Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kcidK_dDL5xApzgtoJiw3KndGHE.roa
File: kcidK_dDL5xApzgtoJiw3KndGHE.roa (raw, json)
Hash identifier: BTWzXxgR674Z0ODYj1BiMXLAwwcxiln4D6mWjzgmCA4=
Subject key identifier: 91:C8:9D:2B:F7:43:2F:9C:40:A7:38:2D:A0:98:B0:DC:A9:DD:18:71
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26E109B01F284B40E9160AC36FF7F7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kcidK_dDL5xApzgtoJiw3KndGHE.roa
Signing time: Sun 01 Jan 2023 21:04:56 +0000
ROA not before: Sun 01 Jan 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42007
IP address blocks: 193.233.32.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e1:09:b0:1f:28:4b:40:e9:16:0a:c3:6f:f7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=91c89d2bf7432f9c40a7382da098b0dca9dd1871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:82:d4:44:97:31:ec:d8:85:c0:86:62:7f:75:
58:62:a9:82:b2:48:74:c2:4e:9e:90:3b:90:7f:3a:
67:c0:e5:71:0b:bf:ab:63:34:66:f6:51:96:f6:c8:
e1:4f:a5:fd:d3:60:89:2b:19:a7:2d:dc:0e:17:84:
55:48:d2:b7:57:3c:9f:37:f2:bd:2d:5b:d6:5c:5c:
7b:9b:0b:68:43:9d:de:32:04:bc:4c:62:1d:79:b5:
43:1d:fa:d3:1e:c0:f0:88:1d:cd:38:ea:7a:3a:0a:
a9:53:be:1e:cb:23:c3:62:2f:d4:c6:49:b8:c1:12:
12:65:69:79:0e:22:bf:a6:5e:65:15:76:76:ef:c5:
07:d1:8a:9d:3a:6e:4a:a7:86:91:82:1a:14:eb:f1:
7d:87:46:d7:ef:9c:b9:00:2e:eb:e7:d5:40:f1:9c:
0a:90:f7:12:76:4c:e4:74:31:ea:f4:40:31:9b:18:
8e:1c:37:78:8f:07:2e:0a:d3:8e:70:12:3b:c9:4b:
e6:c0:8f:a0:69:70:ca:8f:c6:f1:37:8c:24:5d:17:
22:11:06:bf:6b:9d:e5:93:ba:09:e4:12:b5:93:1b:
38:f2:c2:a7:00:8f:8e:37:89:a2:eb:0e:b6:e1:ca:
4e:7e:2e:71:fb:9c:7e:2f:9a:e7:fc:f3:37:47:d8:
a3:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:C8:9D:2B:F7:43:2F:9C:40:A7:38:2D:A0:98:B0:DC:A9:DD:18:71
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/kcidK_dDL5xApzgtoJiw3KndGHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.32.0/20
Signature Algorithm: sha256WithRSAEncryption
35:dc:9b:b2:26:b5:f1:a9:f5:9d:71:45:e0:9a:05:6e:d1:ea:
d4:18:19:e9:8f:e1:f2:30:28:25:ce:08:5e:9c:f4:fe:d5:b9:
fd:b5:13:11:f9:81:37:1a:17:9e:29:6d:40:63:49:06:d3:0b:
e8:9d:66:b5:92:04:61:43:92:2f:ee:03:93:30:15:13:44:c6:
be:4f:44:80:a0:35:20:8b:35:b0:d7:2b:38:ae:2d:db:cc:b6:
4b:d0:d0:6f:8a:a3:2d:c6:fe:8d:e3:34:3c:cd:5d:fa:0d:e6:
cd:87:e1:d5:05:45:ac:f2:bf:04:b2:8d:54:de:c5:ac:15:b2:
ff:1f:29:67:0c:e3:1d:08:3e:e6:cb:1b:c2:74:f2:88:da:63:
ca:17:aa:89:f2:3a:13:db:c9:81:67:86:a8:9b:4a:54:30:59:
bb:98:4d:c1:ca:e4:cf:c3:96:3a:dd:3f:02:4f:9a:13:9d:2d:
60:06:f3:3a:d0:7f:7b:68:39:3b:e0:9e:7f:ad:ad:5a:29:c3:
31:0b:65:1c:99:22:74:34:69:3d:f2:cd:a5:f9:82:af:ce:5c:
ff:43:ee:22:72:5e:34:57:fd:b2:74:44:78:01:c8:c0:3a:de:
a6:f5:b0:ee:d4:6a:8e:5d:a5:f9:cc:6c:a1:2c:fc:3b:16:9d:
e1:05:b8:f2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvJuEJsB8oS0DpFgrDb/f3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMTAxMjEwNDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5MWM4OWQyYmY3NDMyZjljNDBhNzM4MmRhMDk4YjBkY2E5ZGQxODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoLURJcx7NiFwIZif3VYYqmCskh0
wk6ekDuQfzpnwOVxC7+rYzRm9lGW9sjhT6X902CJKxmnLdwOF4RVSNK3VzyfN/K9
LVvWXFx7mwtoQ53eMgS8TGIdebVDHfrTHsDwiB3NOOp6OgqpU74eyyPDYi/Uxkm4
wRISZWl5DiK/pl5lFXZ278UH0YqdOm5Kp4aRghoU6/F9h0bX75y5AC7r59VA8ZwK
kPcSdkzkdDHq9EAxmxiOHDd4jwcuCtOOcBI7yUvmwI+gaXDKj8bxN4wkXRciEQa/
a53lk7oJ5BK1kxs48sKnAI+ON4mi6w624cpOfi5x+5x+L5rn/PM3R9ijjQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJHInSv3Qy+cQKc4LaCYsNyp3RhxMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEva2NpZEtfZERMNXhBcHpndG9KaXczS25kR0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwekgMA0G
CSqGSIb3DQEBCwUAA4IBAQA13JuyJrXxqfWdcUXgmgVu0erUGBnpj+HyMCglzghe
nPT+1bn9tRMR+YE3GheeKW1AY0kG0wvonWa1kgRhQ5Iv7gOTMBUTRMa+T0SAoDUg
izWw1ys4ri3bzLZL0NBviqMtxv6N4zQ8zV36DebNh+HVBUWs8r8Eso1U3sWsFbL/
HylnDOMdCD7myxvCdPKI2mPKF6qJ8joT28mBZ4aom0pUMFm7mE3ByuTPw5Y63T8C
T5oTnS1gBvM60H97aDk74J5/ra1aKcMxC2UcmSJ0NGk98s2l+YKvzlz/Q+4icl40
V/2ydER4AcjAOt6m9bDu1GqOXaX5zGyhLPw7Fp3hBbjy
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org