Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa
File: U58zKCOKC6bjYQ_OeVFiiyafhuE.roa (raw, json)
Hash identifier: KnKeNBxGoVArZVoeVjT4vKalonpxDpELvarXcLsEB4Y=
Subject key identifier: 53:9F:33:28:23:8A:0B:A6:E3:61:0F:CE:79:51:62:8B:26:9F:86:E1
Certificate issuer: /CN=fb1157e81b7c9e43360a1cb50a31401175921808
Certificate serial: 0186CF86099F7E94E6651B0AB8596DA98880
Authority key identifier: FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa
Signing time: Sat 11 Mar 2023 07:15:13 +0000
ROA not before: Sat 11 Mar 2023 07:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 193.108.105.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:cf:86:09:9f:7e:94:e6:65:1b:0a:b8:59:6d:a9:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb1157e81b7c9e43360a1cb50a31401175921808
Validity
Not Before: Mar 11 07:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=539f3328238a0ba6e3610fce7951628b269f86e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ea:dc:54:1c:d8:e8:3d:c6:af:3a:ec:92:82:
01:90:a6:95:68:f5:d1:30:64:4a:12:02:2d:37:4b:
b1:9f:1c:d8:0a:6c:c6:ac:b7:f9:e8:a7:6b:09:c8:
0b:62:3e:12:3a:3c:d9:23:1f:9d:18:f4:92:81:c9:
19:9b:93:62:b7:1d:41:b7:5c:7a:d1:5c:84:85:39:
f7:4a:31:d6:bc:c4:5a:64:b1:3f:2c:4e:63:77:e1:
22:05:e6:8c:18:91:1d:1a:e9:6a:fd:99:06:51:5d:
46:3d:60:6c:6f:96:bc:25:1e:74:d1:16:10:35:68:
76:00:49:23:c5:c3:c5:32:d1:f9:31:b9:0c:e3:2f:
fb:cc:80:70:29:2d:1f:3e:e8:ef:59:e2:9d:7d:c5:
69:b9:70:56:a5:f0:9d:cb:7d:4f:be:f0:ae:62:12:
7e:6c:25:9d:b7:2e:8c:9e:fb:96:85:57:0b:3e:71:
eb:14:e2:ad:0f:83:67:b8:48:a0:e5:a1:90:6f:8b:
c5:bc:62:be:4f:fc:d5:43:f1:64:78:0c:ff:4e:80:
07:3e:80:ae:9b:3d:1f:38:42:0e:f8:ac:3c:bb:d0:
5b:58:f9:23:57:9f:b9:c0:c9:a7:88:3c:0b:e1:24:
4c:53:1f:1d:8c:74:a6:c4:59:be:8e:39:86:20:92:
0b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:9F:33:28:23:8A:0B:A6:E3:61:0F:CE:79:51:62:8B:26:9F:86:E1
X509v3 Authority Key Identifier:
keyid:FB:11:57:E8:1B:7C:9E:43:36:0A:1C:B5:0A:31:40:11:75:92:18:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/U58zKCOKC6bjYQ_OeVFiiyafhuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/193c71-c94a-416f-a186-416664f01a2c/1/1-xFX6Bt8nkM2Chy1CjFAEXWSGAg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.105.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:c0:48:c9:d0:7c:2d:f4:be:44:30:17:bd:5c:c0:13:52:9d:
f7:42:6b:f6:c2:9b:ef:98:43:64:01:85:24:00:66:3f:c3:8c:
e3:d1:de:fa:65:a4:92:ec:20:82:b0:8b:df:0a:6c:36:33:6b:
