Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jPUC_-sIz99UIPyixXtVX47YqZU.roa
File: jPUC_-sIz99UIPyixXtVX47YqZU.roa (raw, json)
Hash identifier: 6BiUIhV3K6bCTiUNGAC22qLhk+8SPRKlymKmsraorec=
Subject key identifier: 8C:F5:02:FF:EB:08:CF:DF:54:20:FC:A2:C5:7B:55:5F:8E:D8:A9:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F69BBEF73ECF62784532A8419D12
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jPUC_-sIz99UIPyixXtVX47YqZU.roa
Signing time: Sun 01 Jan 2023 21:05:02 +0000
ROA not before: Sun 01 Jan 2023 21:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213332
IP address blocks: 193.233.164.0/24 maxlen: 24
193.233.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f6:9b:be:f7:3e:cf:62:78:45:32:a8:41:9d:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8cf502ffeb08cfdf5420fca2c57b555f8ed8a995
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:08:4f:e8:a3:3e:c7:2a:72:6d:fe:27:69:
0a:a8:e5:e2:8d:1c:8f:d1:62:77:66:67:d2:71:40:
6e:d4:38:db:ff:bf:f3:26:d5:b5:50:28:a7:5b:51:
6c:21:42:9b:2a:54:68:5e:6e:57:95:4a:ce:6e:23:
50:ab:80:13:25:ba:f9:f1:be:e5:cb:72:c3:dd:9c:
73:af:fe:fb:f6:d2:34:af:6a:32:89:7c:cf:0e:d0:
1a:4e:62:e7:64:11:bb:93:ed:03:fa:be:c4:b0:60:
9a:6f:62:8e:85:9a:20:6a:24:ae:5e:3f:3e:a9:2b:
2a:c1:80:6d:12:67:66:0d:0f:b3:10:e6:8b:50:ff:
05:05:40:f0:b0:6d:eb:1a:42:1e:13:b1:e1:ff:f3:
3d:9c:38:3e:fd:04:07:75:a5:a2:a4:c0:31:8a:36:
71:f7:c5:ec:09:b9:e6:dd:69:a7:ae:69:f9:fd:9d:
60:3b:29:e3:03:97:66:3d:97:53:b8:a6:79:f6:4d:
26:cc:b9:41:f3:2e:90:d2:ea:d7:08:76:03:87:c4:
64:31:47:97:98:25:f4:39:73:90:d2:f4:5b:87:a1:
08:c4:fd:05:59:3e:b0:f1:41:b0:f9:72:ac:1e:3f:
0e:f1:8f:3e:41:59:70:ae:7e:2e:a7:a7:c6:44:40:
8d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:F5:02:FF:EB:08:CF:DF:54:20:FC:A2:C5:7B:55:5F:8E:D8:A9:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/jPUC_-sIz99UIPyixXtVX47YqZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.163.0-193.233.164.255
Signature Algorithm: sha256WithRSAEncryption
66:ad:44:36:95:42:b2:6d:47:85:e0:d4:5c:c0:cd:01:53:b2:
bc:68:e0:98:4c:b7:5d:8e:e1:ed:0f:62:d3:57:aa:59:65:96:
0e:a3:c6:d2:ed:07:f0:50:41:1f:bd:8c:99:f0:2f:1e:6c:f0:
43:7a:3a:68:9d:65:10:8f:18:39:07:d9:9a:0f:30:a9:b1:80:
51:83:a4:b6:4b:91:1c:e8:b4:50:b5:b5:4c:a0:6d:66:63:40:
16:09:a0:41:28:84:0f:c8:a3:e7:48:5b:83:4d:08:dc:96:58:
6f:8a:5f:6f:b9:65:00:f7:a3:47:07:7a:54:39:ed:80:1c:18:
2e:ac:21:7e:1c:dc:2b:eb:9a:87:5b:12:68:69:8b:3d:e1:b5:
8e:af:ba:1e:85:eb:ff:20:5d:78:0c:c7:fc:7e:04:3a:da:25:
da:8d:f8:a7:3a:4f:50:9c:3d:7b:7c:03:4d:2e:23:50:db:ec:
8e:3d:9a:e9:9f:93:36:ab:5c:9e:4d:2c:8d:10:16:76:f2:07:
ab:14:f8:ef:a7:5f:2f:aa:07:25:c1:36:ef:d5:a2:f3:c4:d3:
45:bd:05:56:04:0b:b4:91:e8:85:a4:e1:ce:2d:cf:0a:db:c0:
d1:b6:f3:db:95:dc:b8:74:d9:f1:3a:30:da:90:04:e1:bb:5d:
32:ee:54:ea
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYVvJvabvvc+z2J4RTKoQZ0SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNTAyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4Y2Y1MDJmZmViMDhjZmRmNTQyMGZjYTJjNTdiNTU1ZjhlZDhhOTk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4wIT+ijPscqcm3+J2kKqOXijRyP
0WJ3ZmfScUBu1Djb/7/zJtW1UCinW1FsIUKbKlRoXm5XlUrObiNQq4ATJbr58b7l
y3LD3Zxzr/779tI0r2oyiXzPDtAaTmLnZBG7k+0D+r7EsGCab2KOhZogaiSuXj8+
qSsqwYBtEmdmDQ+zEOaLUP8FBUDwsG3rGkIeE7Hh//M9nDg+/QQHdaWipMAxijZx
98XsCbnm3Wmnrmn5/Z1gOynjA5dmPZdTuKZ59k0mzLlB8y6Q0urXCHYDh8RkMUeX
mCX0OXOQ0vRbh6EIxP0FWT6w8UGw+XKsHj8O8Y8+QVlwrn4up6fGRECNXQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFIz1Av/rCM/fVCD8osV7VV+O2KmVMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvalBVQ18tc0l6OTlVSVB5aXhYdFZYNDdZcVpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADB6aMD
BADB6aQwDQYJKoZIhvcNAQELBQADggEBAGatRDaVQrJtR4Xg1FzAzQFTsrxo4JhM
t12O4e0PYtNXqllllg6jxtLtB/BQQR+9jJnwLx5s8EN6OmidZRCPGDkH2ZoPMKmx
gFGDpLZLkRzotFC1tUygbWZjQBYJoEEohA/Io+dIW4NNCNyWWG+KX2+5ZQD3o0cH
elQ57YAcGC6sIX4c3CvrmodbEmhpiz3htY6vuh6F6/8gXXgMx/x+BDraJdqN+Kc6
T1CcPXt8A00uI1Db7I49mumfkzarXJ5NLI0QFnbyB6sU+O+nXy+qByXBNu/VovPE
00W9BVYEC7SR6IWk4c4tzwrbwNG289uV3Lh02fE6MNqQBOG7XTLuVOo=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org