Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa
File: 81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa (raw, json)
Hash identifier: wMJeNu47uORBBLrAXBykJ5dbavqDrskdg5bq8TPKDmM=
Subject key identifier: F3:58:BA:C8:F5:56:33:D2:35:90:D2:6D:DF:3E:1F:E1:90:F7:48:71
Certificate issuer: /CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Certificate serial: 0187DD3AAE08CB02B1415EA52D2E01E7B94F
Authority key identifier: 16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa
Signing time: Tue 02 May 2023 16:10:23 +0000
ROA not before: Tue 02 May 2023 16:10:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206983
IP address blocks: 193.228.186.0/24 maxlen: 24
193.228.185.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dd:3a:ae:08:cb:02:b1:41:5e:a5:2d:2e:01:e7:b9:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1633f299ea9a2db82b00435d4b3d160ec43c42d6
Validity
Not Before: May 2 16:10:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f358bac8f55633d23590d26ddf3e1fe190f74871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f0:53:87:9b:9a:0b:cc:ec:56:ed:be:6e:95:
2a:88:40:ff:1e:c8:5f:78:68:3e:41:62:e9:92:c9:
19:ca:8a:7a:0a:8f:ab:95:d6:cc:86:45:1e:be:55:
96:cd:e7:55:e7:fa:86:9b:5e:ba:69:a3:7f:51:d9:
41:bb:20:7f:d9:0a:ba:08:33:c5:78:f6:fa:44:7b:
9d:83:92:e3:7e:ef:9b:33:2a:a9:ec:29:b5:0a:00:
a0:b5:07:69:45:ee:36:a2:d0:2b:32:7c:0e:e4:d4:
60:ce:8b:ed:81:29:b9:49:6f:b5:90:22:00:6b:e0:
cb:2f:fa:e6:a0:e2:99:fe:c7:b7:a8:e3:51:c3:fb:
e5:6f:e6:87:0f:77:59:3c:96:23:e6:a6:b5:fa:be:
46:8b:17:b9:3c:35:ed:30:af:64:a6:19:c6:df:9d:
11:c0:db:84:51:b3:d1:f1:1a:0b:f3:c5:22:9d:6a:
38:4a:fe:12:8a:9c:ef:7b:ed:86:be:1e:a2:a0:d1:
6b:c8:db:a2:73:28:96:ca:b4:b0:20:2e:fc:3a:23:
02:bd:ec:06:6a:e2:ed:79:ae:09:3a:ef:76:98:bf:
9f:83:f9:59:18:8a:95:d5:a0:f5:02:8a:17:64:92:
07:6f:25:ca:e5:a6:64:59:67:f1:78:38:1c:33:37:
b9:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:58:BA:C8:F5:56:33:D2:35:90:D2:6D:DF:3E:1F:E1:90:F7:48:71
X509v3 Authority Key Identifier:
keyid:16:33:F2:99:EA:9A:2D:B8:2B:00:43:5D:4B:3D:16:0E:C4:3C:42:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FjPymeqaLbgrAENdSz0WDsQ8QtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/81i6yPVWM9I1kNJt3z4f4ZD3SHE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c6cdee-e439-4c1e-9731-79a8291b157f/1/FjPymeqaLbgrAENdSz0WDsQ8QtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.185.0-193.228.186.255
Signature Algorithm: sha256WithRSAEncryption