96:b9:a9:90:ff:3e:bf:e2:a1:6d:0c:e1:bd:ec:87:5c:9e:63:
f9:c4:8a:3b:fa:9b:ce:0d:89:a7:de:fa:e3:d1:0a:55:27:40:
d9:e2:bf:19:0c:27:ca:55:de:01:c9:e6:1a:73:d8:ab:23:24:
cd:04:bc:97:8d:dc:1e:84:2a:e7:7a:75:30:9e:4f:b3:b8:3c:
c5:5e:e1:fb:b8:0d:8e:8f:1e:d2:7d:95:c5:2e:11:ad:ea:43:
77:b4:d5:9c:25:d3:2e:fc:5c:5a:3f:d3:a0:0b:0e:01:e9:6f:
48:3d:22:f0:3f:8a:39:75:cf:3a:fe:b9:c4:b6:97:bb:2d:95:
05:9d:b6:0d:d4:3d:38:45:6f:1d:b0:1f:23:46:fb:d5:9d:28:
34:ed:a8:0b:c6:bf:e3:7d:48:cd:17:c8:8b:96:a9:0e:13:60:
7d:0f:04:91:b8:ef:d7:78:c0:24:1c:95:33:a5:af:60:47:66:
cf:83:14:db:d4:dc:d4:e3:eb:3e:aa:92:01:dd:97:e6:37:b1:
33:ce:f8:95
-----BEGIN CERTIFICATE-----
MIIE/zCCA+egAwIBAgISAYbPhgmffpTmZRsKuFltqYiAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiMTE1N2U4MWI3YzllNDMzNjBhMWNiNTBhMzE0MDExNzU5
MjE4MDgwHhcNMjMwMzExMDcxNTEzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg1MzlmMzMyODIzOGEwYmE2ZTM2MTBmY2U3OTUxNjI4YjI2OWY4NmUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqOrcVBzY6D3GrzrskoIBkKaVaPXR
MGRKEgItN0uxnxzYCmzGrLf56KdrCcgLYj4SOjzZIx+dGPSSgckZm5Nitx1Bt1x6
0VyEhTn3SjHWvMRaZLE/LE5jd+EiBeaMGJEdGulq/ZkGUV1GPWBsb5a8JR500RYQ
NWh2AEkjxcPFMtH5MbkM4y/7zIBwKS0fPujvWeKdfcVpuXBWpfCdy31PvvCuYhJ+
bCWdty6MnvuWhVcLPnHrFOKtD4NnuEig5aGQb4vFvGK+T/zVQ/FkeAz/ToAHPoCu
mz0fOEIO+Kw8u9BbWPkjV5+5wMmniDwL4SRMUx8djHSmxFm+jjmGIJILxwIDAQAB
o4ICCzCCAgcwHQYDVR0OBBYEFFOfMygjigum42EPznlRYosmn4bhMB8GA1UdIwQY
MBaAFPsRV+gbfJ5DNgoctQoxQBF1khgIMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS14Rlg2QnQ4bmtNMkNoeTFDakZBRVhXU0dBZy5jZXIw
gY0GCCsGAQUFBwELBIGAMH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2
LTQxNjY2NGYwMWEyYy8xL1U1OHpLQ09LQzZiallRX09lVkZpaXlhZmh1RS5yb2Ew
gYIGA1UdHwR7MHkwd6B1oHOGcXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvNTQvMTkzYzcxLWM5NGEtNDE2Zi1hMTg2LTQxNjY2NGYwMWEy
Yy8xLzEteEZYNkJ0OG5rTTJDaHkxQ2pGQUVYV1NHQWcuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADBbGkw
DQYJKoZIhvcNAQELBQADggEBAA7ASMnQfC30vkQwF71cwBNSnfdCa/bCm++YQ2QB
hSQAZj/DjOPR3vplpJLsIIKwi98KbDYza5a5qZD/Pr/ioW0M4b3sh1yeY/nEijv6
m84Niafe+uPRClUnQNnivxkMJ8pV3gHJ5hpz2KsjJM0EvJeN3B6EKud6dTCeT7O4
PMVe4fu4DY6PHtJ9lcUuEa3qQ3e01Zwl0y78XFo/06ALDgHpb0g9IvA/ijl1zzr+
ucS2l7stlQWdtg3UPThFbx2wHyNG+9WdKDTtqAvGv+N9SM0XyIuWqQ4TYH0PBJG4
79d4wCQclTOlr2BHZs+DFNvU3NTj6z6qkgHdl+Y3sTPO+JU=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:52:13 2023 by rpki-client on console-ams.rpki-client.org