Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BvI8kFQkwdRX3iW-x8p-WSnE_FQ.roa
File: BvI8kFQkwdRX3iW-x8p-WSnE_FQ.roa (raw, json)
Hash identifier: Aso5dMsqomedc9vk7DXrfj5WmXFvzQS8F+CVXUJn2Xg=
Subject key identifier: 06:F2:3C:90:54:24:C1:D4:57:DE:25:BE:C7:CA:7E:59:29:C4:FC:54
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26E7817F704F84836B22F15760974A
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BvI8kFQkwdRX3iW-x8p-WSnE_FQ.roa
Signing time: Sun 01 Jan 2023 21:04:58 +0000
ROA not before: Sun 01 Jan 2023 21:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 193.233.160.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e7:81:7f:70:4f:84:83:6b:22:f1:57:60:97:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=06f23c905424c1d457de25bec7ca7e5929c4fc54
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:fe:f4:86:97:cf:10:02:e3:3f:9b:36:40:d7:
29:0d:fc:ee:0c:63:ee:a7:b5:a9:1e:ab:5d:78:21:
bd:ed:86:29:78:21:8e:c4:c6:a5:b3:d4:5f:0c:1c:
f6:62:7b:6a:be:2c:74:c6:75:c7:7b:64:5f:5b:fd:
05:d8:b6:9c:38:f4:d3:43:39:7d:e5:3a:d5:ca:3d:
22:38:62:12:18:82:9e:3a:20:fb:e6:c3:93:bc:da:
9f:65:6c:37:e4:45:07:e2:1f:55:d1:5b:12:97:6a:
0a:09:9e:69:76:3f:c2:b2:d4:cc:be:2c:3e:40:03:
01:23:ef:41:30:f3:67:5f:8c:91:f4:de:c5:c7:4e:
e6:51:0d:79:5d:4d:60:2e:d0:c3:1c:17:91:6e:c4:
28:8c:5a:59:3a:60:a1:b4:ef:61:43:40:70:0b:ee:
4d:38:c3:f0:fc:9b:13:70:75:c4:20:23:60:94:0a:
36:b3:4a:10:cf:e4:d6:78:0f:54:a0:47:98:a7:5c:
47:af:3e:01:a8:55:4e:8e:d0:a9:a6:66:ab:4a:87:
35:46:0d:c4:07:08:8d:c1:bd:b3:15:5c:93:84:4d:
da:85:6d:cd:87:26:2e:12:a5:e6:e0:b8:c9:05:8d:
fe:2b:cd:48:cb:32:43:e2:c1:f4:18:b8:1f:52:0c:
b0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:F2:3C:90:54:24:C1:D4:57:DE:25:BE:C7:CA:7E:59:29:C4:FC:54
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/BvI8kFQkwdRX3iW-x8p-WSnE_FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.88.0/22
193.233.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4a:d2:63:97:28:2b:4b:d5:29:ba:44:ad:a3:f2:2f:b5:c0:
d2:7b:79:1e:e7:34:54:46:02:d5:eb:dd:fe:3a:2c:f9:50:a1:
67:08:b3:5d:ed:a4:a7:e8:44:ef:8e:3a:72:a0:6b:17:67:cb:
16:ae:34:62:05:43:27:e0:1c:71:c7:62:cf:b6:f9:3b:95:51:
9d:68:71:ae:2f:92:75:b2:55:c3:21:3f:55:77:c9:3a:0c:1f:
22:a2:44:56:6d:ee:98:92:58:e9:c8:73:31:86:26:9f:7f:b9:
6b:77:3e:9c:4e:cf:24:29:d3:51:09:df:56:d2:8c:ab:3e:46:
eb:a9:54:14:f3:61:f8:28:5f:87:f4:2f:75:43:8d:a0:82:78:
3b:76:18:3b:07:cf:77:fd:76:09:71:1a:5a:47:8d:fb:9a:42:
7b:cd:90:5b:5e:21:75:09:0f:f4:3d:7a:17:47:d7:00:2c:7a:
af:6b:1c:43:9b:be:d4:67:63:15:60:63:90:e9:d2:09:24:43:
9a:54:73:72:9d:e1:4e:bd:31:87:c9:93:f0:46:30:c8:26:4c:
95:42:fe:19:c5:f2:9e:f8:c5:f7:fe:9b:38:1e:f7:3f:5c:f3:
f9:eb:e5:04:de:7f:b1:1a:d6:cd:80:34:21:d8:ea:a1:30:3a:
06:e5:90:2e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYVvJueBf3BPhINrIvFXYJdKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNDU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNmYyM2M5MDU0MjRjMWQ0NTdkZTI1YmVjN2NhN2U1OTI5YzRmYzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgv70hpfPEALjP5s2QNcpDfzuDGPu
p7WpHqtdeCG97YYpeCGOxMals9RfDBz2Yntqvix0xnXHe2RfW/0F2LacOPTTQzl9
5TrVyj0iOGISGIKeOiD75sOTvNqfZWw35EUH4h9V0VsSl2oKCZ5pdj/CstTMviw+
QAMBI+9BMPNnX4yR9N7Fx07mUQ15XU1gLtDDHBeRbsQojFpZOmChtO9hQ0BwC+5N
OMPw/JsTcHXEICNglAo2s0oQz+TWeA9UoEeYp1xHrz4BqFVOjtCppmarSoc1Rg3E
BwiNwb2zFVyThE3ahW3NhyYuEqXm4LjJBY3+K81IyzJD4sH0GLgfUgyw7QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFAbyPJBUJMHUV94lvsfKflkpxPxUMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvQnZJOGtGUWt3ZFJYM2lXLXg4cC1XU25FX0ZRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCwelYAwQA
wemgMA0GCSqGSIb3DQEBCwUAA4IBAQCEStJjlygrS9UpukSto/IvtcDSe3ke5zRU
RgLV693+Oiz5UKFnCLNd7aSn6ETvjjpyoGsXZ8sWrjRiBUMn4Bxxx2LPtvk7lVGd
aHGuL5J1slXDIT9Vd8k6DB8iokRWbe6YkljpyHMxhiaff7lrdz6cTs8kKdNRCd9W
0oyrPkbrqVQU82H4KF+H9C91Q42ggng7dhg7B893/XYJcRpaR437mkJ7zZBbXiF1
CQ/0PXoXR9cALHqvaxxDm77UZ2MVYGOQ6dIJJEOaVHNyneFOvTGHyZPwRjDIJkyV
Qv4ZxfKe+MX3/ps4Hvc/XPP56+UE3n+xGtbNgDQh2OqhMDoG5ZAu
-----END CERTIFICATE-----
Generated at Fri Sep 15 12:41:53 2023 by rpki-client on console-fra.rpki-client.org