Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/moX16R7aOa-77aehO3t4C61o7Og.roa
File: moX16R7aOa-77aehO3t4C61o7Og.roa (raw, json)
Hash identifier: lL/17uQU5KQu6SMFEfUSVX+IgNR3ywjRwL+wuLDS/rs=
Subject key identifier: 9A:85:F5:E9:1E:DA:39:AF:BB:ED:A7:A1:3B:7B:78:0B:AD:68:EC:E8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01872D55AF40ACF1ED46221B2AEED1ADC75F
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/moX16R7aOa-77aehO3t4C61o7Og.roa
Signing time: Wed 29 Mar 2023 12:26:42 +0000
ROA not before: Wed 29 Mar 2023 12:26:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210644
IP address blocks: 193.233.232.0/24 maxlen: 24
193.233.233.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:2d:55:af:40:ac:f1:ed:46:22:1b:2a:ee:d1:ad:c7:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 29 12:26:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a85f5e91eda39afbbeda7a13b7b780bad68ece8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:b3:07:80:86:f6:a1:63:e5:40:62:ef:dd:0a:
7f:32:9c:be:8a:77:1b:b9:57:77:9c:cc:1b:a5:74:
30:8b:02:22:3d:a1:17:ad:0f:92:0c:80:3c:8b:f6:
c9:08:ce:df:0d:34:2e:fd:7a:01:19:11:68:b5:a9:
9b:27:66:76:85:69:aa:00:50:58:7b:12:f2:26:ba:
88:de:58:ca:7c:25:50:e3:f4:9b:f7:a1:13:e7:1e:
44:00:1b:d5:cb:91:ef:11:3a:00:cf:64:f6:d5:4d:
07:9f:e2:17:5d:eb:ca:09:88:4f:ae:9c:1a:8b:da:
a4:66:6a:48:93:8e:41:67:55:13:01:d5:31:58:ba:
fc:4e:76:f9:53:c7:f4:63:7d:8c:49:0b:ff:b3:96:
54:82:ff:a4:b9:d8:0f:71:25:8b:4c:25:db:b4:73:
59:a9:76:b5:33:80:71:aa:d0:5a:2f:05:a9:6b:2d:
6a:1f:9a:6d:29:94:57:55:e5:69:58:95:9a:35:3a:
cd:21:a5:e4:9a:b8:87:22:b9:ec:4c:82:39:b3:3e:
34:26:ef:16:91:05:84:d2:83:70:3a:c7:11:c1:b7:
61:ba:4b:fe:af:66:8b:07:25:17:90:a1:3d:3d:13:
c5:8c:ac:3a:b4:99:8d:6b:35:5f:0c:7d:8c:58:1a:
e7:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:85:F5:E9:1E:DA:39:AF:BB:ED:A7:A1:3B:7B:78:0B:AD:68:EC:E8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/moX16R7aOa-77aehO3t4C61o7Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
02:60:9a:45:e5:67:0f:f0:55:75:b5:78:aa:0f:6b:f2:8a:a7:
36:1d:1d:25:60:02:05:54:a3:0e:d7:e7:64:4c:50:45:e9:bb:
a6:10:92:5f:f6:be:d0:e5:99:70:3d:70:55:bd:aa:23:3e:91:
62:08:81:44:98:bb:6c:60:a8:9a:08:59:9c:8d:6c:05:41:fd:
ed:79:76:2a:78:3d:43:32:bb:f2:d8:89:e6:ca:2f:d8:a1:b9:
36:a1:cd:4e:95:f5:93:2d:03:65:86:e3:e1:7c:bb:d1:c6:0e:
e3:c5:66:40:43:5c:44:65:79:c8:8f:a9:fb:6a:0a:07:32:ca:
03:ad:ce:52:46:c1:e1:7e:22:67:f6:42:a2:c5:1d:90:1d:5b:
0b:85:21:b0:4b:76:24:8f:b8:13:be:09:b2:37:02:c6:83:f6:
c0:71:29:96:02:1b:25:7f:3c:c9:c4:53:60:bf:99:12:9c:58:
ea:34:f5:f4:85:57:47:7f:f0:d3:5c:76:bf:c6:ad:03:3d:73:
fd:01:8c:14:3b:b7:36:93:d3:d7:d6:bf:ee:e7:39:57:a6:4a:
cb:52:a9:73:4b:1f:d6:4b:d4:82:d2:3f:c1:83:cd:4a:61:32:
1a:aa:8f:ad:4b:ae:74:a5:45:ae:e1:fb:35:68:50:9b:11:19:
cb:ff:73:78
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYctVa9ArPHtRiIbKu7RrcdfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjMwMzI5MTIyNjQyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5YTg1ZjVlOTFlZGEzOWFmYmJlZGE3YTEzYjdiNzgwYmFkNjhlY2U4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhLMHgIb2oWPlQGLv3Qp/Mpy+incb
uVd3nMwbpXQwiwIiPaEXrQ+SDIA8i/bJCM7fDTQu/XoBGRFotambJ2Z2hWmqAFBY
exLyJrqI3ljKfCVQ4/Sb96ET5x5EABvVy5HvEToAz2T21U0Hn+IXXevKCYhPrpwa
i9qkZmpIk45BZ1UTAdUxWLr8Tnb5U8f0Y32MSQv/s5ZUgv+kudgPcSWLTCXbtHNZ
qXa1M4BxqtBaLwWpay1qH5ptKZRXVeVpWJWaNTrNIaXkmriHIrnsTII5sz40Ju8W
kQWE0oNwOscRwbdhukv+r2aLByUXkKE9PRPFjKw6tJmNazVfDH2MWBrngwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJqF9eke2jmvu+2noTt7eAutaOzoMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvbW9YMTZSN2FPYS03N2FlaE8zdDRDNjFvN09nLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwenoMA0G
CSqGSIb3DQEBCwUAA4IBAQACYJpF5WcP8FV1tXiqD2vyiqc2HR0lYAIFVKMO1+dk
TFBF6bumEJJf9r7Q5ZlwPXBVvaojPpFiCIFEmLtsYKiaCFmcjWwFQf3teXYqeD1D
Mrvy2Inmyi/Yobk2oc1OlfWTLQNlhuPhfLvRxg7jxWZAQ1xEZXnIj6n7agoHMsoD
rc5SRsHhfiJn9kKixR2QHVsLhSGwS3Ykj7gTvgmyNwLGg/bAcSmWAhslfzzJxFNg
v5kSnFjqNPX0hVdHf/DTXHa/xq0DPXP9AYwUO7c2k9PX1r/u5zlXpkrLUqlzSx/W
S9SC0j/Bg81KYTIaqo+tS650pUWu4fs1aFCbERnL/3N4
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-fra.rpki-client.org