Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbQJc8Q61tBqXyds_KQr-KfDSKY.roa
File: jbQJc8Q61tBqXyds_KQr-KfDSKY.roa (raw, json)
Hash identifier: TikZ1K7vnCsIoi1+o1JtqnzFakgAw14j6W2N4F8ZLEI=
Subject key identifier: 8D:B4:09:73:C4:3A:D6:D0:6A:5F:27:6C:FC:A4:2B:F8:A7:C3:48:A6
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 0188EDBBA21BC0401D99613BEB29853F09D7
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbQJc8Q61tBqXyds_KQr-KfDSKY.roa
Signing time: Sat 24 Jun 2023 14:07:56 +0000
ROA not before: Sat 24 Jun 2023 14:07:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 193.163.85.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ed:bb:a2:1b:c0:40:1d:99:61:3b:eb:29:85:3f:09:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 24 14:07:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8db40973c43ad6d06a5f276cfca42bf8a7c348a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:54:2b:a3:df:ee:27:fa:53:f3:72:a7:81:82:
c4:9f:b3:0a:da:a0:2c:ea:b3:b5:35:3c:5e:e0:8a:
69:6e:52:4e:ed:44:96:f1:0c:8a:05:73:f8:03:c1:
04:b2:2a:da:18:cc:6c:46:23:63:21:34:e3:31:fa:
5b:69:b2:f4:f6:6c:a3:f3:02:85:62:93:dd:5f:f5:
be:ea:0b:e1:0d:ac:21:c1:bd:36:11:8d:f4:92:27:
2b:2b:b5:a1:cb:91:da:ee:ee:2c:5d:2f:7c:55:83:
96:df:c0:58:1d:de:ff:93:21:cb:4f:d9:12:0d:a0:
ee:1c:d3:05:57:76:99:9b:90:14:53:43:5e:5e:67:
50:96:21:b6:10:4b:17:59:c0:6f:66:07:79:14:bd:
9f:81:a1:b4:49:16:9f:0c:99:09:92:d9:ed:5a:a3:
c6:50:ed:d7:dd:a6:a3:c6:1d:fe:f1:f0:69:99:e1:
65:ba:40:6a:c4:c0:a9:11:ac:37:e6:e3:48:4a:23:
ff:46:f3:d4:b0:70:5e:65:0c:56:36:99:c9:e3:9f:
6a:5a:f6:93:13:1e:d2:65:53:80:de:6c:8d:89:c7:
e3:8b:b0:ca:b1:4e:cf:33:e9:9c:72:ec:7c:e9:ad:
ed:c2:19:b9:30:68:e1:7d:ff:74:26:d6:50:52:98:
4c:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B4:09:73:C4:3A:D6:D0:6A:5F:27:6C:FC:A4:2B:F8:A7:C3:48:A6
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/jbQJc8Q61tBqXyds_KQr-KfDSKY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.85.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:8b:38:e5:87:bc:66:50:58:b5:f3:bc:77:de:27:77:04:d3:
ed:3f:3e:18:9e:c7:9a:9e:00:26:8e:06:23:7f:6a:77:61:9f:
ab:47:b0:f4:1b:f7:50:4c:44:ac:99:eb:30:03:42:76:02:d1:
da:29:64:d7:4f:61:68:fa:1e:87:82:37:98:8a:49:49:53:03:
cc:6f:b3:bc:80:83:e1:1e:cc:a4:1c:4b:49:0a:ec:e5:12:4e:
9a:50:a7:b5:b5:4e:63:8a:f8:77:f2:d1:59:54:a6:7e:d5:a7:
4b:d6:75:3e:60:5f:df:50:25:2b:dd:99:22:af:2c:98:36:e0:
ef:d2:7f:2d:a5:d7:06:d3:39:50:8a:c3:54:f3:6c:c2:4c:e4:
40:30:14:30:bb:45:ef:08:59:c3:5f:63:83:b3:d9:9e:f1:52:
6b:b8:86:72:0f:37:06:9f:6f:d9:3b:a9:2a:26:9e:de:cf:85:
53:55:69:d2:53:2e:f2:8d:79:21:a7:2e:a9:ad:f1:f3:cb:f5:
5f:83:e4:ad:31:39:e2:18:88:52:d6:aa:28:9b:53:fd:bb:e9:
f6:4b:91:68:92:4b:07:41:3b:ba:a3:ad:a7:31:76:82:01:15:
81:2c:fd:7e:1f:a4:d3:83:69:90:8d:01:fe:d5:c8:23:fc:26:
c7:80:84:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYjtu6IbwEAdmWE76ymFPwnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDYzZTkxNjcxN2FiMTFjY2NmMTFlZjFmYjVjMTJlZTQxOTUw
ZmFkOWIwHhcNMjMwNjI0MTQwNzU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZGI0MDk3M2M0M2FkNmQwNmE1ZjI3NmNmY2E0MmJmOGE3YzM0OGE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlQro9/uJ/pT83KngYLEn7MK2qAs
6rO1NTxe4IppblJO7USW8QyKBXP4A8EEsiraGMxsRiNjITTjMfpbabL09myj8wKF
YpPdX/W+6gvhDawhwb02EY30kicrK7Why5Ha7u4sXS98VYOW38BYHd7/kyHLT9kS
DaDuHNMFV3aZm5AUU0NeXmdQliG2EEsXWcBvZgd5FL2fgaG0SRafDJkJktntWqPG
UO3X3aajxh3+8fBpmeFlukBqxMCpEaw35uNISiP/RvPUsHBeZQxWNpnJ459qWvaT
Ex7SZVOA3myNicfji7DKsU7PM+mccux86a3twhm5MGjhff90JtZQUphMtwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI20CXPEOtbQal8nbPykK/inw0imMB8GA1UdIwQY
MBaAFGPpFnF6sRzM8R7x+1wS7kGVD62bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYt
ZGM1ZWM3NDhmNmE1LzEvamJRSmM4UTYxdEJxWHlkc19LUXItS2ZEU0tZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS80OTU3YTQtY2U1OS00MzE1LTk5NzYtZGM1ZWM3NDhmNmE1
LzEvWS1rV2NYcXhITXp4SHZIN1hCTHVRWlVQclpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaNVMA0G
CSqGSIb3DQEBCwUAA4IBAQAdizjlh7xmUFi187x33id3BNPtPz4YnseangAmjgYj
f2p3YZ+rR7D0G/dQTESsmeswA0J2AtHaKWTXT2Fo+h6HgjeYiklJUwPMb7O8gIPh
HsykHEtJCuzlEk6aUKe1tU5jivh38tFZVKZ+1adL1nU+YF/fUCUr3ZkiryyYNuDv
0n8tpdcG0zlQisNU82zCTORAMBQwu0XvCFnDX2ODs9me8VJruIZyDzcGn2/ZO6kq
Jp7ez4VTVWnSUy7yjXkhpy6prfHzy/Vfg+StMTniGIhS1qoom1P9u+n2S5FokksH
QTu6o62nMXaCARWBLP1+H6TTg2mQjQH+1cgj/CbHgISF
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:02 2023 by rpki-client on console-ams.rpki-client.org