Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/jvIGH2OvW1VA8X8FLzHVnvNl2vs.roa
File: jvIGH2OvW1VA8X8FLzHVnvNl2vs.roa (raw, json)
Hash identifier: YsvXAHTq1EuO7caOJ/Soij+5jQsmEJ+gpzbOf+/oOts=
Subject key identifier: 8E:F2:06:1F:63:AF:5B:55:40:F1:7F:05:2F:31:D5:9E:F3:65:DA:FB
Certificate issuer: /CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Certificate serial: 018B6853AC076E74134F29AE9540D31ECB73
Authority key identifier: 13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/jvIGH2OvW1VA8X8FLzHVnvNl2vs.roa
Signing time: Wed 25 Oct 2023 19:33:15 +0000
ROA not before: Wed 25 Oct 2023 19:33:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 174
IP address blocks: 193.109.168.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:68:53:ac:07:6e:74:13:4f:29:ae:95:40:d3:1e:cb:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1366b960a6f1f04439f09186f9ecf531a9ce2648
Validity
Not Before: Oct 25 19:33:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ef2061f63af5b5540f17f052f31d59ef365dafb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d6:9d:b2:ac:7f:92:1f:f4:28:40:1b:5b:ee:
f5:90:a4:32:85:3a:7f:59:11:87:4f:c7:f6:ef:f7:
23:12:e2:d3:19:ef:af:ca:1c:18:65:8c:8d:dc:55:
6d:c3:2c:96:df:c6:a9:0b:06:28:39:32:22:56:93:
4b:7d:f6:43:64:ed:bc:f0:eb:90:4f:3d:dc:11:25:
cb:50:1f:af:61:3d:9b:16:2f:d5:e7:ce:2b:4d:d7:
86:28:cb:f9:f5:ad:3b:ee:c1:a6:9a:ff:a0:7d:6c:
8c:f5:ed:6a:bf:23:72:fa:d3:4a:c1:d7:10:51:79:
6a:d9:86:7e:4a:9e:0d:84:67:02:4c:58:47:be:86:
bd:a8:55:f6:29:55:3d:8c:f2:8a:a7:3f:d5:5f:7d:
73:d2:15:25:34:ed:4e:a6:dd:f0:e7:38:c5:00:30:
b7:9d:1f:61:16:3b:fe:38:3f:a1:40:68:8e:b7:32:
85:3f:ae:d3:21:0d:6a:a7:99:85:b5:78:1e:d3:db:
48:7f:56:e1:e4:2e:dc:a1:f8:1d:85:15:d6:6d:e9:
ad:58:03:46:4b:ca:dd:ef:f7:63:ec:de:08:56:86:
e4:61:c8:71:f3:0a:d3:e5:c1:cb:c5:61:1b:f2:d0:
2f:d3:59:bb:f3:7a:0f:f3:9b:bd:82:f9:15:a2:68:
26:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:F2:06:1F:63:AF:5B:55:40:F1:7F:05:2F:31:D5:9E:F3:65:DA:FB
X509v3 Authority Key Identifier:
keyid:13:66:B9:60:A6:F1:F0:44:39:F0:91:86:F9:EC:F5:31:A9:CE:26:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E2a5YKbx8EQ58JGG-ez1ManOJkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/jvIGH2OvW1VA8X8FLzHVnvNl2vs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/4402b0-2eca-4836-bf22-a967159f887d/1/E2a5YKbx8EQ58JGG-ez1ManOJkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.109.168.0/22
Signature Algorithm: sha256WithRSAEncryption
