Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/pP3kou7k9DuTrHvQ54F9Mh5Mhik.roa
File: pP3kou7k9DuTrHvQ54F9Mh5Mhik.roa (raw, json)
Hash identifier: DcQsbk5AWDg/LjQqnV1hm+TrQu7AKNeKMY/WcEjpM0A=
Subject key identifier: A4:FD:E4:A2:EE:E4:F4:3B:93:AC:7B:D0:E7:81:7D:32:1E:4C:86:29
Certificate issuer: /CN=0c90c356e2864f43894857443555d8b5c0352819
Certificate serial: 01890C3C7CD96BAA92F28EAF2BF81C69CE6C
Authority key identifier: 0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/pP3kou7k9DuTrHvQ54F9Mh5Mhik.roa
Signing time: Fri 30 Jun 2023 12:17:17 +0000
ROA not before: Fri 30 Jun 2023 12:17:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199698
IP address blocks: 185.86.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:3c:7c:d9:6b:aa:92:f2:8e:af:2b:f8:1c:69:ce:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c90c356e2864f43894857443555d8b5c0352819
Validity
Not Before: Jun 30 12:17:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a4fde4a2eee4f43b93ac7bd0e7817d321e4c8629
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:50:ca:21:90:08:92:79:f2:de:26:38:1d:0a:
50:33:e9:c1:ca:d9:a2:40:0b:34:fb:d2:50:76:e6:
a4:6d:7b:04:1a:b7:08:94:7a:a9:a0:c6:1f:01:a8:
59:80:07:3e:09:0b:12:51:57:3e:2f:8f:5b:1c:45:
a9:e4:26:33:50:23:61:d9:a7:e8:f7:8f:30:a3:62:
b4:63:b0:35:5e:63:ba:8f:02:0a:f3:84:cc:ba:70:
87:82:64:c2:e9:34:88:7b:07:d4:d5:78:2a:38:1e:
f3:45:b7:f0:09:a3:ad:f9:1d:fc:06:18:7e:8f:63:
dc:2d:eb:50:cb:e6:51:c0:be:bb:2e:58:39:25:5f:
52:7b:f6:c2:cd:bb:a2:99:11:00:53:8d:9b:c2:21:
14:0e:5d:dc:77:11:83:34:ed:85:75:9c:02:81:16:
7c:39:d4:ef:cf:d6:09:6c:03:62:fb:27:9a:55:a9:
ef:23:84:99:5c:8b:41:bf:42:a1:86:0c:56:82:4d:
02:7b:45:27:d5:e1:5d:b5:ab:ae:88:d5:12:cc:40:
17:38:33:f4:f5:4f:8c:08:33:db:f7:31:10:b5:a4:
f9:f7:a0:35:9d:25:3d:d6:4f:b6:9d:97:14:28:a0:
45:00:be:70:6a:c0:17:95:0f:11:12:db:c7:19:20:
38:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:FD:E4:A2:EE:E4:F4:3B:93:AC:7B:D0:E7:81:7D:32:1E:4C:86:29
X509v3 Authority Key Identifier:
keyid:0C:90:C3:56:E2:86:4F:43:89:48:57:44:35:55:D8:B5:C0:35:28:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DJDDVuKGT0OJSFdENVXYtcA1KBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/pP3kou7k9DuTrHvQ54F9Mh5Mhik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/ac5a56-163a-497a-9547-e3799ade9dfe/1/DJDDVuKGT0OJSFdENVXYtcA1KBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.86.193.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:3c:e0:cd:7a:bb:e3:59:c5:28:39:79:50:0d:f2:27:6a:95:
