Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/OgfC4i8geCdZXI2Y9oEPKkg1Q8M.roa
File: OgfC4i8geCdZXI2Y9oEPKkg1Q8M.roa (raw, json)
Hash identifier: dtRPV0Hs1XxMz51WWG5K3jRl/FrTCMPCCRU2x2w4YhM=
Subject key identifier: 3A:07:C2:E2:2F:20:78:27:59:5C:8D:98:F6:81:0F:2A:48:35:43:C3
Certificate issuer: /CN=64d4e8723450d0a710c32d90ffea18529104e538
Certificate serial: 018B6C20E158DC1D042CA04F7A193AB7A91A
Authority key identifier: 64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/OgfC4i8geCdZXI2Y9oEPKkg1Q8M.roa
Signing time: Thu 26 Oct 2023 13:16:16 +0000
ROA not before: Thu 26 Oct 2023 13:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204957
IP address blocks: 193.203.49.0/24 maxlen: 24
193.203.48.0/24 maxlen: 24
91.207.61.0/24 maxlen: 24
2a13:f580:3::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6c:20:e1:58:dc:1d:04:2c:a0:4f:7a:19:3a:b7:a9:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64d4e8723450d0a710c32d90ffea18529104e538
Validity
Not Before: Oct 26 13:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a07c2e22f207827595c8d98f6810f2a483543c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e0:68:4b:d2:2b:5b:05:4d:10:fb:62:aa:60:
ae:51:ff:63:22:4f:70:86:00:e3:d5:43:d3:a1:49:
85:8f:aa:73:28:fa:63:db:01:87:a0:2a:76:d0:f8:
87:ea:14:cf:1d:1c:5e:fa:df:e6:22:0b:34:49:52:
2f:71:f4:2f:75:5a:b2:8d:98:54:ab:cb:0a:00:39:
aa:62:cb:b0:c4:d9:3c:d6:fe:76:50:76:96:88:c2:
19:43:91:65:5e:8f:84:11:45:f6:dc:bb:64:18:0d:
29:26:c3:95:64:1a:69:0a:48:9e:70:7a:a4:af:5e:
2f:72:ec:d3:78:a5:62:69:e5:48:8f:cd:65:29:26:
b7:f2:c2:89:35:63:14:43:62:83:3a:6d:ee:70:b4:
d9:a2:c2:96:95:ce:02:41:f5:42:07:a7:6f:50:11:
e4:59:49:d6:91:99:2b:b5:0a:cb:35:b6:67:b6:55:
d0:3f:fc:4f:1d:8a:51:ee:ab:a5:90:95:c4:32:0e:
45:86:4c:80:e5:97:39:fb:5b:09:3a:27:61:b8:9f:
0a:c3:44:1e:f1:00:0d:84:3c:7a:81:57:a3:ce:73:
68:76:19:67:9a:70:fc:42:35:65:76:6e:10:a8:2c:
9c:f8:2e:18:64:65:43:a7:6e:25:6b:b8:83:98:aa:
6e:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:07:C2:E2:2F:20:78:27:59:5C:8D:98:F6:81:0F:2A:48:35:43:C3
X509v3 Authority Key Identifier:
keyid:64:D4:E8:72:34:50:D0:A7:10:C3:2D:90:FF:EA:18:52:91:04:E5:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/OgfC4i8geCdZXI2Y9oEPKkg1Q8M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2310b1-96a1-48e4-aa72-422aed3a7702/1/ZNTocjRQ0KcQwy2Q_-oYUpEE5Tg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.207.61.0/24
193.203.48.0/23
IPv6:
2a13:f580:3::/48
Signature Algorithm: sha256WithRSAEncryption
