Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/CsVjycHJTQLkaeO7RB0sR-exqc8.roa
File: CsVjycHJTQLkaeO7RB0sR-exqc8.roa (raw, json)
Hash identifier: eVXui1hzGke85bejBx/aYE0K/W24eXzUFCEP63E7zqc=
Subject key identifier: 0A:C5:63:C9:C1:C9:4D:02:E4:69:E3:BB:44:1D:2C:47:E7:B1:A9:CF
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 0186358CD7BC85F5D0D37AA76D55C23511E2
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/CsVjycHJTQLkaeO7RB0sR-exqc8.roa
Signing time: Thu 09 Feb 2023 09:41:08 +0000
ROA not before: Thu 09 Feb 2023 09:41:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53856
IP address blocks: 93.157.24.0/22 maxlen: 22
93.157.28.0/22 maxlen: 22
93.157.28.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:8c:d7:bc:85:f5:d0:d3:7a:a7:6d:55:c2:35:11:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Feb 9 09:41:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0ac563c9c1c94d02e469e3bb441d2c47e7b1a9cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:f0:79:c9:61:ba:f3:27:a4:56:f4:de:d5:f1:
32:17:99:2c:b5:45:fa:d9:2e:48:04:ea:50:a3:63:
bd:bd:81:3f:ed:37:85:d2:0a:95:c9:42:a8:69:b1:
67:17:bc:88:b1:5b:29:4a:3e:c6:71:bc:b9:16:0b:
7d:0a:17:ff:e8:dc:a7:b7:88:7c:a1:81:dd:1f:5c:
40:6c:c4:f4:b0:79:d7:de:a4:ab:4d:fd:08:da:99:
69:f7:91:0c:8e:e4:3f:d3:30:02:a4:54:84:d7:d1:
45:b6:3c:10:16:88:39:9e:83:99:46:19:f1:dc:46:
91:47:43:8e:21:5c:e2:84:9d:b6:2d:c6:c0:7a:35:
f6:b3:ff:91:58:9f:6b:b2:6f:99:91:ba:4b:de:69:
3b:7e:de:96:5c:cb:7c:ff:b7:dd:e7:bc:40:da:53:
72:e3:35:96:83:53:e9:b3:b2:b4:d7:f6:88:bb:ae:
4a:7b:5b:66:80:bd:ac:b8:46:78:0c:70:34:10:8e:
fc:b6:da:d1:c0:d9:c1:cd:f7:59:ce:88:d2:9c:44:
cd:fc:06:d9:6d:48:2c:cf:78:ff:32:78:b7:77:75:
b4:e0:68:7e:43:93:9e:d2:e3:9d:76:24:e2:9a:a6:
c3:08:9c:83:cf:87:cf:4b:01:87:cb:4d:bd:fc:08:
a0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C5:63:C9:C1:C9:4D:02:E4:69:E3:BB:44:1D:2C:47:E7:B1:A9:CF
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/CsVjycHJTQLkaeO7RB0sR-exqc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
Signature Algorithm: sha256WithRSAEncryption
5b:d1:14:21:ee:ad:a4:fc:5b:2f:d7:2d:7c:62:ed:8b:21:f1:
20:16:46:73:cb:0a:2d:14:c7:a9:30:63:c1:a0:21:b7:3f:d9:
17:51:fd:c3:97:7a:1c:6f:a3:63:fd:e5:20:30:26:72:b0:15:
9f:ac:24:f1:58:32:40:53:45:62:3d:ab:b2:2a:65:96:10:f9:
88:7d:22:9c:ea:3e:2d:2a:e6:a0:a9:96:ee:da:e5:2d:90:5d:
38:97:09:2b:2c:67:21:85:ed:f5:8a:a2:ea:bf:2f:94:a1:cf:
f0:73:d0:b1:9d:40:44:0f:90:f8:61:bf:0b:63:ad:33:e1:0e:
2d:d8:ac:75:d8:f9:92:20:b3:2f:95:f0:2e:ae:29:23:70:c3:
ae:86:e2:08:f9:12:e0:74:8d:f2:1e:d0:1f:56:63:e3:fe:4b:
aa:0c:88:33:b1:4f:9b:d9:90:31:7c:89:90:51:47:c7:49:a5:
37:43:07:38:86:32:97:01:71:75:bf:a6:7a:5d:11:6d:06:61:
04:9c:4d:25:21:d0:3c:1b:61:ae:c3:6a:7d:f2:c7:5f:a2:45:
4b:bd:82:af:17:52:42:50:08:85:f8:36:90:a1:73:f7:a4:17:
a4:cf:23:30:99:62:43:aa:76:ce:ac:82:21:e8:29:43:49:87:
2c:95:a0:58
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYY1jNe8hfXQ03qnbVXCNRHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl
YjdhZjQwHhcNMjMwMjA5MDk0MTA4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwYWM1NjNjOWMxYzk0ZDAyZTQ2OWUzYmI0NDFkMmM0N2U3YjFhOWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm/B5yWG68yekVvTe1fEyF5kstUX6
2S5IBOpQo2O9vYE/7TeF0gqVyUKoabFnF7yIsVspSj7Gcby5Fgt9Chf/6Nynt4h8
oYHdH1xAbMT0sHnX3qSrTf0I2plp95EMjuQ/0zACpFSE19FFtjwQFog5noOZRhnx
3EaRR0OOIVzihJ22LcbAejX2s/+RWJ9rsm+ZkbpL3mk7ft6WXMt8/7fd57xA2lNy
4zWWg1Pps7K01/aIu65Ke1tmgL2suEZ4DHA0EI78ttrRwNnBzfdZzojSnETN/AbZ
bUgsz3j/Mni3d3W04Gh+Q5Oe0uOddiTimqbDCJyDz4fPSwGHy029/AigAwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFArFY8nByU0C5Gnju0QdLEfnsanPMB8GA1UdIwQY
MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct
YmRlNjQ0OGI3ODZjLzEvQ3NWanljSEpUUUxrYWVPN1JCMHNSLWV4cWM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj
LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDXZ0YMA0G
CSqGSIb3DQEBCwUAA4IBAQBb0RQh7q2k/Fsv1y18Yu2LIfEgFkZzywotFMepMGPB
oCG3P9kXUf3Dl3ocb6Nj/eUgMCZysBWfrCTxWDJAU0ViPauyKmWWEPmIfSKc6j4t
KuagqZbu2uUtkF04lwkrLGchhe31iqLqvy+Uoc/wc9CxnUBED5D4Yb8LY60z4Q4t
2Kx12PmSILMvlfAurikjcMOuhuII+RLgdI3yHtAfVmPj/kuqDIgzsU+b2ZAxfImQ
UUfHSaU3Qwc4hjKXAXF1v6Z6XRFtBmEEnE0lIdA8G2Guw2p98sdfokVLvYKvF1JC
UAiF+DaQoXP3pBekzyMwmWJDqnbOrIIh6ClDSYcslaBY
-----END CERTIFICATE-----
Generated at Mon Jan 1 19:16:11 2024 by rpki-client on console-ams.rpki-client.org