Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-p7E_8EnT2UuzM1nDTDV0VFQ_IU.roa
File: 1-p7E_8EnT2UuzM1nDTDV0VFQ_IU.roa (raw, json)
Hash identifier: 0vHXtNhkxujvVk/VbV9oagZDXg9cbiKS8yr7PIa85V0=
Subject key identifier: FA:9E:C4:FF:C1:27:4F:65:2E:CC:CD:67:0D:30:D5:D1:51:50:FC:85
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26EE3DD14E05209B92EB3E5EFF103B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-p7E_8EnT2UuzM1nDTDV0VFQ_IU.roa
Signing time: Sun 01 Jan 2023 21:05:00 +0000
ROA not before: Sun 01 Jan 2023 21:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204833
IP address blocks: 193.233.6.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 03 Jul 2023 14:41:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ee:3d:d1:4e:05:20:9b:92:eb:3e:5e:ff:10:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa9ec4ffc1274f652ecccd670d30d5d15150fc85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:32:b0:3a:50:67:8f:4b:f6:35:9f:c5:b7:1c:
11:25:81:67:1f:e6:d0:f9:14:df:51:9c:76:07:b1:
4e:13:f5:e5:bd:8b:2b:35:e2:f7:2c:c4:67:ac:d1:
70:6a:5f:99:58:c9:8a:dc:14:e1:f1:d6:26:06:80:
68:1a:d9:2d:0c:5c:2c:02:07:94:3e:b8:76:ec:9a:
61:08:84:61:e0:bf:69:03:a5:c4:f3:d4:65:ef:4b:
f9:64:ac:94:b2:be:80:66:46:fd:f9:38:7e:94:c1:
6b:6f:16:b1:e9:a3:d1:72:7c:d3:9c:44:f2:79:7b:
75:f7:04:fe:46:d1:8c:55:1e:a8:a3:43:5a:d0:df:
81:f9:95:1f:42:1d:7d:c2:10:e2:96:aa:41:ce:eb:
8c:dc:f2:f4:e3:76:b6:73:4d:0c:a2:26:15:a7:76:
f9:d3:e0:24:30:20:37:87:27:30:85:5c:da:3f:74:
8f:92:50:1d:69:11:72:ed:16:67:5b:73:1f:69:eb:
5a:a4:94:29:98:be:5e:92:9d:de:18:af:e4:1e:1f:
c5:99:02:f0:c6:42:51:05:1a:03:8c:2c:6b:ff:23:
49:86:c4:a2:78:50:5d:ce:9c:f4:8b:8d:09:7e:f7:
d7:69:e9:39:e3:f8:c0:9e:65:38:95:97:57:34:8d:
88:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:9E:C4:FF:C1:27:4F:65:2E:CC:CD:67:0D:30:D5:D1:51:50:FC:85
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1-p7E_8EnT2UuzM1nDTDV0VFQ_IU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.6.0/24
Signature Algorithm: sha256WithRSAEncryption
21:a5:2d:15:b1:7f:3b:3b:fa:9a:ac:8a:4e:34:29:6c:80:86:
1f:93:61:e1:da:fa:86:d7:f9:6a:b5:95:5b:3d:54:7a:5b:96:
ed:1c:3c:ab:45:22:9c:46:b7:16:d2:d5:c7:93:7c:6c:07:1d:
1f:69:be:ac:fc:de:79:cf:50:88:9f:88:ab:f3:1d:24:ae:af:
ec:ab:5e:0f:49:cf:93:a0:72:b7:c3:db:55:a2:ee:b2:75:e6:
0e:aa:53:ba:18:c4:24:b5:7c:67:26:12:63:ca:3b:c2:c4:d5:
02:4b:11:17:e1:00:4b:59:7e:7b:6e:75:48:d6:8c:de:55:35:
e2:97:12:44:80:e1:e8:75:c7:a6:f5:98:b4:c5:a1:40:8c:03:
5d:fc:c5:b0:95:d0:b0:18:df:84:92:85:e7:2a:fd:58:e8:c6:
3d:61:3f:64:5e:46:10:fe:87:3c:bc:d6:01:36:ed:2b:b3:1b:
b2:67:ac:ed:62:b4:2b:b7:57:56:fe:c0:b1:15:bb:36:8a:8e:
a1:8e:68:c3:c2:50:4a:b6:61:6e:2d:37:65:ce:59:cb:20:58:
4a:88:45:86:e2:1c:e4:2f:67:09:cc:4a:d0:97:d6:d0:c0:be:
2d:06:74:db:e3:36:4a:59:60:c4:4f:a6:ab:80:5f:5c:ac:89:
8b:61:0d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org