Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/19t5YV0opsJ0yl4Kr3fxpQo7vhM.roa
File: 19t5YV0opsJ0yl4Kr3fxpQo7vhM.roa (raw, json)
Hash identifier: n3/jwlqbZj9IFX4OKsC+ZBqrUhqrSozh+qx2D7baFuU=
Subject key identifier: D7:DB:79:61:5D:28:A6:C2:74:CA:5E:0A:AF:77:F1:A5:0A:3B:BE:13
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018926A0F961C26E025DAB5C2BF1D308126C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/19t5YV0opsJ0yl4Kr3fxpQo7vhM.roa
Signing time: Wed 05 Jul 2023 15:17:11 +0000
ROA not before: Wed 05 Jul 2023 15:17:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210281
IP address blocks: 193.233.134.0/24 maxlen: 24
193.233.254.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:a0:f9:61:c2:6e:02:5d:ab:5c:2b:f1:d3:08:12:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jul 5 15:17:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d7db79615d28a6c274ca5e0aaf77f1a50a3bbe13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a7:1f:25:e0:7f:fa:c8:79:97:ac:92:4d:dc:
2d:e2:a2:5a:29:ce:e3:29:50:c1:3e:51:1f:2d:82:
74:87:01:73:f3:1a:f7:35:43:b9:86:ed:83:ee:ae:
9a:bf:dd:e3:7c:1d:55:d5:77:8e:6e:cd:59:82:bb:
80:c9:bd:07:41:54:3b:cc:b7:f0:ed:28:77:62:2e:
32:2b:44:9c:ac:44:5a:6b:57:1f:77:54:44:5b:59:
6d:8d:9c:0f:ae:8f:7a:57:4d:41:60:ec:79:a0:87:
27:33:01:08:cb:6c:85:76:71:ad:f2:1d:60:a2:48:
9f:ee:bb:d2:1a:d6:fc:24:a9:63:db:8b:d4:2c:bb:
46:f3:ff:b3:77:4b:fb:f3:90:33:8d:ee:ed:ca:21:
b7:80:9d:4d:69:d4:33:3a:a7:a6:2f:a4:2f:84:87:
b6:ed:7c:6d:88:1f:0f:9e:85:a8:1d:54:63:1d:45:
70:fe:99:23:90:e3:d9:1c:db:e5:0d:6c:4f:5a:36:
a1:d7:5a:5a:3a:96:cb:6f:aa:93:57:82:fa:36:47:
a3:a7:e3:d0:e3:bd:2f:06:ed:f5:35:95:a9:1c:6d:
36:3f:0b:17:11:da:98:5b:68:b4:a1:b0:6c:6a:59:
4f:2d:5f:b7:49:3e:b3:93:09:74:0f:b3:54:a3:2f:
70:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DB:79:61:5D:28:A6:C2:74:CA:5E:0A:AF:77:F1:A5:0A:3B:BE:13
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/19t5YV0opsJ0yl4Kr3fxpQo7vhM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
193.233.254.0/24
Signature Algorithm: sha256WithRSAEncryption
62:71:da:43:19:ed:db:ee:58:45:2f:76:47:20:7d:80:e0:9e:
f7:3b:bc:26:d7:b1:98:92:72:1f:b1:8e:01:83:ae:2f:6b:97:
cf:ba:f5:0d:8a:2c:dd:8a:6b:6c:5a:fb:34:b0:f7:f7:4c:d8:
a1:48:e6:ff:7c:1d:c5:47:90:89:25:29:a4:a1:30:6e:25:35:
b4:bd:58:db:62:54:16:c8:76:6d:c3:23:74:b3:ce:ef:1f:d5:
c2:13:4a:26:1e:5a:69:6f:d0:16:78:55:82:cf:99:55:b2:66:
99:32:0f:d4:c0:f6:6c:1e:25:38:f2:89:9f:01:09:bf:61:d4:
08:73:bd:34:e7:1f:43:7a:f7:2a:31:e0:b8:d9:f8:49:35:96:
11:41:82:7f:ec:86:0b:f8:69:e0:4e:49:64:eb:05:d0:17:e5:
55:a3:6e:10:3b:e7:15:13:16:35:89:fe:32:75:45:2e:e5:72:
e0:72:6c:7f:03:dc:42:ad:ce:d4:90:e4:db:b4:47:f2:89:a7:
c2:79:7f:d5:03:00:72:45:3f:80:91:67:f0:2c:85:65:1f:ba:
c5:8f:ef:f1:80:9a:09:69:b8:1b:fd:9c:72:cc:53:62:16:ea:
45:b7:08:b8:a3:b3:22:49:2d:35:13:52:b3:80:13:12:15:50:
41:b3:39:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org