD5LFH5kwTB438uWP+GB
ewrNUoZkeNQM7WbMZilg4rkgnDlsPhhRbCTnGUdzxnLT8BLa/B+whZQQqekn7Rn9
ziPyGyrm6pPHXgKGUiC2DiPCLvbHE7YiUi/zXRd+eeFtZqpi76eBD3JLzwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNn/R5Uem7hTWA1RG9U0QxMvJrNlMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvMmY5SGxSNmJ1Rk5ZRFZFYjFUUkRFeThtczJVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwemaAwQA
wemfMA0GCSqGSIb3DQEBCwUAA4IBAQBB3ncbCb4TDC7NFbHbFHQLGboCQcEtVET/
7As7FuF4yWmtLzyQsZ56psuN6xbK07R6T3/id2drz/WGmQ40uKpfWcGuAqrk3VLm
IJmTo+NZ2zftDMYymYtnJnwFpEOwyMmYVVjgthGs9Twfuj7ReKxvPu1j0nuOebF7
a7oqLtqCltgtzqX3yU/pZD/rLsM03YWDC+XO5aCIVu4GYaZ4p5NlG0YtRxCCQT7d
TbT9zuyQwB2JATeniY3oXf9ZxuA/G4eD4ZUJIcHj0+9cksSWPwMmpjyS7l8WeZv6
BzXD4YIu4H353/v7Gsw/mmCT5vvHcUaXqR9oT/JfrFf5HP1gxa9p
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org