Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i2X4iOBs6WYvrsKJeXKVoStsW_o.roa
File: i2X4iOBs6WYvrsKJeXKVoStsW_o.roa (raw, json)
Hash identifier: 3a5MRKNEncDf91PnQLJSKGXqrv/jwWqwyDzR/BJrNM8=
Subject key identifier: 8B:65:F8:88:E0:6C:E9:66:2F:AE:C2:89:79:72:95:A1:2B:6C:5B:FA
Certificate issuer: /CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Certificate serial: 01881F3D66F702765792B9C581400824EBCA
Authority key identifier: D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i2X4iOBs6WYvrsKJeXKVoStsW_o.roa
Signing time: Mon 15 May 2023 11:48:17 +0000
ROA not before: Mon 15 May 2023 11:48:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.233.151.0/24 maxlen: 24
194.233.148.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:3d:66:f7:02:76:57:92:b9:c5:81:40:08:24:eb:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d747017564c711bcbd57680a0dfd00f2a5d099db
Validity
Not Before: May 15 11:48:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8b65f888e06ce9662faec289797295a12b6c5bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:81:5a:c7:c4:26:61:86:23:6c:a5:a3:d6:8b:
64:73:48:23:ae:3d:ce:77:10:3e:ae:c5:42:b8:42:
36:ec:23:f9:67:0a:22:52:79:7e:25:25:01:c9:f1:
7d:0b:e2:8b:31:3f:d8:e8:da:28:2f:d9:ae:a9:69:
3a:eb:87:af:46:09:da:87:1c:b4:78:d2:71:88:ae:
9f:e9:03:ed:3e:a8:14:ca:a8:61:6b:48:61:9b:b6:
40:b3:76:83:1d:c3:5c:68:c1:a2:c1:16:f2:d8:63:
77:cf:dc:ea:57:32:de:4f:f5:66:03:0a:5a:2b:77:
96:cd:fa:93:01:06:4b:0c:69:d0:eb:88:b3:9b:6a:
21:ab:b4:78:1d:b6:25:a1:05:b9:c7:2a:08:57:f5:
2d:87:0f:6c:ce:45:70:c9:87:db:e8:2e:89:bc:0a:
42:92:ac:25:1c:79:94:ee:8e:85:f4:9c:9e:f0:66:
e1:a0:59:6e:e3:7a:7c:38:7f:65:b0:21:f0:a0:54:
51:45:8d:b3:7d:4b:03:3c:9e:f3:c6:db:0c:30:17:
72:c8:4f:59:70:27:b2:e5:be:ed:63:c6:c4:7e:7e:
00:b6:97:18:df:30:9b:0f:90:53:59:75:e3:fa:26:
71:f9:aa:22:45:3a:5d:e1:ab:86:e3:9e:0c:ab:8c:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:65:F8:88:E0:6C:E9:66:2F:AE:C2:89:79:72:95:A1:2B:6C:5B:FA
X509v3 Authority Key Identifier:
keyid:D7:47:01:75:64:C7:11:BC:BD:57:68:0A:0D:FD:00:F2:A5:D0:99:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/10cBdWTHEby9V2gKDf0A8qXQmds.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/i2X4iOBs6WYvrsKJeXKVoStsW_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/ba2362-0cc5-49bd-a522-4f0e8ce11a7d/1/10cBdWTHEby9V2gKDf0A8qXQmds.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.233.148.0/24