a4:29:8d:9f:ba:26:98:8a:e7:b3:ba:2b:ea:ce:24:ac:9a:c0:
a9:88:d9:76:4b:df:6a:ee:5f:26:81:7a:29:57:99:f0:9b:5b:
38:bf:80:52:2a:c3:3d:71:f1:ae:c4:4b:55:73:aa:49:85:b6:
7d:88:9b:a3:97:66:94:8b:d2:2f:81:9d:5c:ab:62:cf:4b:00:
36:1b:79:bb:1d:4c:e6:77:8c:06:ca:b7:90:2b:26:ac:cc:51:
c6:88:14:16:c4:79:5f:85:b9:e3:3e:7c:33:7d:1f:50:6e:2c:
60:a8:64:42:a6:ac:b0:da:97:c7:59:8f:a6:be:b0:f0:4f:1f:
1f:9f:93:d9:b3:b3:1e:f5:8a:75:01:c5:98:43:31:52:36:ea:
48:07:41:ea:b6:45:e0:0c:fa:02:f5:61:75:2d:c1:d2:12:ac:
7a:16:57:3f:b3:44:fb:63:d3:34:e6:01:97:e6:2d:61:ed:3d:
20:b5:f8:65:32:a5:96:d4:86:a9:50:e2:7d:2b:83:7d:a1:9c:
b2:1c:69:3b:b1:38:ab:98:5f:12:ac:a1:30:dc:81:d8:41:8e:
b6:d4:cf:8a:03:ba:05:77:f5:20:eb:ac:78:41:33:38:4a:65:
0e:d8:17:b5:a9:92:31:13:9d:44:b9:55:37:37:ab:8a:85:87:
fc:1e:91:f9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYtoU6wHbnQTTymulUDTHstzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzNjZiOTYwYTZmMWYwNDQzOWYwOTE4NmY5ZWNmNTMxYTlj
ZTI2NDgwHhcNMjMxMDI1MTkzMzE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4ZWYyMDYxZjYzYWY1YjU1NDBmMTdmMDUyZjMxZDU5ZWYzNjVkYWZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9adsqx/kh/0KEAbW+71kKQyhTp/
WRGHT8f27/cjEuLTGe+vyhwYZYyN3FVtwyyW38apCwYoOTIiVpNLffZDZO288OuQ
Tz3cESXLUB+vYT2bFi/V584rTdeGKMv59a077sGmmv+gfWyM9e1qvyNy+tNKwdcQ
UXlq2YZ+Sp4NhGcCTFhHvoa9qFX2KVU9jPKKpz/VX31z0hUlNO1Opt3w5zjFADC3
nR9hFjv+OD+hQGiOtzKFP67TIQ1qp5mFtXge09tIf1bh5C7cofgdhRXWbemtWANG
S8rd7/dj7N4IVobkYchx8wrT5cHLxWEb8tAv01m783oP85u9gvkVomgmlwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFI7yBh9jr1tVQPF/BS8x1Z7zZdr7MB8GA1UdIwQY
MBaAFBNmuWCm8fBEOfCRhvns9TGpziZIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjIt
YTk2NzE1OWY4ODdkLzEvanZJR0gyT3ZXMVZBOFg4Rkx6SFZudk5sMnZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni80NDAyYjAtMmVjYS00ODM2LWJmMjItYTk2NzE1OWY4ODdk
LzEvRTJhNVlLYng4RVE1OEpHRy1lejFNYW5PSmtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwW2oMA0G
CSqGSIb3DQEBCwUAA4IBAQCkKY2fuiaYiuezuivqziSsmsCpiNl2S99q7l8mgXop
V5nwm1s4v4BSKsM9cfGuxEtVc6pJhbZ9iJujl2aUi9IvgZ1cq2LPSwA2G3m7HUzm
d4wGyreQKyaszFHGiBQWxHlfhbnjPnwzfR9QbixgqGRCpqyw2pfHWY+mvrDwTx8f
n5PZs7Me9Yp1AcWYQzFSNupIB0HqtkXgDPoC9WF1LcHSEqx6Flc/s0T7Y9M05gGX
5i1h7T0gtfhlMqWW1IapUOJ9K4N9oZyyHGk7sTirmF8SrKEw3IHYQY621M+KA7oF
d/Ug66x4QTM4SmUO2Be1qZIxE51EuVU3N6uKhYf8HpH5
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:32 2024 by rpki-client on console-fra.rpki-client.org