Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/tVhNTRBG7wNluWB_jv1vSSb1aTk.roa
File: tVhNTRBG7wNluWB_jv1vSSb1aTk.roa (raw, json)
Hash identifier: kxl5xNagzPQsuLNIYOsjeNwYchAveWv4rDaBk9Ua6mc=
Subject key identifier: B5:58:4D:4D:10:46:EF:03:65:B9:60:7F:8E:FD:6F:49:26:F5:69:39
Certificate issuer: /CN=5dc67c6be367ab9e941d1427d050449447b8865c
Certificate serial: 018995FDD4E03AE33E8567DE520D8CC27DA6
Authority key identifier: 5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/tVhNTRBG7wNluWB_jv1vSSb1aTk.roa
Signing time: Thu 27 Jul 2023 06:16:27 +0000
ROA not before: Thu 27 Jul 2023 06:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.218.222.0/24 maxlen: 24
193.219.0.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:95:fd:d4:e0:3a:e3:3e:85:67:de:52:0d:8c:c2:7d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dc67c6be367ab9e941d1427d050449447b8865c
Validity
Not Before: Jul 27 06:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b5584d4d1046ef0365b9607f8efd6f4926f56939
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:7b:9f:06:bb:b3:38:20:81:dc:5d:3c:85:
67:79:6e:17:50:21:6d:ac:c1:b6:e9:e0:56:3b:c7:
d0:55:93:3d:ed:d8:91:7c:a5:42:82:34:23:d6:67:
73:d5:43:3a:20:3c:a9:66:61:45:1c:9f:ef:f6:92:
76:b0:92:ed:8d:96:f6:53:89:3b:1a:ee:34:3e:ca:
d1:d3:4e:ef:a7:4d:d8:07:c3:65:74:c5:ae:a3:65:
0f:10:ff:35:ef:26:1d:04:8b:55:a4:1e:fc:2b:d1:
6f:df:7b:7c:ca:ad:60:59:da:de:38:fd:61:57:f8:
d0:d3:52:7b:2f:cc:24:c2:32:6b:1c:d2:65:de:15:
26:e5:6c:fc:ef:c5:66:8d:ac:45:90:0b:2b:48:ff:
8c:0b:d1:ee:64:1e:ec:b5:b3:3c:50:70:d3:67:84:
4a:0f:94:c8:6d:db:91:2b:f5:29:91:d3:05:2c:37:
b2:88:80:de:d6:29:5a:11:31:c7:52:b3:7f:1d:7f:
01:21:0d:8b:6d:03:2c:83:78:1d:4b:55:02:dd:19:
e9:50:e1:02:a9:ff:bf:f9:f4:86:ca:48:60:0e:81:
2c:93:67:f7:8f:f6:e7:6d:50:98:28:83:5c:a0:3a:
d7:89:2c:42:00:ec:1d:55:93:e5:dd:22:22:27:99:
26:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:58:4D:4D:10:46:EF:03:65:B9:60:7F:8E:FD:6F:49:26:F5:69:39
X509v3 Authority Key Identifier:
keyid:5D:C6:7C:6B:E3:67:AB:9E:94:1D:14:27:D0:50:44:94:47:B8:86:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XcZ8a-Nnq56UHRQn0FBElEe4hlw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/tVhNTRBG7wNluWB_jv1vSSb1aTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/76275a-6f41-4804-837b-89799deadc47/1/XcZ8a-Nnq56UHRQn0FBElEe4hlw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.218.222.0/24
