Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ovRD7b85--7uJs-0iRawxRPBfiw.roa
File: ovRD7b85--7uJs-0iRawxRPBfiw.roa (raw, json)
Hash identifier: 0zNznkLXAVZCBSJt2bZpiovLJrXR9jfLZ1gADOCEAiY=
Subject key identifier: A2:F4:43:ED:BF:39:FB:EE:EE:26:CF:B4:89:16:B0:C5:13:C1:7E:2C
Certificate issuer: /CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Certificate serial: 01856EF423FD45B23453A7BA3F0B6FAA8C87
Authority key identifier: 0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ovRD7b85--7uJs-0iRawxRPBfiw.roa
Signing time: Sun 01 Jan 2023 20:09:31 +0000
ROA not before: Sun 01 Jan 2023 20:09:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8893
IP address blocks: 193.101.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:f4:23:fd:45:b2:34:53:a7:ba:3f:0b:6f:aa:8c:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4a237d117df77e0b8aa512f6f25fb207f9a2b1
Validity
Not Before: Jan 1 20:09:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2f443edbf39fbeeee26cfb48916b0c513c17e2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:9d:21:05:af:d0:16:4f:0a:f3:70:0b:85:c8:
a5:79:a0:37:be:71:e0:08:21:19:8a:5f:84:70:3f:
d0:ee:f2:58:60:1b:84:2c:de:a3:18:8d:8a:98:9e:
27:74:f0:90:42:44:0f:10:c1:e4:e4:56:f3:98:6f:
bf:45:2a:a3:60:1c:d3:0b:64:62:4d:5c:0b:9c:95:
7a:f1:bd:2e:22:ad:11:5b:94:30:49:1a:7a:77:09:
bb:66:a2:a3:e2:e1:a5:c0:ef:80:e8:4f:f9:7f:cc:
94:30:ce:3c:b2:fb:48:f0:fa:c2:f2:a7:57:88:35:
90:59:06:c9:b3:aa:5c:9f:bb:0e:99:34:bf:61:f2:
98:c2:36:50:17:98:fb:58:6a:c8:30:26:31:91:3a:
77:12:00:27:f8:45:8c:45:ca:24:72:4a:c5:39:32:
28:79:bc:0d:ff:40:73:70:6c:28:98:1c:5e:f7:c1:
77:7a:20:f3:8b:f4:62:e4:8b:6c:f0:b8:e2:ff:44:
5a:a6:e8:ac:57:c4:74:b3:e2:40:82:05:6e:eb:2b:
ea:4d:64:06:fb:7d:be:a2:af:8a:38:c8:ee:a1:3c:
7f:5e:bf:1f:69:5c:5c:6c:6b:9e:07:7f:b7:76:d0:
3b:26:84:f0:b4:41:2b:04:54:d5:05:e8:c8:ba:2e:
da:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F4:43:ED:BF:39:FB:EE:EE:26:CF:B4:89:16:B0:C5:13:C1:7E:2C
X509v3 Authority Key Identifier:
keyid:0B:4A:23:7D:11:7D:F7:7E:0B:8A:A5:12:F6:F2:5F:B2:07:F9:A2:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0ojfRF9934LiqUS9vJfsgf5orE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/ovRD7b85--7uJs-0iRawxRPBfiw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/2b57fd-dfed-4363-b6a2-25c9afbb3221/1/C0ojfRF9934LiqUS9vJfsgf5orE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.101.47.0/24
Signature Algorithm: sha256WithRSAEncryption