ad:81:24:65:c9:13:74:e9:71:f9:af:de:7d:69:e1:df:b1:92:
b9:d4:87:92:c9:aa:6e:79:86:ec:25:05:22:3a:f2:a4:9c:9a:
69:91:8c:68:41:b7:54:a1:09:33:a9:81:aa:92:2e:4c:39:b1:
0a:11:ab:fe:86:13:39:86:3a:2f:f4:ad:af:b6:f5:0c:d3:9f:
fe:0f:a6:3f:0a:c6:bf:ca:04:a2:ef:6f:52:38:31:c6:b0:33:
9f:97:99:2f:fb:cb:97:8f:ab:ba:83:24:19:c8:a6:23:a3:3d:
68:92:8d:db:54:d3:44:92:3e:69:77:0d:0f:e6:92:3d:ec:fb:
9a:99:6d:da:81:99:99:05:ab:6d:06:d2:cf:28:ce:b8:76:db:
72:6e:63:bc:12:43:77:c9:76:ce:c3:41:04:e4:d1:cd:9a:de:
f5:40:16:ee:ba:20:80:36:07:e6:28:df:21:8e:aa:58:23:a0:
71:11:96:83:48:2a:c2:62:9f:78:9e:33:ef:7c:68:be:31:16:
49:85:64:d3:15:25:ec:8f:e5:c0:bc:e8:93:17:2c:c7:e8:a8:
31:b5:ca:08:f6:de:9f:e2:ce:d2:6e:8a:f8:b6:bd:4e:8c:97:
3b:6b:96:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYkMPHzZa6qS8o6vK/gcac5sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBjOTBjMzU2ZTI4NjRmNDM4OTQ4NTc0NDM1NTVkOGI1YzAz
NTI4MTkwHhcNMjMwNjMwMTIxNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNGZkZTRhMmVlZTRmNDNiOTNhYzdiZDBlNzgxN2QzMjFlNGM4NjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyVDKIZAIknny3iY4HQpQM+nBytmi
QAs0+9JQduakbXsEGrcIlHqpoMYfAahZgAc+CQsSUVc+L49bHEWp5CYzUCNh2afo
948wo2K0Y7A1XmO6jwIK84TMunCHgmTC6TSIewfU1XgqOB7zRbfwCaOt+R38Bhh+
j2PcLetQy+ZRwL67Llg5JV9Se/bCzbuimREAU42bwiEUDl3cdxGDNO2FdZwCgRZ8
OdTvz9YJbANi+yeaVanvI4SZXItBv0KhhgxWgk0Ce0Un1eFdtauuiNUSzEAXODP0
9U+MCDPb9zEQtaT596A1nSU91k+2nZcUKKBFAL5wasAXlQ8REtvHGSA4pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKT95KLu5PQ7k6x70OeBfTIeTIYpMB8GA1UdIwQY
MBaAFAyQw1bihk9DiUhXRDVV2LXANSgZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDct
ZTM3OTlhZGU5ZGZlLzEvcFAza291N2s5RHVUckh2UTU0RjlNaDVNaGlrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC9hYzVhNTYtMTYzYS00OTdhLTk1NDctZTM3OTlhZGU5ZGZl
LzEvREpERFZ1S0dUME9KU0ZkRU5WWFl0Y0ExS0JrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuVbBMA0G
CSqGSIb3DQEBCwUAA4IBAQCPPODNervjWcUoOXlQDfInapWtgSRlyRN06XH5r959
aeHfsZK51IeSyapueYbsJQUiOvKknJppkYxoQbdUoQkzqYGqki5MObEKEav+hhM5
hjov9K2vtvUM05/+D6Y/Csa/ygSi729SODHGsDOfl5kv+8uXj6u6gyQZyKYjoz1o
ko3bVNNEkj5pdw0P5pI97PuamW3agZmZBattBtLPKM64dttybmO8EkN3yXbOw0EE
5NHNmt71QBbuuiCANgfmKN8hjqpYI6BxEZaDSCrCYp94njPvfGi+MRZJhWTTFSXs
j+XAvOiTFyzH6KgxtcoI9t6f4s7Sbor4tr1OjJc7a5Ye
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:44 2023 by rpki-client on console-ams.rpki-client.org