193.219.0.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:dd:7c:2a:b2:e9:24:c3:f7:f8:a0:9d:20:d0:f6:28:9a:c7:
e1:ad:61:08:a7:b0:f3:6c:c9:cb:d4:eb:0b:98:55:19:21:92:
90:cd:0c:f7:4b:7d:1b:b9:a0:db:8a:12:22:7e:81:0c:d5:45:
04:94:d8:e6:8e:99:02:45:80:67:e7:b9:4c:67:03:42:72:8d:
1d:ba:43:e6:07:cc:83:98:f6:01:49:70:68:8a:ef:a1:a4:ff:
aa:20:77:38:5a:e4:76:f0:45:5e:ec:44:df:0c:25:a4:74:62:
6d:c6:b3:93:94:54:cb:97:d6:a4:e5:b8:93:cc:62:60:8e:91:
14:c8:18:25:e1:78:42:8f:58:7d:17:c2:97:e1:d7:3c:18:7a:
b1:ac:00:8d:5f:d7:59:f4:b6:a9:e7:c5:d1:a1:2d:4e:9f:06:
5e:0c:14:37:a9:c7:96:ec:58:b0:13:7b:5b:91:51:b8:9b:9f:
cf:63:2b:f9:91:ed:e3:5f:f4:4c:f5:bf:fe:d7:1a:1c:fa:57:
66:50:52:5c:c3:8a:4a:3a:74:20:77:5e:ef:57:89:73:41:02:
56:ca:15:9b:84:ff:47:36:89:6f:4f:92:77:df:43:3c:20:48:
57:97:89:df:30:62:ee:b8:9a:5a:7e:70:ff:7a:bd:b7:07:2c:
95:d2:41:91
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYmV/dTgOuM+hWfeUg2Mwn2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkYzY3YzZiZTM2N2FiOWU5NDFkMTQyN2QwNTA0NDk0NDdi
ODg2NWMwHhcNMjMwNzI3MDYxNjI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNTU4NGQ0ZDEwNDZlZjAzNjViOTYwN2Y4ZWZkNmY0OTI2ZjU2OTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhp7nwa7szgggdxdPIVneW4XUCFt
rMG26eBWO8fQVZM97diRfKVCgjQj1mdz1UM6IDypZmFFHJ/v9pJ2sJLtjZb2U4k7
Gu40PsrR007vp03YB8NldMWuo2UPEP817yYdBItVpB78K9Fv33t8yq1gWdreOP1h
V/jQ01J7L8wkwjJrHNJl3hUm5Wz878VmjaxFkAsrSP+MC9HuZB7stbM8UHDTZ4RK
D5TIbduRK/UpkdMFLDeyiIDe1ilaETHHUrN/HX8BIQ2LbQMsg3gdS1UC3RnpUOEC
qf+/+fSGykhgDoEsk2f3j/bnbVCYKINcoDrXiSxCAOwdVZPl3SIiJ5kmiwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFLVYTU0QRu8DZblgf479b0km9Wk5MB8GA1UdIwQY
MBaAFF3GfGvjZ6uelB0UJ9BQRJRHuIZcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2It
ODk3OTlkZWFkYzQ3LzEvdFZoTlRSQkc3d05sdVdCX2p2MXZTU2IxYVRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy83NjI3NWEtNmY0MS00ODA0LTgzN2ItODk3OTlkZWFkYzQ3
LzEvWGNaOGEtTm5xNTZVSFJRbjBGQkVsRWU0aGx3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwdreAwQA
wdsAMA0GCSqGSIb3DQEBCwUAA4IBAQAa3Xwqsukkw/f4oJ0g0PYomsfhrWEIp7Dz
bMnL1OsLmFUZIZKQzQz3S30buaDbihIifoEM1UUElNjmjpkCRYBn57lMZwNCco0d
ukPmB8yDmPYBSXBoiu+hpP+qIHc4WuR28EVe7ETfDCWkdGJtxrOTlFTLl9ak5biT
zGJgjpEUyBgl4XhCj1h9F8KX4dc8GHqxrACNX9dZ9Lap58XRoS1OnwZeDBQ3qceW
7FiwE3tbkVG4m5/PYyv5ke3jX/RM9b/+1xoc+ldmUFJcw4pKOnQgd17vV4lzQQJW
yhWbhP9HNolvT5J330M8IEhXl4nfMGLuuJpafnD/er23ByyV0kGR
-----END CERTIFICATE-----
Generated at Mon Aug 14 12:17:40 2023 by rpki-client on console-ams.rpki-client.org