Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-Jx3RCrG0Ysh1PQ7CHSmGYLmzr8.roa
File: 1-Jx3RCrG0Ysh1PQ7CHSmGYLmzr8.roa (raw, json)
Hash identifier: p11wZbR2PPJrmFWXI1iKvvqH9cAm00Ey8hrHOUwWGes=
Subject key identifier: F8:9C:77:44:2A:C6:D1:8B:21:D4:F4:3B:08:74:A6:19:82:E6:CE:BF
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26D8ED78E9E5D44AAF0D7264C11C15
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-Jx3RCrG0Ysh1PQ7CHSmGYLmzr8.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2587
IP address blocks: 193.233.14.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d8:ed:78:e9:e5:d4:4a:af:0d:72:64:c1:1c:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f89c77442ac6d18b21d4f43b0874a61982e6cebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:4a:a6:10:02:44:09:21:b0:7a:94:66:e3:2d:
04:ae:df:c0:c8:f9:c7:75:77:9d:f7:97:ff:c8:e1:
df:6d:7a:27:b0:87:58:ca:89:8d:f8:13:8c:e6:b8:
07:d8:94:11:e6:2e:ae:4d:bb:25:a5:89:ed:b7:57:
16:2c:36:be:a8:53:f7:63:1e:e2:25:11:9f:ec:f9:
55:23:58:97:34:18:1f:82:d2:6c:0c:0b:16:fb:39:
88:7f:02:27:5f:34:7e:4e:e2:45:79:15:1a:60:15:
17:29:0b:c1:82:1b:68:cd:c6:eb:6e:25:15:a0:fb:
46:7b:11:80:c9:15:09:a6:b9:b4:87:c1:29:2a:3e:
ad:5c:f5:5f:ee:e8:3e:7d:86:b3:ae:a2:a0:bd:55:
ff:a3:30:a3:38:e6:27:b4:26:6e:29:cf:a9:0e:f6:
c3:17:00:e2:66:49:be:72:46:92:4c:f3:46:81:cf:
c8:7d:b8:c5:b2:4f:1b:5d:8e:03:a2:5f:a5:d8:f2:
18:d8:6b:d2:22:b7:b6:d8:91:9b:38:00:77:20:2d:
93:e0:67:ee:2a:58:08:a5:b4:f8:cc:b4:7b:64:bc:
9a:2d:d0:b8:33:45:8d:29:1d:92:27:bf:ac:ec:dc:
e2:91:02:c9:69:b7:d8:a8:48:6d:dd:b4:ec:04:96:
7e:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:9C:77:44:2A:C6:D1:8B:21:D4:F4:3B:08:74:A6:19:82:E6:CE:BF
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-Jx3RCrG0Ysh1PQ7CHSmGYLmzr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.14.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:6a:43:e4:a4:07:af:71:11:4a:c5:d5:5a:d1:d8:81:d0:f5:
1a:69:05:bb:d2:cb:65:9d:88:c7:ff:9e:bd:95:9f:6b:47:5d:
aa:8a:d1:76:3c:e6:b6:6a:e2:19:80:be:3d:89:9c:db:79:af:
f4:f4:25:5a:ca:52:6b:49:95:15:8e:2c:00:d2:d4:42:a0:97:
4f:f4:b6:f4:62:73:2f:a6:c5:79:91:2f:dd:d2:66:e9:b2:d6:
2f:2d:bb:78:3e:f6:ab:b9:45:5f:a8:8f:24:fc:7d:6a:4b:13:
8d:0c:6d:d9:32:dd:ce:7e:1d:05:c3:c6:97:19:f5:66:70:51:
e3:d7:39:fc:82:58:9e:e8:93:19:a6:7a:cc:f3:56:9c:c7:20:
e5:6b:ca:59:69:0e:91:08:79:1a:b1:3a:5e:20:9c:1d:d7:dd:
0c:89:6e:b5:38:43:25:72:0d:f4:32:10:63:33:60:ba:85:ea:
2f:8a:3e:66:15:df:6a:34:fe:f6:7c:c4:75:eb:18:e4:dc:b6:
8c:cf:4f:b9:f1:51:04:ac:01:8c:26:f1:c8:bb:c6:b3:bd:77:
4d:13:bf:65:26:6f:a0:38:b9:ad:67:8c:e1:9e:20:65:14:77:
20:c7:e8:b1:7c:fe:0f:ff:5e:01:a4:c4:ee:01:99:6e:71:1d:
90:4d:cb:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org