Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HvYytwTSAw30O904HQjNti6qv5Y.roa
File: HvYytwTSAw30O904HQjNti6qv5Y.roa (raw, json)
Hash identifier: lvKPsuioiNEdx+MDnDl/MJQenVQSyEq5NGiUSSt/Ocs=
Subject key identifier: 1E:F6:32:B7:04:D2:03:0D:F4:3B:DD:38:1D:08:CD:B6:2E:AA:BF:96
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018BA9344A47208ECB6E6B2320DF88D7A109
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HvYytwTSAw30O904HQjNti6qv5Y.roa
Signing time: Tue 07 Nov 2023 09:54:18 +0000
ROA not before: Tue 07 Nov 2023 09:54:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 193.233.19.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:a9:34:4a:47:20:8e:cb:6e:6b:23:20:df:88:d7:a1:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 7 09:54:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1ef632b704d2030df43bdd381d08cdb62eaabf96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:04:a6:2c:39:21:39:69:bf:01:18:a3:e8:a2:
de:a4:98:92:db:a4:e9:89:ce:77:91:43:f8:55:de:
6e:8e:d3:5a:15:06:2d:c2:ec:ef:86:fc:c3:e3:22:
0c:62:cb:96:2a:d6:7c:6e:5b:b8:1c:47:ff:88:1b:
8b:46:4b:af:7e:78:b5:ec:db:a4:a5:8e:90:ca:1b:
a3:5a:76:87:84:3f:89:3e:dd:73:34:50:1a:8d:f1:
08:d8:f6:7e:d4:4f:45:89:55:b9:79:b1:28:0c:7a:
b9:bf:39:45:a7:34:7f:a8:d9:5b:c1:62:9b:72:9e:
00:fd:0c:62:ee:89:86:42:da:dc:1b:e2:db:83:54:
b6:44:07:65:05:ec:58:62:c9:6c:54:9f:c0:ea:f1:
52:dc:f1:ab:8f:f4:29:ad:25:cb:df:1d:c9:51:0e:
e4:3d:59:d1:f2:d7:59:be:1f:3d:b0:b7:90:3a:9d:
e6:ce:52:b3:39:49:77:6b:9e:0a:7a:97:32:a0:b4:
94:a3:13:45:f8:78:b4:4f:3c:84:82:ea:82:46:68:
73:dd:65:d3:75:b9:90:d4:9c:da:13:c7:c1:9c:16:
27:01:81:c8:0e:dc:69:93:3c:92:c9:47:3c:61:b3:
e2:3e:44:b4:64:a8:05:1c:76:8c:0c:df:0a:57:5b:
95:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F6:32:B7:04:D2:03:0D:F4:3B:DD:38:1D:08:CD:B6:2E:AA:BF:96
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HvYytwTSAw30O904HQjNti6qv5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.19.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:1c:20:14:05:45:e5:ff:12:23:06:c6:2f:5c:61:69:fa:28:
b2:b4:bf:da:68:8f:f6:b5:03:dc:af:ea:af:2e:33:b3:82:58:
93:e5:ab:6d:0d:9e:da:58:b2:54:fe:b6:cf:b9:8d:47:32:40:
79:69:28:62:d6:dd:ad:f1:f0:50:04:dd:40:73:7a:38:f8:75:
22:d6:a9:4e:72:47:eb:dd:2f:1e:6d:f9:45:45:7f:80:28:dd:
10:00:2d:bc:7c:d4:5b:f6:4b:d8:22:bf:ab:d9:59:ca:1b:ae:
10:16:28:03:6c:ee:47:3c:c0:a4:6b:ff:56:bd:50:f7:28:55:
84:c1:f6:c9:e4:64:0b:3e:9e:78:0b:c4:f3:e9:b1:d6:60:dd:
93:46:e1:1c:33:0e:d8:9f:39:76:82:d5:7f:f5:83:c6:28:0d:
e6:d1:82:d0:c2:73:73:10:b2:a1:f7:07:64:f4:51:97:96:78:
11:a1:04:f1:fb:fc:70:0c:55:47:e0:06:f8:c1:f3:2c:bc:39:
1f:0f:a9:7b:5d:2f:21:01:87:ac:6f:68:34:51:bc:58:57:3a:
e8:3f:ec:ba:45:0b:8e:cb:90:45:7f:66:cc:6d:a2:65:51:4f:
87:b7:1f:b8:0e:32:cb:d1:3c:44:da:63:9e:4d:e8:35:3b:ab:
32:e2:06:e2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYupNEpHII7LbmsjIN+I16EJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMxMTA3MDk1NDE4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZWY2MzJiNzA0ZDIwMzBkZjQzYmRkMzgxZDA4Y2RiNjJlYWFiZjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQSmLDkhOWm/ARij6KLepJiS26Tp
ic53kUP4Vd5ujtNaFQYtwuzvhvzD4yIMYsuWKtZ8blu4HEf/iBuLRkuvfni17Nuk
pY6QyhujWnaHhD+JPt1zNFAajfEI2PZ+1E9FiVW5ebEoDHq5vzlFpzR/qNlbwWKb
cp4A/Qxi7omGQtrcG+Lbg1S2RAdlBexYYslsVJ/A6vFS3PGrj/QprSXL3x3JUQ7k
PVnR8tdZvh89sLeQOp3mzlKzOUl3a54KepcyoLSUoxNF+Hi0TzyEguqCRmhz3WXT
dbmQ1JzaE8fBnBYnAYHIDtxpkzySyUc8YbPiPkS0ZKgFHHaMDN8KV1uVTwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB72MrcE0gMN9DvdOB0IzbYuqr+WMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvSHZZeXR3VFNBdzMwTzkwNEhRak50aTZxdjVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwekTMA0G
CSqGSIb3DQEBCwUAA4IBAQBqHCAUBUXl/xIjBsYvXGFp+iiytL/aaI/2tQPcr+qv
LjOzgliT5attDZ7aWLJU/rbPuY1HMkB5aShi1t2t8fBQBN1Ac3o4+HUi1qlOckfr
3S8ebflFRX+AKN0QAC28fNRb9kvYIr+r2VnKG64QFigDbO5HPMCka/9WvVD3KFWE
wfbJ5GQLPp54C8Tz6bHWYN2TRuEcMw7Ynzl2gtV/9YPGKA3m0YLQwnNzELKh9wdk
9FGXlngRoQTx+/xwDFVH4Ab4wfMsvDkfD6l7XS8hAYesb2g0UbxYVzroP+y6RQuO
y5BFf2bMbaJlUU+Htx+4DjLL0TxE2mOeTeg1O6sy4gbi
-----END CERTIFICATE-----
Generated at Wed Dec 6 21:13:29 2023 by rpki-client on console-fra.rpki-client.org