Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WMz4fQn1RHVzvz0icKbcWLRe6R0.roa
File: WMz4fQn1RHVzvz0icKbcWLRe6R0.roa (raw, json)
Hash identifier: LHj2BYz+mARYdA3ilVe5Eoh9Pv/RPzg8GB1byCBb2vw=
Subject key identifier: 58:CC:F8:7D:09:F5:44:75:73:BF:3D:22:70:A6:DC:58:B4:5E:E9:1D
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018B911331E7ED874F89FCB3D1F289E9A8F3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WMz4fQn1RHVzvz0icKbcWLRe6R0.roa
Signing time: Thu 02 Nov 2023 17:27:16 +0000
ROA not before: Thu 02 Nov 2023 17:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.233.19.0/24 maxlen: 24
193.233.197.0/24 maxlen: 24
193.233.100.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:13:31:e7:ed:87:4f:89:fc:b3:d1:f2:89:e9:a8:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 2 17:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=58ccf87d09f5447573bf3d2270a6dc58b45ee91d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3a:74:d4:2a:d5:f1:f5:bc:e9:ac:6d:99:aa:
29:4c:f7:f8:37:5b:22:cd:36:88:02:8d:1e:a2:89:
94:a0:8c:9c:03:e6:66:b5:9a:6d:ce:79:c1:83:3b:
10:f8:05:5d:c0:87:b4:d0:fe:30:56:69:86:8e:65:
6a:81:0d:63:fb:8c:6d:52:b9:20:16:d6:e4:91:86:
c2:bd:1f:63:6b:d3:1c:58:83:a7:11:b1:31:aa:bd:
53:9b:09:48:50:8a:e4:2a:80:89:c8:b4:7d:4c:cf:
fb:ed:5c:f5:73:6c:91:d8:10:bb:f6:59:01:8d:93:
05:8e:13:de:e0:5d:d4:82:4a:f3:2e:db:62:dd:2f:
5d:1c:68:20:b1:61:36:22:3e:c8:7f:27:3d:c5:33:
a6:cd:60:d1:30:19:e8:be:f9:e0:4e:e7:d9:e6:01:
ac:95:9c:c3:d5:ac:cc:6c:64:62:ce:b8:e9:a2:4f:
67:a8:b8:51:0a:76:30:66:ff:6f:b6:ea:16:1a:5f:
4b:e2:a0:af:6d:88:15:e7:ae:d3:18:40:64:87:20:
af:3d:26:11:7c:62:33:9b:9b:72:95:67:fb:5e:52:
8d:f2:ad:f9:e4:83:39:18:ca:9a:eb:7e:e4:78:4f:
b3:c2:ec:20:d5:1e:4b:dc:c2:5d:d7:43:60:74:0c:
24:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CC:F8:7D:09:F5:44:75:73:BF:3D:22:70:A6:DC:58:B4:5E:E9:1D
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/WMz4fQn1RHVzvz0icKbcWLRe6R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.19.0/24
193.233.100.0/22
193.233.197.0/24
Signature Algorithm: sha256WithRSAEncryption
20:f8:7b:c6:fb:79:da:b5:0b:18:56:9d:e3:4d:5f:d0:1e:c6:
9a:4e:75:70:ce:7c:59:0b:c7:3c:a3:57:a9:42:10:a1:87:76:
d7:2a:84:0a:13:74:60:8d:96:24:25:ef:f5:58:cd:72:a4:1a:
5f:15:e5:00:89:2e:18:86:cd:d3:6e:87:b2:3c:24:13:e9:1f:
29:8b:07:d0:49:0a:cb:0b:b8:f0:53:eb:df:5a:fa:f8:e0:0d:
ed:b4:02:a1:75:94:9f:14:fc:06:b3:64:93:74:b6:f6:16:c6:
69:ed:bb:7d:b5:6d:5f:dc:48:61:15:19:1f:8b:b6:43:74:aa:
20:a5:ca:76:d0:b5:75:9e:18:cf:44:72:3c:ef:c5:46:03:f8:
d5:b2:f8:24:be:d9:ff:00:d1:03:20:2e:04:f4:84:f7:37:93:
a7:c3:94:53:91:cd:04:e5:5e:24:0c:69:a9:27:4b:17:96:cd:
02:08:56:95:ce:e1:64:ea:e0:3e:07:b8:34:fe:cd:fa:75:40:
8b:31:85:e1:7f:54:ac:2d:84:0d:1e:66:ee:16:87:29:6e:2a:
2d:ff:e4:bc:7c:c7:b8:ad:68:e4:4e:10:91:59:44:b8:79:b5:
2a:5a:27:88:50:9b:45:77:53:93:1b:cf:d7:98:6f:8f:c4:4d:
5e:d1:d1:c9
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAYuREzHn7YdPifyz0fKJ6ajzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMxMTAyMTcyNzE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1OGNjZjg3ZDA5ZjU0NDc1NzNiZjNkMjI3MGE2ZGM1OGI0NWVlOTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnjp01CrV8fW86axtmaopTPf4N1si
zTaIAo0eoomUoIycA+ZmtZptznnBgzsQ+AVdwIe00P4wVmmGjmVqgQ1j+4xtUrkg
FtbkkYbCvR9ja9McWIOnEbExqr1TmwlIUIrkKoCJyLR9TM/77Vz1c2yR2BC79lkB
jZMFjhPe4F3UgkrzLtti3S9dHGggsWE2Ij7Ifyc9xTOmzWDRMBnovvngTufZ5gGs
lZzD1azMbGRizrjpok9nqLhRCnYwZv9vtuoWGl9L4qCvbYgV567TGEBkhyCvPSYR
fGIzm5tylWf7XlKN8q355IM5GMqa637keE+zwuwg1R5L3MJd10NgdAwk5wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFFjM+H0J9UR1c789InCm3Fi0XukdMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvV016NGZRbjFSSFZ6dnowaWNLYmNXTFJlNlIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAwekTAwQC
welkAwQAwenFMA0GCSqGSIb3DQEBCwUAA4IBAQAg+HvG+3natQsYVp3jTV/QHsaa
TnVwznxZC8c8o1epQhChh3bXKoQKE3RgjZYkJe/1WM1ypBpfFeUAiS4Yhs3Tboey
PCQT6R8piwfQSQrLC7jwU+vfWvr44A3ttAKhdZSfFPwGs2STdLb2FsZp7bt9tW1f
3EhhFRkfi7ZDdKogpcp20LV1nhjPRHI878VGA/jVsvgkvtn/ANEDIC4E9IT3N5On
w5RTkc0E5V4kDGmpJ0sXls0CCFaVzuFk6uA+B7g0/s36dUCLMYXhf1SsLYQNHmbu
Focpbiot/+S8fMe4rWjkThCRWUS4ebUqWieIUJtFd1OTG8/XmG+PxE1e0dHJ
-----END CERTIFICATE-----
Generated at Tue Nov 7 10:46:56 2023 by rpki-client on console-fra.rpki-client.org