a7:2e:00:4c:fe:39:bf:76:6d:8a:1d:bb:73:73:d0:31:2e:06:
0b:c4:b9:f0:8f:a3:98:21:7a:87:f6:21:b1:05:8f:c4:28:e3:
23:3f:22:80:3d:15:8b:96:52:bf:82:ae:9d:0d:b2:82:9f:cc:
a0:45:53:c4:69:04:9a:04:86:33:09:cc:f7:df:ba:ae:7e:bd:
79:ff:f3:99:44:17:c1:78:d0:b4:a5:9c:70:50:8b:6f:c3:05:
4d:a9:aa:a0:87:18:0f:b2:65:c6:b2:a9:2f:3c:8a:ed:70:ea:
fa:ba:db:0d:53:86:25:26:ca:85:37:d7:ea:73:1d:d9:16:39:
03:bf:29:a5:88:7b:25:83:01:f8:05:b9:73:13:ae:ce:79:55:
d6:9a:4f:93:b4:1d:92:34:f6:8c:53:4f:aa:3f:ae:56:9b:8a:
44:f4:12:24:89:8d:f0:b2:6b:e3:dd:92:69:d7:be:3d:61:d3:
0b:f1:68:24:9a:86:c5:ab:9b:e7:f5:59:cd:41:83:ef:79:61:
8a:64:46:14:6f:65:34:19:c5:21:d0:d2:39:f4:07:4f:22:95:
d4:c7:3f:80:69:6e:ad:f8:17:6e:f1:cf:9b:d6:6d:8f:7d:d6:
ab:fa:8a:97:04:b0:1a:f2:b7:ef:34:5b:ae:44:05:81:3d:e0:
3d:a9:88:b0
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYtsIOFY3B0ELKBPehk6t6kaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0ZDRlODcyMzQ1MGQwYTcxMGMzMmQ5MGZmZWExODUyOTEw
NGU1MzgwHhcNMjMxMDI2MTMxNjE2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzYTA3YzJlMjJmMjA3ODI3NTk1YzhkOThmNjgxMGYyYTQ4MzU0M2MzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruBoS9IrWwVNEPtiqmCuUf9jIk9w
hgDj1UPToUmFj6pzKPpj2wGHoCp20PiH6hTPHRxe+t/mIgs0SVIvcfQvdVqyjZhU
q8sKADmqYsuwxNk81v52UHaWiMIZQ5FlXo+EEUX23LtkGA0pJsOVZBppCkiecHqk
r14vcuzTeKViaeVIj81lKSa38sKJNWMUQ2KDOm3ucLTZosKWlc4CQfVCB6dvUBHk
WUnWkZkrtQrLNbZntlXQP/xPHYpR7qulkJXEMg5FhkyA5Zc5+1sJOidhuJ8Kw0Qe
8QANhDx6gVejznNodhlnmnD8QjVldm4QqCyc+C4YZGVDp24la7iDmKpuLQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFDoHwuIvIHgnWVyNmPaBDypINUPDMB8GA1UdIwQY
MBaAFGTU6HI0UNCnEMMtkP/qGFKRBOU4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzIt
NDIyYWVkM2E3NzAyLzEvT2dmQzRpOGdlQ2RaWEkyWTlvRVBLa2cxUThNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMzEwYjEtOTZhMS00OGU0LWFhNzItNDIyYWVkM2E3NzAy
LzEvWk5Ub2NqUlEwS2NRd3kyUV8tb1lVcEVFNVRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAW889AwQB
wcswMA8EAgACMAkDBwAqE/WAAAMwDQYJKoZIhvcNAQELBQADggEBAKcuAEz+Ob92
bYodu3Nz0DEuBgvEufCPo5gheof2IbEFj8Qo4yM/IoA9FYuWUr+Crp0NsoKfzKBF
U8RpBJoEhjMJzPffuq5+vXn/85lEF8F40LSlnHBQi2/DBU2pqqCHGA+yZcayqS88
iu1w6vq62w1ThiUmyoU31+pzHdkWOQO/KaWIeyWDAfgFuXMTrs55VdaaT5O0HZI0
9oxTT6o/rlabikT0EiSJjfCya+PdkmnXvj1h0wvxaCSahsWrm+f1Wc1Bg+95YYpk
RhRvZTQZxSHQ0jn0B08ildTHP4Bpbq34F27xz5vWbY991qv6ipcEsBryt+80W65E
BYE94D2piLA=
-----END CERTIFICATE-----
Generated at Fri Nov 24 14:06:03 2023 by rpki-client on console-ams.rpki-client.org