194.233.151.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:d2:ef:15:6b:a1:40:1b:c4:7d:fe:15:48:f6:f3:6e:ae:46:
6c:0d:83:6f:49:5b:f6:76:d6:26:2d:0e:14:c1:29:23:d9:0d:
ce:a6:6a:38:28:d2:57:da:a9:97:24:18:27:22:5d:75:3a:e4:
ed:41:40:9a:c7:3f:48:32:11:d0:42:52:86:21:d0:2e:23:87:
de:12:6a:6c:98:12:74:41:b1:a1:cf:0a:50:ea:2c:4c:f6:b7:
ec:c5:c7:7a:bb:2c:6b:b3:95:3e:71:2a:50:44:00:96:01:3b:
b6:95:0c:e1:3c:b3:3f:0f:7c:de:57:cc:71:ad:2b:d8:3b:07:
85:60:79:61:8c:4e:57:79:cd:1a:7b:6d:9b:8c:f7:ae:89:de:
c2:f9:fd:b3:98:97:b4:a4:2b:1a:3c:66:ef:db:b7:54:13:9e:
8b:3e:ad:db:a7:39:aa:79:8a:6a:4a:04:d8:3e:14:70:86:6d:
50:e7:1c:65:2e:f3:55:cb:20:f8:56:a3:1c:28:69:10:99:15:
47:b5:46:be:70:bc:eb:e9:ef:00:91:5a:6b:69:cb:29:5a:89:
a5:68:c2:06:9e:61:38:c5:6a:e1:25:aa:8a:83:d8:df:24:c3:
88:da:5c:dd:70:34:31:c5:3e:36:6e:1c:33:e9:a7:93:20:9b:
15:07:c3:57
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYgfPWb3AnZXkrnFgUAIJOvKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NDcwMTc1NjRjNzExYmNiZDU3NjgwYTBkZmQwMGYyYTVk
MDk5ZGIwHhcNMjMwNTE1MTE0ODE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjY1Zjg4OGUwNmNlOTY2MmZhZWMyODk3OTcyOTVhMTJiNmM1YmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4Fax8QmYYYjbKWj1otkc0gjrj3O
dxA+rsVCuEI27CP5ZwoiUnl+JSUByfF9C+KLMT/Y6NooL9muqWk664evRgnahxy0
eNJxiK6f6QPtPqgUyqhha0hhm7ZAs3aDHcNcaMGiwRby2GN3z9zqVzLeT/VmAwpa
K3eWzfqTAQZLDGnQ64izm2ohq7R4HbYloQW5xyoIV/Uthw9szkVwyYfb6C6JvApC
kqwlHHmU7o6F9Jye8GbhoFlu43p8OH9lsCHwoFRRRY2zfUsDPJ7zxtsMMBdyyE9Z
cCey5b7tY8bEfn4AtpcY3zCbD5BTWXXj+iZx+aoiRTpd4auG454Mq4y5vwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFItl+IjgbOlmL67CiXlylaErbFv6MB8GA1UdIwQY
MBaAFNdHAXVkxxG8vVdoCg39APKl0JnbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjIt
NGYwZThjZTExYTdkLzEvaTJYNGlPQnM2V1l2cnNLSmVYS1ZvU3RzV19vLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC9iYTIzNjItMGNjNS00OWJkLWE1MjItNGYwZThjZTExYTdk
LzEvMTBjQmRXVEhFYnk5VjJnS0RmMEE4cVhRbWRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwumUAwQA
wumXMA0GCSqGSIb3DQEBCwUAA4IBAQB+0u8Va6FAG8R9/hVI9vNurkZsDYNvSVv2
dtYmLQ4UwSkj2Q3Opmo4KNJX2qmXJBgnIl11OuTtQUCaxz9IMhHQQlKGIdAuI4fe
EmpsmBJ0QbGhzwpQ6ixM9rfsxcd6uyxrs5U+cSpQRACWATu2lQzhPLM/D3zeV8xx
rSvYOweFYHlhjE5Xec0ae22bjPeuid7C+f2zmJe0pCsaPGbv27dUE56LPq3bpzmq
eYpqSgTYPhRwhm1Q5xxlLvNVyyD4VqMcKGkQmRVHtUa+cLzr6e8AkVpracspWoml
aMIGnmE4xWrhJaqKg9jfJMOI2lzdcDQxxT42bhwz6aeTIJsVB8NX
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:42 2023 by rpki-client on console-fra.rpki-client.org