Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f5IjmG_gVYp-WrVIHzfGoQOEH6Y.roa
File: f5IjmG_gVYp-WrVIHzfGoQOEH6Y.roa (raw, json)
Hash identifier: 5brHCUBuApxX+HuugSgIeieB1AYpQf0KxQ68yA0h1ao=
Subject key identifier: 7F:92:23:98:6F:E0:55:8A:7E:5A:B5:48:1F:37:C6:A1:03:84:1F:A6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DBF5C2093F44B2CFDC2037A31381
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f5IjmG_gVYp-WrVIHzfGoQOEH6Y.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8325
IP address blocks: 193.233.50.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:db:f5:c2:09:3f:44:b2:cf:dc:20:37:a3:13:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f9223986fe0558a7e5ab5481f37c6a103841fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d1:9e:d6:6b:8a:4d:15:13:21:b2:2e:52:c6:
7d:5f:c3:c7:16:1c:30:e5:4a:a7:68:ae:cd:a9:47:
69:67:4d:63:04:d2:69:90:d3:9f:aa:23:de:4b:e1:
3f:0e:72:65:a8:7e:50:5d:cb:f6:3c:56:ef:8d:c5:
b5:19:d0:fd:b5:97:0e:93:29:c8:56:d7:81:63:73:
cf:40:c0:f3:6e:3a:7e:3f:2f:96:a4:6c:7b:cf:d2:
91:47:7e:be:3e:f4:2a:ba:f0:6f:e4:7e:d3:5d:f7:
b1:35:d1:d2:56:35:a9:0d:ac:f5:73:1e:19:6a:aa:
9e:2b:17:d5:a6:28:d5:f6:3a:3b:f1:2a:d7:9a:3c:
ac:0e:7c:47:de:f9:d8:9a:c5:ff:3c:e9:f1:12:3b:
16:1c:b8:59:85:7d:a0:72:f8:fb:16:cd:b5:f8:16:
2f:45:98:92:ae:71:f9:73:c1:bb:05:d5:ab:6a:87:
e4:ad:b4:5e:d6:37:a3:c1:39:b7:a9:31:3c:5e:f9:
a9:89:ae:b2:a7:ac:e4:5b:57:d4:5f:81:c7:ca:49:
b8:17:63:1d:58:9b:21:f3:46:07:0d:22:83:59:3d:
a8:d9:31:a7:93:77:ee:9b:ed:a5:8c:88:9d:8b:48:
ab:17:29:a4:cb:41:72:83:b0:fe:77:87:34:c9:fd:
16:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:92:23:98:6F:E0:55:8A:7E:5A:B5:48:1F:37:C6:A1:03:84:1F:A6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/f5IjmG_gVYp-WrVIHzfGoQOEH6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.50.0/23
Signature Algorithm: sha256WithRSAEncryption
69:6d:5d:68:7a:d1:d5:5b:36:36:9a:39:8a:70:19:15:76:45:
2d:58:c4:11:c2:05:bf:dd:d8:b5:b1:1c:8d:18:13:68:af:74:
9a:d2:54:d3:6f:b3:bd:d6:a2:a8:88:42:21:f3:02:c4:bd:86:
9e:83:a7:5c:92:07:38:f8:26:d1:77:92:f8:8c:9a:e2:25:47:
63:71:dc:28:e4:64:eb:32:52:c7:da:da:00:e9:01:dd:ed:ef:
3d:5f:5a:92:e9:50:c4:19:8a:da:27:f1:e3:a9:a1:f9:76:74:
55:ee:a6:e1:ca:8d:b9:b5:72:d3:2e:ba:89:77:8c:4f:33:2b:
c4:0f:13:41:53:1e:40:2c:b9:b2:28:c4:cf:45:6d:2c:fe:f2:
d9:5e:be:ee:08:aa:df:d9:1e:48:8c:e3:d2:26:eb:ad:55:e5:
0e:25:62:00:5d:7a:e5:ab:b5:f8:3c:9b:78:78:3b:67:5b:c3:
15:27:8c:49:5e:27:19:cf:9d:2a:b2:99:8a:63:f8:34:d2:ba:
fa:d3:b3:47:46:fc:83:2b:11:7c:cb:88:bb:aa:de:9b:fe:d7:
91:7c:53:a3:2b:ac:74:11:1c:d3:23:d7:28:3b:68:22:9e:92:
b4:2e:cd:bd:5d:70:4b:74:f4:59:c8:60:66:83:d0:4e:07:e4:
fc:6a:87:39
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJtv1wgk/RLLP3CA3oxOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNDU1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjkyMjM5ODZmZTA1NThhN2U1YWI1NDgxZjM3YzZhMTAzODQxZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptGe1muKTRUTIbIuUsZ9X8PHFhww
5UqnaK7NqUdpZ01jBNJpkNOfqiPeS+E/DnJlqH5QXcv2PFbvjcW1GdD9tZcOkynI
VteBY3PPQMDzbjp+Py+WpGx7z9KRR36+PvQquvBv5H7TXfexNdHSVjWpDaz1cx4Z
aqqeKxfVpijV9jo78SrXmjysDnxH3vnYmsX/POnxEjsWHLhZhX2gcvj7Fs21+BYv
RZiSrnH5c8G7BdWraofkrbRe1jejwTm3qTE8Xvmpia6yp6zkW1fUX4HHykm4F2Md
WJsh80YHDSKDWT2o2TGnk3fum+2ljIidi0irFymky0Fyg7D+d4c0yf0WTQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFH+SI5hv4FWKflq1SB83xqEDhB+mMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvZjVJam1HX2dWWXAtV3JWSUh6ZkdvUU9FSDZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwekyMA0G
CSqGSIb3DQEBCwUAA4IBAQBpbV1oetHVWzY2mjmKcBkVdkUtWMQRwgW/3di1sRyN
GBNor3Sa0lTTb7O91qKoiEIh8wLEvYaeg6dckgc4+CbRd5L4jJriJUdjcdwo5GTr
MlLH2toA6QHd7e89X1qS6VDEGYraJ/HjqaH5dnRV7qbhyo25tXLTLrqJd4xPMyvE
DxNBUx5ALLmyKMTPRW0s/vLZXr7uCKrf2R5IjOPSJuutVeUOJWIAXXrlq7X4PJt4
eDtnW8MVJ4xJXicZz50qspmKY/g00rr607NHRvyDKxF8y4i7qt6b/teRfFOjK6x0
ERzTI9coO2ginpK0Ls29XXBLdPRZyGBmg9BOB+T8aoc5
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org