84:12:77:e8:32:38:fe:5c:c2:57:46:09:95:13:f6:7a:ec:94:
40:e8:45:63:a0:7a:9a:93:18:9b:0b:8e:7d:ae:f7:c8:9c:8c:
b6:5c:84:ac:5b:80:c1:a5:ea:fa:ba:dc:26:3f:33:6f:f8:12:
5b:07:f6:cc:e1:1f:ac:ca:18:ee:98:25:4a:cb:38:ce:ef:b0:
14:49:66:4c:ad:1d:27:eb:3a:2a:92:cd:07:d5:0a:17:e2:05:
f5:16:66:7e:4e:6a:33:58:07:62:3c:c8:c9:80:58:39:19:e3:
42:d8:76:86:08:69:38:3b:40:a5:d6:24:41:15:94:3d:ea:6e:
cb:4e:bf:3e:0a:2d:18:69:d9:cf:b9:4f:9e:63:e0:21:18:94:
cf:d6:e3:9e:e5:52:93:4d:60:d9:8a:29:a1:3d:d9:e2:12:26:
f9:53:4d:d7:95:aa:97:e4:0f:4a:19:e4:fe:fd:69:e4:56:df:
1c:5d:65:5e:10:14:09:aa:73:ef:d5:11:fd:cf:70:d8:6f:40:
02:b1:36:eb:34:73:c6:2b:07:7d:92:5d:58:02:3d:4f:67:3b:
a3:93:f2:d0:a1:93:22:f3:41:50:93:2a:ea:55:bc:19:e0:d0:
a6:60:2a:2a:ee:4c:ed:66:55:e6:1e:e6:77:74:62:4f:26:bd:
11:b1:81:b2
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVu9CP9RbI0U6e6PwtvqoyHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGEyMzdkMTE3ZGY3N2UwYjhhYTUxMmY2ZjI1ZmIyMDdm
OWEyYjEwHhcNMjMwMTAxMjAwOTMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhMmY0NDNlZGJmMzlmYmVlZWUyNmNmYjQ4OTE2YjBjNTEzYzE3ZTJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJ0hBa/QFk8K83ALhcileaA3vnHg
CCEZil+EcD/Q7vJYYBuELN6jGI2KmJ4ndPCQQkQPEMHk5FbzmG+/RSqjYBzTC2Ri
TVwLnJV68b0uIq0RW5QwSRp6dwm7ZqKj4uGlwO+A6E/5f8yUMM48svtI8PrC8qdX
iDWQWQbJs6pcn7sOmTS/YfKYwjZQF5j7WGrIMCYxkTp3EgAn+EWMRcokckrFOTIo
ebwN/0BzcGwomBxe98F3eiDzi/Ri5Its8Lji/0RapuisV8R0s+JAggVu6yvqTWQG
+32+oq+KOMjuoTx/Xr8faVxcbGueB3+3dtA7JoTwtEErBFTVBejIui7aiwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKL0Q+2/Ofvu7ibPtIkWsMUTwX4sMB8GA1UdIwQY
MBaAFAtKI30Rffd+C4qlEvbyX7IH+aKxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTIt
MjVjOWFmYmIzMjIxLzEvb3ZSRDdiODUtLTd1SnMtMGlSYXd4UlBCZml3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8yYjU3ZmQtZGZlZC00MzYzLWI2YTItMjVjOWFmYmIzMjIx
LzEvQzBvamZSRjk5MzRMaXFVUzl2SmZzZ2Y1b3JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwWUvMA0G
CSqGSIb3DQEBCwUAA4IBAQCEEnfoMjj+XMJXRgmVE/Z67JRA6EVjoHqakxibC459
rvfInIy2XISsW4DBper6utwmPzNv+BJbB/bM4R+syhjumCVKyzjO77AUSWZMrR0n
6zoqks0H1QoX4gX1FmZ+TmozWAdiPMjJgFg5GeNC2HaGCGk4O0Cl1iRBFZQ96m7L
Tr8+Ci0YadnPuU+eY+AhGJTP1uOe5VKTTWDZiimhPdniEib5U03XlaqX5A9KGeT+
/WnkVt8cXWVeEBQJqnPv1RH9z3DYb0ACsTbrNHPGKwd9kl1YAj1PZzujk/LQoZMi
80FQkyrqVbwZ4NCmYCoq7kztZlXmHuZ3dGJPJr0RsYGy
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:14:31 2024 by rpki-client on console-ams.rpki-client.org