Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/pxq19vZLEiccwobQo-qq_bAEMcs.roa
File: pxq19vZLEiccwobQo-qq_bAEMcs.roa (raw, json)
Hash identifier: CJuBbsWoHfJMEF36Zl8Aj0Z6pkba3czjvIbrtNzppCQ=
Subject key identifier: A7:1A:B5:F6:F6:4B:12:27:1C:C2:86:D0:A3:EA:AA:FD:B0:04:31:CB
Certificate issuer: /CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Certificate serial: 01856F5DA9CD0E62C106A51FE555FF214E4A
Authority key identifier: 70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/pxq19vZLEiccwobQo-qq_bAEMcs.roa
Signing time: Sun 01 Jan 2023 22:04:47 +0000
ROA not before: Sun 01 Jan 2023 22:04:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.23.168.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:a9:cd:0e:62:c1:06:a5:1f:e5:55:ff:21:4e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f3dabaee24fc43b865aafa3f3c9c2f364bfc9
Validity
Not Before: Jan 1 22:04:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a71ab5f6f64b12271cc286d0a3eaaafdb00431cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8d:ce:e2:7b:50:ff:25:2d:3a:8d:81:03:c0:
64:56:39:50:9b:d8:d7:6b:24:ae:29:22:c0:82:8b:
1b:5f:f5:82:5b:a0:f1:d1:77:b6:a1:6b:c2:40:0e:
8b:87:13:5d:a4:a4:3f:87:26:f2:76:ec:f8:93:f8:
45:6e:ea:dd:ad:3d:76:c6:ca:73:66:32:36:14:d0:
26:db:83:71:a2:e5:0d:36:bd:9d:7c:86:27:f0:d1:
ab:06:04:e4:41:4e:37:02:58:28:97:e3:51:b7:98:
d4:93:aa:2d:0e:ee:e2:b0:a6:c0:d2:de:5b:74:ca:
90:46:6c:d4:34:8a:bf:c1:02:dd:ce:76:23:51:ca:
af:3e:97:54:02:45:cd:e2:73:b3:c7:e8:56:44:d4:
b9:b1:bf:b2:29:d0:38:d0:24:ec:ca:88:77:29:96:
a4:2a:a5:10:58:17:49:67:0e:4a:d1:ae:20:57:7d:
7a:2f:0c:ac:e3:08:19:83:bf:4d:19:99:b2:d3:56:
3e:5f:e0:44:9d:14:8d:01:6f:67:6c:46:38:63:50:
41:d9:c3:b0:db:48:7b:cf:e5:16:78:a0:e1:44:1c:
e2:e1:6b:7c:69:02:5c:ef:e3:1a:83:9b:ce:dd:9c:
98:05:e5:80:85:61:51:5f:dc:21:09:0c:7a:9e:2b:
18:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:1A:B5:F6:F6:4B:12:27:1C:C2:86:D0:A3:EA:AA:FD:B0:04:31:CB
X509v3 Authority Key Identifier:
keyid:70:7F:3D:AB:AE:E2:4F:C4:3B:86:5A:AF:A3:F3:C9:C2:F3:64:BF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH89q67iT8Q7hlqvo_PJwvNkv8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/pxq19vZLEiccwobQo-qq_bAEMcs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/88cc50-2273-45ff-adb5-eccd665f1f03/1/cH89q67iT8Q7hlqvo_PJwvNkv8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.168.0/22
Signature Algorithm: sha256WithRSAEncryption