22:63:71:f5:b0:b1:4d:2b:ad:71:6b:15:87:e2:95:3b:a3:d5:
52:85:f8:ed:54:32:3f:ee:0e:07:6b:83:8d:c4:e0:b9:61:0a:
f0:7f:ad:4d:5d:0b:15:bf:12:df:fa:29:a7:7e:98:7b:24:60:
8a:cb:af:f2:dc:f0:c7:fc:58:4a:d6:41:c2:a4:76:3f:42:5b:
7b:74:c3:91:fd:aa:29:7b:12:83:fe:b3:aa:d6:c4:a5:5f:f7:
1b:f8:66:ca:bc:88:5e:e4:31:bf:d3:08:2c:54:2d:b2:5a:17:
ee:d9:1c:6e:88:f8:aa:4a:e8:36:0f:48:73:be:39:54:c1:60:
e1:44:6b:a1:b7:97:2d:91:11:be:ad:99:50:95:2f:4a:dc:ff:
e5:67:fb:27:0c:24:e1:e3:ef:2c:41:03:9e:84:28:e7:33:a4:
58:7e:95:b4:d6:aa:59:da:81:cc:9b:3b:5d:93:ec:0d:1c:49:
f2:09:b8:5c:7f:89:10:39:51:1c:3e:bd:8f:01:f8:6b:ab:4a:
44:6f:c7:74:fc:87:3b:05:18:9b:ae:2f:c1:cd:39:8a:3b:40:
fd:a0:56:dd:49:fd:0c:db:83:63:74:c5:7c:1a:53:b1:5d:0f:
59:82:ae:fe:b9:1d:1c:84:19:5f:9f:ff:c5:ab:bd:dc:62:5a:
3c:25:da:29
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAYfdOq4IywKxQV6lLS4B57lPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE2MzNmMjk5ZWE5YTJkYjgyYjAwNDM1ZDRiM2QxNjBlYzQz
YzQyZDYwHhcNMjMwNTAyMTYxMDIzWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmMzU4YmFjOGY1NTYzM2QyMzU5MGQyNmRkZjNlMWZlMTkwZjc0ODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/BTh5uaC8zsVu2+bpUqiED/Hshf
eGg+QWLpkskZyop6Co+rldbMhkUevlWWzedV5/qGm166aaN/UdlBuyB/2Qq6CDPF
ePb6RHudg5Ljfu+bMyqp7Cm1CgCgtQdpRe42otArMnwO5NRgzovtgSm5SW+1kCIA
a+DLL/rmoOKZ/se3qONRw/vlb+aHD3dZPJYj5qa1+r5Gixe5PDXtMK9kphnG350R
wNuEUbPR8RoL88UinWo4Sv4Sipzve+2Gvh6ioNFryNuicyiWyrSwIC78OiMCvewG
auLtea4JOu92mL+fg/lZGIqV1aD1AooXZJIHbyXK5aZkWWfxeDgcMze5XwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFPNYusj1VjPSNZDSbd8+H+GQ90hxMB8GA1UdIwQY
MBaAFBYz8pnqmi24KwBDXUs9Fg7EPELWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEt
NzlhODI5MWIxNTdmLzEvODFpNnlQVldNOUkxa05KdDN6NGY0WkQzU0hFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jNmNkZWUtZTQzOS00YzFlLTk3MzEtNzlhODI5MWIxNTdm
LzEvRmpQeW1lcWFMYmdyQUVOZFN6MFdEc1E4UXRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADB5LkD
BADB5LowDQYJKoZIhvcNAQELBQADggEBACJjcfWwsU0rrXFrFYfilTuj1VKF+O1U
Mj/uDgdrg43E4LlhCvB/rU1dCxW/Et/6Kad+mHskYIrLr/Lc8Mf8WErWQcKkdj9C
W3t0w5H9qil7EoP+s6rWxKVf9xv4Zsq8iF7kMb/TCCxULbJaF+7ZHG6I+KpK6DYP
SHO+OVTBYOFEa6G3ly2REb6tmVCVL0rc/+Vn+ycMJOHj7yxBA56EKOczpFh+lbTW
qlnagcybO12T7A0cSfIJuFx/iRA5URw+vY8B+GurSkRvx3T8hzsFGJuuL8HNOYo7
QP2gVt1J/Qzbg2N0xXwaU7FdD1mCrv65HRyEGV+f/8WrvdxiWjwl2ik=
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:53 2024 by rpki-client on console-ams.rpki-client.org