Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zJS0eKAk7svMLkz6ilR2O1JUuUw.roa
File: zJS0eKAk7svMLkz6ilR2O1JUuUw.roa (raw, json)
Hash identifier: t0tK7HjJYsogLw2x/V04vg6ZD/84bnncvKg16XhxBVU=
Subject key identifier: CC:94:B4:78:A0:24:EE:CB:CC:2E:4C:FA:8A:54:76:3B:52:54:B9:4C
Certificate issuer: /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial: 01864249F3DFF916008C4FAE84EFAA499A68
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zJS0eKAk7svMLkz6ilR2O1JUuUw.roa
Signing time: Sat 11 Feb 2023 21:03:08 +0000
ROA not before: Sat 11 Feb 2023 21:03:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 141420
IP address blocks: 193.118.168.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:42:49:f3:df:f9:16:00:8c:4f:ae:84:ef:aa:49:9a:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Validity
Not Before: Feb 11 21:03:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc94b478a024eecbcc2e4cfa8a54763b5254b94c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:66:ae:fd:8f:ef:3a:5f:8d:e0:8e:e0:8b:77:
19:e1:f4:bc:d3:dd:45:c5:be:e7:5b:d9:55:2d:ec:
ef:a0:49:47:8a:a9:20:d1:40:7a:bb:9d:9a:c3:80:
ca:7e:65:fd:06:d7:a0:8c:73:bc:be:20:7d:c1:2a:
fa:1e:90:a0:43:d5:82:15:58:08:b4:59:14:90:15:
03:8a:df:02:f8:5f:6f:c6:5a:85:c5:88:d3:da:97:
a1:1c:f9:33:6b:12:07:59:24:4a:58:6b:99:8a:d9:
89:f9:62:c8:35:3a:b3:9b:d3:ff:b0:e3:b6:65:18:
6d:5d:2e:a7:7d:7a:b7:e1:a9:ff:80:e4:85:41:c9:
14:e9:87:5f:5a:1f:4e:5e:47:40:36:59:6d:76:f4:
e4:74:92:66:cd:96:b8:9c:1a:3d:ed:aa:f8:09:8c:
cd:09:cf:e0:05:27:fb:bc:f0:bd:f6:48:75:1a:80:
15:a7:62:32:04:7f:8e:aa:bb:7b:68:e9:85:8a:2c:
6e:de:c5:0d:0f:2b:09:16:49:3e:b6:5a:aa:57:cc:
60:62:d7:a1:5c:c0:80:0c:0b:58:43:31:67:2e:76:
53:b8:81:5b:43:ed:c6:7a:b0:4c:11:fc:26:91:99:
c7:40:f2:11:ed:e0:c1:48:af:4c:0a:00:b2:21:bf:
35:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:94:B4:78:A0:24:EE:CB:CC:2E:4C:FA:8A:54:76:3B:52:54:B9:4C
X509v3 Authority Key Identifier:
keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/zJS0eKAk7svMLkz6ilR2O1JUuUw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.118.168.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:0c:94:d8:15:a8:4d:4d:18:cb:92:d0:14:8f:e9:70:1d:71:
d7:3c:1f:ab:e6:4b:01:cb:f7:34:8a:b8:b4:8e:e0:f3:e7:79:
c1:a6:35:1f:07:5e:1f:6c:2d:19:ed:07:9c:52:f2:38:a1:6e:
a5:0f:29:ca:52:8f:af:09:f7:83:1d:ae:0c:59:03:74:ee:aa:
85:ee:ea:42:45:f1:43:3f:ac:71:ba:48:f5:16:27:0c:69:d2:
47:76:55:da:37:00:12:6c:84:d1:8b:00:65:8e:27:85:97:03:
be:bf:8d:92:e1:bb:78:30:fd:a0:63:f1:97:ab:1a:61:2a:f8:
a9:a9:87:0d:b3:ab:81:ff:30:b0:4f:b3:92:51:8e:db:4c:df:
60:60:19:33:4c:72:72:4b:b3:35:39:f8:0e:e8:1d:d3:99:ae:
ee:f8:1c:f1:d6:76:ba:60:c9:9f:7b:c3:05:4f:80:6c:2b:25:
70:37:48:d6:98:47:9f:c3:40:25:d9:7c:f5:c5:66:26:83:4b:
d6:e6:2d:11:42:9f:34:5e:bc:7e:d6:f9:2c:db:02:7e:db:c5:
9c:44:82:ac:0f:82:9a:40:f1:2f:8c:2c:d9:75:e6:2d:f3:1e:
c0:fe:eb:29:7f:52:d7:6f:ce:e3:95:16:b5:66:5b:cd:78:5e:
03:02:f3:fe
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYZCSfPf+RYAjE+uhO+qSZpoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjZjhmZmMwODg1OTFlNGYyNDNiYWFmYTIxYjQyOThiZmIz
NjYwMjYwHhcNMjMwMjExMjEwMzA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjYzk0YjQ3OGEwMjRlZWNiY2MyZTRjZmE4YTU0NzYzYjUyNTRiOTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvGau/Y/vOl+N4I7gi3cZ4fS8091F
xb7nW9lVLezvoElHiqkg0UB6u52aw4DKfmX9BtegjHO8viB9wSr6HpCgQ9WCFVgI
tFkUkBUDit8C+F9vxlqFxYjT2pehHPkzaxIHWSRKWGuZitmJ+WLINTqzm9P/sOO2
ZRhtXS6nfXq34an/gOSFQckU6YdfWh9OXkdANlltdvTkdJJmzZa4nBo97ar4CYzN
Cc/gBSf7vPC99kh1GoAVp2IyBH+Oqrt7aOmFiixu3sUNDysJFkk+tlqqV8xgYteh
XMCADAtYQzFnLnZTuIFbQ+3GerBMEfwmkZnHQPIR7eDBSK9MCgCyIb81UwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFMyUtHigJO7LzC5M+opUdjtSVLlMMB8GA1UdIwQY
MBaAFEz4/8CIWR5PJDuq+iG0KYv7NmAmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMt
YjNiNzhiMGI2NmVhLzEvekpTMGVLQWs3c3ZNTGt6NmlsUjJPMUpVdVV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9hMGEzOWMtYmUwMy00N2JiLWJkYjMtYjNiNzhiMGI2NmVh
LzEvVFBqX3dJaFpIazhrTzZyNkliUXBpX3MyWUNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwXaoMA0G
CSqGSIb3DQEBCwUAA4IBAQAbDJTYFahNTRjLktAUj+lwHXHXPB+r5ksBy/c0iri0
juDz53nBpjUfB14fbC0Z7QecUvI4oW6lDynKUo+vCfeDHa4MWQN07qqF7upCRfFD
P6xxukj1FicMadJHdlXaNwASbITRiwBljieFlwO+v42S4bt4MP2gY/GXqxphKvip
qYcNs6uB/zCwT7OSUY7bTN9gYBkzTHJyS7M1OfgO6B3Tma7u+Bzx1na6YMmfe8MF
T4BsKyVwN0jWmEefw0Al2Xz1xWYmg0vW5i0RQp80Xrx+1vks2wJ+28WcRIKsD4Ka
QPEvjCzZdeYt8x7A/uspf1LXb87jlRa1ZlvNeF4DAvP+
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:49:37 2023 by rpki-client on console-ams.rpki-client.org