Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p6s3XGUJve_TXUUOwodGtKW8Dvc.roa
File: p6s3XGUJve_TXUUOwodGtKW8Dvc.roa (raw, json)
Hash identifier: 2T8jmYKYfHkDXU/W8y0hU1ezBPhw2m5btlwktffsU7k=
Subject key identifier: A7:AB:37:5C:65:09:BD:EF:D3:5D:45:0E:C2:87:46:B4:A5:BC:0E:F7
Certificate issuer: /CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Certificate serial: 01884E2DCE0232524EC9B9E53479E407F6EA
Authority key identifier: 93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p6s3XGUJve_TXUUOwodGtKW8Dvc.roa
Signing time: Wed 24 May 2023 14:33:24 +0000
ROA not before: Wed 24 May 2023 14:33:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 217.113.22.0/23 maxlen: 23
217.113.18.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:2d:ce:02:32:52:4e:c9:b9:e5:34:79:e4:07:f6:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93e8f4ed5dd06301c423988e786dabf51c5f5674
Validity
Not Before: May 24 14:33:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a7ab375c6509bdefd35d450ec28746b4a5bc0ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:75:b3:2a:a5:d6:de:57:85:76:4f:5d:eb:b5:
ed:8a:34:7a:e2:bd:6a:4c:83:42:bd:d9:02:f4:63:
7c:e9:1e:50:b3:83:ae:f2:d3:86:40:71:0d:2f:4e:
77:cd:43:4e:a7:e7:20:dd:c2:c0:a5:11:13:c3:c1:
5c:4c:74:a8:22:a9:92:12:fc:a9:96:a3:60:c3:57:
ea:e8:91:f0:c7:af:39:5c:d0:ba:2b:16:23:1e:13:
47:bb:cd:a6:01:fb:0a:e2:ad:4d:42:ed:73:5f:30:
08:12:1b:7a:98:ce:63:94:d2:e8:74:74:65:91:ed:
2e:a7:ab:b8:f9:8b:d9:d2:a2:dd:50:7e:27:5e:ed:
8e:e3:b4:df:dd:7b:0a:75:94:cf:4f:30:a6:2d:5b:
02:43:23:39:49:a3:0b:e1:b5:77:47:32:40:5d:f8:
d7:b7:2a:d3:d3:e1:e2:dc:7d:8b:b4:56:88:e4:69:
9c:84:e6:d3:1b:40:4a:fc:7a:7d:48:4b:f1:ec:c9:
24:c0:57:59:01:c1:3b:fb:45:df:db:ec:d9:56:32:
ce:ad:01:31:37:74:5e:8e:e5:f9:46:83:ed:f7:d1:
65:f3:ae:04:ab:7a:ff:b9:63:fb:ee:98:04:7b:15:
f6:51:bf:b1:28:34:4e:ef:90:bc:c3:84:57:63:5a:
b7:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:AB:37:5C:65:09:BD:EF:D3:5D:45:0E:C2:87:46:B4:A5:BC:0E:F7
X509v3 Authority Key Identifier:
keyid:93:E8:F4:ED:5D:D0:63:01:C4:23:98:8E:78:6D:AB:F5:1C:5F:56:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k-j07V3QYwHEI5iOeG2r9RxfVnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/p6s3XGUJve_TXUUOwodGtKW8Dvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/a78979-dd24-4be7-8194-1fc19ea73a2a/1/k-j07V3QYwHEI5iOeG2r9RxfVnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.113.18.0/23
217.113.22.0/23
Signature Algorithm: sha256WithRSAEncryption
