Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PIZAUJSKjmSeuhZJCJlZhQx7r8g.roa
File: PIZAUJSKjmSeuhZJCJlZhQx7r8g.roa (raw, json)
Hash identifier: s9rrc84PL18FPpcIee4CiZGSP0u6BauqnkSUN4iH01g=
Subject key identifier: 3C:86:40:50:94:8A:8E:64:9E:BA:16:49:08:99:59:85:0C:7B:AF:C8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018776C431577DBB30AC388EE16D7A41034B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PIZAUJSKjmSeuhZJCJlZhQx7r8g.roa
Signing time: Wed 12 Apr 2023 18:39:41 +0000
ROA not before: Wed 12 Apr 2023 18:39:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 193.233.48.0/24 maxlen: 24
193.233.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:c4:31:57:7d:bb:30:ac:38:8e:e1:6d:7a:41:03:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 12 18:39:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3c864050948a8e649eba1649089959850c7bafc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:28:a7:a0:32:1b:a0:bf:a0:03:9d:32:a6:fa:
a9:31:5b:e6:6c:0c:c4:60:83:5c:be:86:49:fd:9c:
c9:fd:1f:90:29:10:ce:80:95:fd:69:b7:99:26:fc:
4c:fb:d3:34:dd:ba:d2:7e:bb:f8:bd:15:09:33:8d:
16:be:99:db:9d:4b:c4:4e:68:62:bd:a4:9d:a6:3a:
b9:29:b6:4e:38:bc:d5:19:b7:8a:67:bc:50:ab:50:
82:28:b2:51:92:98:19:50:e0:18:c1:bb:82:35:97:
9d:36:36:b4:0d:2d:db:f2:09:48:c3:18:c2:a8:d1:
5d:a7:7e:a6:3c:8c:f6:24:ea:33:9d:89:96:6e:3f:
2f:4a:19:34:0b:7a:13:81:99:ad:f1:a7:5d:65:b3:
1a:cd:22:9f:85:b6:73:7b:95:c1:0a:5a:a5:db:4c:
cf:56:ca:13:b0:13:b6:90:d2:26:37:5d:f8:07:0c:
10:23:42:d5:59:9e:41:28:cf:de:30:34:6a:7a:08:
4a:3a:51:33:d2:55:6f:d1:60:d6:82:94:1e:d2:f4:
d2:8c:92:c2:81:9e:55:ff:dc:b4:07:25:e4:cb:ac:
8b:1e:c0:4d:09:81:52:b1:6b:1c:92:86:ad:0d:3f:
d6:82:f1:5a:af:0e:46:21:a7:fb:4b:73:d5:8c:27:
60:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:86:40:50:94:8A:8E:64:9E:BA:16:49:08:99:59:85:0C:7B:AF:C8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/PIZAUJSKjmSeuhZJCJlZhQx7r8g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
74:70:bf:fc:f6:ec:32:12:a4:86:8d:36:3a:d5:3b:47:82:4a:
5b:eb:c8:81:5f:cf:64:5b:29:f0:d2:e7:74:99:58:f7:8d:2d:
0a:49:f0:8b:01:af:11:94:0b:f7:dc:64:7c:4f:3d:9b:9b:1e:
a1:c6:21:81:0f:89:55:f4:bf:18:c3:7a:a7:94:48:a3:47:b6:
60:0e:59:15:3e:1e:a7:65:48:f6:ef:4a:71:0a:42:1a:df:bf:
29:d9:f1:ed:28:78:27:aa:2e:04:24:ac:45:6b:5c:fb:66:b2:
d9:f2:78:5e:33:6d:aa:0c:ec:22:44:76:26:c5:7b:77:3b:df:
51:78:cc:04:27:0e:ec:af:b5:31:a5:a0:80:d6:3c:c3:d3:7c:
34:ae:1d:0a:bc:99:62:a6:83:00:94:1e:a7:16:a3:50:3f:7e:
4e:e4:80:13:c0:10:aa:73:29:59:67:94:38:af:a2:63:d4:da:
5f:c0:de:46:a5:e0:55:19:d5:a8:99:7a:ca:03:c6:ee:d9:5a:
90:48:79:b2:34:4d:39:32:6b:7a:f3:79:7c:69:6e:0e:45:80:
ab:30:6d:3a:8c:aa:f8:04:b7:8d:e3:44:43:46:9c:de:32:71:
87:7b:ed:cf:25:60:5d:48:2b:dc:fd:9f:da:61:a4:84:fb:b2:
4c:1b:e8:6c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYd2xDFXfbswrDiO4W16QQNLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwNDEyMTgzOTQxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYzg2NDA1MDk0OGE4ZTY0OWViYTE2NDkwODk5NTk4NTBjN2JhZmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyinoDIboL+gA50ypvqpMVvmbAzE
YINcvoZJ/ZzJ/R+QKRDOgJX9abeZJvxM+9M03brSfrv4vRUJM40WvpnbnUvETmhi
vaSdpjq5KbZOOLzVGbeKZ7xQq1CCKLJRkpgZUOAYwbuCNZedNja0DS3b8glIwxjC
qNFdp36mPIz2JOoznYmWbj8vShk0C3oTgZmt8addZbMazSKfhbZze5XBClql20zP
VsoTsBO2kNImN134BwwQI0LVWZ5BKM/eMDRqeghKOlEz0lVv0WDWgpQe0vTSjJLC
gZ5V/9y0ByXky6yLHsBNCYFSsWsckoatDT/WgvFarw5GIaf7S3PVjCdgkQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFDyGQFCUio5knroWSQiZWYUMe6/IMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvUElaQVVKU0tqbVNldWhaSkNKbFpoUXg3cjhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwekwMA0G
CSqGSIb3DQEBCwUAA4IBAQB0cL/89uwyEqSGjTY61TtHgkpb68iBX89kWynw0ud0
mVj3jS0KSfCLAa8RlAv33GR8Tz2bmx6hxiGBD4lV9L8Yw3qnlEijR7ZgDlkVPh6n
ZUj270pxCkIa378p2fHtKHgnqi4EJKxFa1z7ZrLZ8nheM22qDOwiRHYmxXt3O99R
eMwEJw7sr7UxpaCA1jzD03w0rh0KvJlipoMAlB6nFqNQP35O5IATwBCqcylZZ5Q4
r6Jj1NpfwN5GpeBVGdWomXrKA8bu2VqQSHmyNE05Mmt683l8aW4ORYCrMG06jKr4
BLeN40RDRpzeMnGHe+3PJWBdSCvc/Z/aYaSE+7JMG+hs
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org