Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JhBs6YCuRBOChSWQIn93zuPV7pw.roa
File: JhBs6YCuRBOChSWQIn93zuPV7pw.roa (raw, json)
Hash identifier: Jdo3+x+2c/A+brVG2kc0wXn7xc/pKlYfAqykbQ4Scg4=
Subject key identifier: 26:10:6C:E9:80:AE:44:13:82:85:25:90:22:7F:77:CE:E3:D5:EE:9C
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01884293D68D4FB88C971D4CAEAC78A163B4
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JhBs6YCuRBOChSWQIn93zuPV7pw.roa
Signing time: Mon 22 May 2023 08:29:24 +0000
ROA not before: Mon 22 May 2023 08:29:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
194.233.149.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:42:93:d6:8d:4f:b8:8c:97:1d:4c:ae:ac:78:a1:63:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 22 08:29:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26106ce980ae441382852590227f77cee3d5ee9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f8:b0:fe:cf:00:d6:fd:9c:56:44:a5:eb:fe:
3b:11:8f:40:c6:1d:21:4c:d2:de:7d:d0:31:6c:1a:
16:ae:2b:c5:c9:21:c7:4c:47:61:ec:4b:d1:36:ef:
d3:5f:6a:19:83:c0:4a:10:a6:84:26:2b:80:db:40:
34:f8:b8:69:97:1d:83:45:f4:df:66:5a:dc:d5:1a:
07:da:69:9c:5f:8c:ac:fc:02:10:f7:28:cb:00:e4:
b2:db:e3:54:43:f6:59:d0:86:58:29:2e:cb:71:f4:
07:ac:38:29:ab:9c:7d:10:da:c5:24:53:16:3e:5d:
93:57:21:5b:41:87:17:1d:bd:a6:88:40:15:11:10:
f3:6a:b4:01:be:6c:09:5d:dd:e4:34:62:f5:52:2b:
7c:49:41:c3:8f:05:83:f9:96:da:68:97:8c:35:e2:
10:a4:af:42:79:6d:f3:45:df:85:3d:06:4f:1d:a6:
6a:93:50:f6:35:9f:6f:b2:a5:84:45:f8:69:47:bb:
94:6b:7f:42:67:8f:5b:21:95:3e:9d:d8:01:a3:ca:
4c:0d:89:2d:ce:c4:91:d3:d5:7b:e1:af:9b:80:bd:
2f:a4:04:8f:4d:68:bb:44:8a:e5:9b:67:ae:de:8d:
86:a5:20:82:e9:87:fe:fa:0d:e3:6e:70:45:73:cf:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:10:6C:E9:80:AE:44:13:82:85:25:90:22:7F:77:CE:E3:D5:EE:9C
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/JhBs6YCuRBOChSWQIn93zuPV7pw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.148.0/23
194.233.151.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:21:ae:b9:77:b1:47:bd:c7:a8:05:f6:79:c0:c7:1c:4d:a4:
cf:e5:1e:11:55:ad:3d:b0:f0:0b:d5:12:02:89:96:52:9f:8f:
b1:a3:26:88:3b:44:e3:95:77:ce:48:3b:4f:5b:1f:07:d5:9c:
fd:fa:9d:f5:73:d6:b9:e3:e4:5b:35:67:b9:37:7d:b1:c4:f9:
8d:cd:01:76:14:07:10:1f:25:a3:6f:c4:6f:f7:60:9c:f6:49:
c1:70:14:8c:e5:b2:11:f5:f2:37:5c:5f:37:cb:c4:41:8d:cd:
9a:97:3f:92:b3:5b:46:4a:25:60:d4:9a:87:cd:2a:92:bb:4c:
b8:f6:d3:18:06:30:87:06:4a:d3:aa:8d:bb:16:83:3e:f8:40:
d0:f1:a9:f4:e9:51:ea:f9:38:3b:76:79:64:b1:7f:d4:cd:52:
54:af:88:54:ca:ed:5e:59:76:7a:00:79:cd:5e:73:fc:ed:77:
03:64:fb:cd:aa:6c:27:d8:d3:e1:90:cb:b4:a6:a0:fe:05:09:
97:3d:fa:e0:21:8e:3e:ff:92:21:e6:1d:f9:c0:e6:8b:f0:2e:
49:81:b8:d1:54:79:ab:26:4d:7b:d1:00:7d:6b:a2:29:5c:bf:
2c:ed:30:27:97:68:f6:b5:32:1c:5e:98:f1:7a:42:15:4e:25:
32:0a:37:12
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhCk9aNT7iMlx1Mrqx4oWO0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwNTIyMDgyOTI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyNjEwNmNlOTgwYWU0NDEzODI4NTI1OTAyMjdmNzdjZWUzZDVlZTljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/iw/s8A1v2cVkSl6/47EY9Axh0h
TNLefdAxbBoWrivFySHHTEdh7EvRNu/TX2oZg8BKEKaEJiuA20A0+Lhplx2DRfTf
Zlrc1RoH2mmcX4ys/AIQ9yjLAOSy2+NUQ/ZZ0IZYKS7LcfQHrDgpq5x9ENrFJFMW
Pl2TVyFbQYcXHb2miEAVERDzarQBvmwJXd3kNGL1Uit8SUHDjwWD+ZbaaJeMNeIQ
pK9CeW3zRd+FPQZPHaZqk1D2NZ9vsqWERfhpR7uUa39CZ49bIZU+ndgBo8pMDYkt
zsSR09V74a+bgL0vpASPTWi7RIrlm2eu3o2GpSCC6Yf++g3jbnBFc89qHQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFCYQbOmArkQTgoUlkCJ/d87j1e6cMB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvSmhCczZZQ3VSQk9DaFNXUUluOTN6dVBWN3B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBwumUAwQA
wumXMA0GCSqGSIb3DQEBCwUAA4IBAQCoIa65d7FHvceoBfZ5wMccTaTP5R4RVa09
sPAL1RICiZZSn4+xoyaIO0TjlXfOSDtPWx8H1Zz9+p31c9a54+RbNWe5N32xxPmN
zQF2FAcQHyWjb8Rv92Cc9knBcBSM5bIR9fI3XF83y8RBjc2alz+Ss1tGSiVg1JqH
zSqSu0y49tMYBjCHBkrTqo27FoM++EDQ8an06VHq+Tg7dnlksX/UzVJUr4hUyu1e
WXZ6AHnNXnP87XcDZPvNqmwn2NPhkMu0pqD+BQmXPfrgIY4+/5Ih5h35wOaL8C5J
gbjRVHmrJk170QB9a6IpXL8s7TAnl2j2tTIcXpjxekIVTiUyCjcS
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:29 2023 by rpki-client on console-ams.rpki-client.org