59:18:01:2c:c8:5e:cb:13:36:d9:6e:47:0c:80:c6:71:1c:e5:
c1:ea:7c:76:64:e6:62:e4:83:09:62:f6:52:0c:9f:f3:50:d0:
85:e5:20:c3:f1:8f:c3:6e:ca:8d:33:c8:d9:1c:4d:7c:63:a7:
3b:23:f8:9b:df:cc:2e:9d:15:15:3b:97:c2:b0:4e:0f:33:2f:
cc:2b:3d:a2:81:54:79:29:a7:5b:63:30:f3:ad:f5:e4:a8:36:
4c:37:be:fc:6f:4e:3b:fe:37:bb:20:97:92:00:cb:4c:db:fa:
af:41:6a:f2:e9:0b:4b:dc:45:e0:0d:07:c9:55:cb:52:39:2e:
fc:b8:e8:4a:07:20:7a:29:06:6a:9f:90:5f:c7:bc:fd:16:06:
1f:d7:1b:9a:27:49:87:85:31:5b:10:97:34:74:52:07:69:b6:
06:17:a3:da:3b:5b:7e:b0:c8:75:1a:94:d9:48:08:88:5a:01:
99:60:e0:78:20:d7:b6:4b:f1:b6:f1:da:12:ef:f1:d7:51:60:
b0:b6:96:d8:87:2f:dc:e7:0e:95:22:40:1c:02:01:12:49:a1:
76:fa:d5:0d:c1:42:07:53:92:6e:e6:49:55:9d:91:4e:37:b4:
d7:3c:40:dc:f2:a9:59:fa:94:35:d3:d9:a8:3d:4c:d7:cb:17:
71:b6:49:c6
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVvXanNDmLBBqUf5VX/IU5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2YzZGFiYWVlMjRmYzQzYjg2NWFhZmEzZjNjOWMyZjM2
NGJmYzkwHhcNMjMwMTAxMjIwNDQ3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhNzFhYjVmNmY2NGIxMjI3MWNjMjg2ZDBhM2VhYWFmZGIwMDQzMWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsI3O4ntQ/yUtOo2BA8BkVjlQm9jX
aySuKSLAgosbX/WCW6Dx0Xe2oWvCQA6LhxNdpKQ/hybyduz4k/hFburdrT12xspz
ZjI2FNAm24NxouUNNr2dfIYn8NGrBgTkQU43Algol+NRt5jUk6otDu7isKbA0t5b
dMqQRmzUNIq/wQLdznYjUcqvPpdUAkXN4nOzx+hWRNS5sb+yKdA40CTsyoh3KZak
KqUQWBdJZw5K0a4gV316Lwys4wgZg79NGZmy01Y+X+BEnRSNAW9nbEY4Y1BB2cOw
20h7z+UWeKDhRBzi4Wt8aQJc7+Mag5vO3ZyYBeWAhWFRX9whCQx6nisYOQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKcatfb2SxInHMKG0KPqqv2wBDHLMB8GA1UdIwQY
MBaAFHB/Pauu4k/EO4Zar6PzycLzZL/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUt
ZWNjZDY2NWYxZjAzLzEvcHhxMTl2WkxFaWNjd29iUW8tcXFfYkFFTWNzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84OGNjNTAtMjI3My00NWZmLWFkYjUtZWNjZDY2NWYxZjAz
LzEvY0g4OXE2N2lUOFE3aGxxdm9fUEp3dk5rdjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwReoMA0G
CSqGSIb3DQEBCwUAA4IBAQBZGAEsyF7LEzbZbkcMgMZxHOXB6nx2ZOZi5IMJYvZS
DJ/zUNCF5SDD8Y/DbsqNM8jZHE18Y6c7I/ib38wunRUVO5fCsE4PMy/MKz2igVR5
KadbYzDzrfXkqDZMN778b047/je7IJeSAMtM2/qvQWry6QtL3EXgDQfJVctSOS78
uOhKByB6KQZqn5Bfx7z9FgYf1xuaJ0mHhTFbEJc0dFIHabYGF6PaO1t+sMh1GpTZ
SAiIWgGZYOB4INe2S/G28doS7/HXUWCwtpbYhy/c5w6VIkAcAgESSaF2+tUNwUIH
U5Ju5klVnZFON7TXPEDc8qlZ+pQ109moPUzXyxdxtknG
-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:26 2024 by rpki-client on console-ams.rpki-client.org