74:e6:fb:45:e1:58:53:05:48:be:7c:77:c8:e3:5a:c7:7c:7a:
b9:fb:56:62:3a:5b:5a:82:10:7e:6f:4a:bd:0b:d5:ed:9f:e0:
80:dd:d5:3a:a8:d5:9b:c0:df:a9:1a:a4:3e:6a:6a:e1:8b:29:
34:09:26:2c:47:77:1b:21:8f:f5:95:14:00:de:a4:bf:cd:2d:
3f:47:42:55:3f:7c:53:cd:1e:06:90:f0:7f:b5:6e:ca:af:71:
5d:c4:6c:42:87:6a:6a:82:cb:4f:ad:09:c7:66:b7:16:80:de:
da:ec:11:89:cd:01:66:a5:47:a0:fc:c8:b0:21:80:6e:65:c0:
6a:c2:db:86:51:48:46:88:29:25:5a:29:fb:cc:fc:bb:20:72:
1c:85:56:35:66:b9:d6:03:fe:41:62:af:eb:ca:72:d3:92:d4:
1e:d8:58:eb:a7:30:81:d0:74:91:a9:15:7b:91:9f:4d:a0:fe:
f1:bf:9d:e2:36:62:bf:05:bf:56:fe:73:40:ba:e8:1a:0b:56:
8c:8f:b4:84:0b:97:f7:00:09:35:a0:ad:1c:2f:bf:ec:3d:f4:
8d:ba:b3:ee:40:0d:83:08:fb:2b:3c:4e:c0:b1:8b:6c:68:f9:
09:35:18:aa:35:d8:7c:88:62:fb:5a:4a:07:7a:dc:77:7b:1a:
58:ba:dc:b7
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYhOLc4CMlJOybnlNHnkB/bqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzZThmNGVkNWRkMDYzMDFjNDIzOTg4ZTc4NmRhYmY1MWM1
ZjU2NzQwHhcNMjMwNTI0MTQzMzI0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhN2FiMzc1YzY1MDliZGVmZDM1ZDQ1MGVjMjg3NDZiNGE1YmMwZWY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWzKqXW3leFdk9d67XtijR64r1q
TINCvdkC9GN86R5Qs4Ou8tOGQHENL053zUNOp+cg3cLApRETw8FcTHSoIqmSEvyp
lqNgw1fq6JHwx685XNC6KxYjHhNHu82mAfsK4q1NQu1zXzAIEht6mM5jlNLodHRl
ke0up6u4+YvZ0qLdUH4nXu2O47Tf3XsKdZTPTzCmLVsCQyM5SaML4bV3RzJAXfjX
tyrT0+Hi3H2LtFaI5GmchObTG0BK/Hp9SEvx7MkkwFdZAcE7+0Xf2+zZVjLOrQEx
N3RejuX5RoPt99Fl864Eq3r/uWP77pgEexX2Ub+xKDRO75C8w4RXY1q3owIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKerN1xlCb3v011FDsKHRrSlvA73MB8GA1UdIwQY
MBaAFJPo9O1d0GMBxCOYjnhtq/UcX1Z0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQt
MWZjMTllYTczYTJhLzEvcDZzM1hHVUp2ZV9UWFVVT3dvZEd0S1c4RHZjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9hNzg5NzktZGQyNC00YmU3LTgxOTQtMWZjMTllYTczYTJh
LzEvay1qMDdWM1FZd0hFSTVpT2VHMnI5UnhmVm5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQB2XESAwQB
2XEWMA0GCSqGSIb3DQEBCwUAA4IBAQB05vtF4VhTBUi+fHfI41rHfHq5+1ZiOlta
ghB+b0q9C9Xtn+CA3dU6qNWbwN+pGqQ+amrhiyk0CSYsR3cbIY/1lRQA3qS/zS0/
R0JVP3xTzR4GkPB/tW7Kr3FdxGxCh2pqgstPrQnHZrcWgN7a7BGJzQFmpUeg/Miw
IYBuZcBqwtuGUUhGiCklWin7zPy7IHIchVY1ZrnWA/5BYq/rynLTktQe2FjrpzCB
0HSRqRV7kZ9NoP7xv53iNmK/Bb9W/nNAuugaC1aMj7SEC5f3AAk1oK0cL7/sPfSN
urPuQA2DCPsrPE7AsYtsaPkJNRiqNdh8iGL7WkoHetx3expYuty3
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:51:24 2023 by rpki-client on console-ams.rpki-client.org