Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1IXhus9UDwc_PWuQFfBjF22yMcI.roa
File: 1IXhus9UDwc_PWuQFfBjF22yMcI.roa (raw, json)
Hash identifier: lQQzmOAVtdHSKxexDXR96eyb0hKhXhkVD0HSjzyr7Tc=
Subject key identifier: D4:85:E1:BA:CF:54:0F:07:3F:3D:6B:90:15:F0:63:17:6D:B2:31:C2
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26EA64C965F44B7F5CFE33A873A11C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1IXhus9UDwc_PWuQFfBjF22yMcI.roa
Signing time: Sun 01 Jan 2023 21:04:59 +0000
ROA not before: Sun 01 Jan 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 193.233.161.0/24 maxlen: 24
193.233.202.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 03 Feb 2023 20:38:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ea:64:c9:65:f4:4b:7f:5c:fe:33:a8:73:a1:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d485e1bacf540f073f3d6b9015f063176db231c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b0:04:83:e3:ce:a6:82:23:dd:c4:9a:1c:6b:
b3:ed:07:61:22:9e:73:1c:f2:76:fa:c3:5d:22:4e:
8c:55:51:d9:1f:6a:09:c7:3c:8a:38:d7:22:bd:65:
b7:7a:37:20:eb:84:ad:c4:af:84:65:df:4b:8a:f6:
83:4f:b2:96:c8:8a:f4:09:08:88:0b:b0:4a:32:57:
5b:f9:f2:2c:30:7e:db:7e:a6:63:46:1e:cb:51:b9:
e3:2e:c0:42:6b:bd:2e:e0:af:fd:68:2d:61:49:82:
99:f1:97:6a:55:92:56:df:46:e5:73:6e:e9:20:f9:
18:9c:5a:40:12:9f:a7:2c:af:6c:15:42:a7:c4:f0:
e7:da:b2:83:39:88:af:08:f3:29:92:e5:3b:b8:53:
fc:49:e1:95:68:5a:11:6c:7c:22:1f:13:75:cd:c7:
d7:b4:23:e8:1a:cb:4d:7c:5a:4f:48:ae:4e:6e:c3:
4e:7c:51:21:57:a8:8c:83:37:55:cb:03:68:00:a5:
9f:ef:be:76:6d:8b:61:81:de:06:72:a7:e9:b4:90:
3e:fe:64:5b:e0:35:40:26:11:42:33:71:24:75:46:
58:96:ea:56:f9:f2:33:96:63:c0:71:b5:22:97:ed:
ee:7f:a2:8e:1f:1a:da:26:f4:90:01:e9:44:18:71:
ab:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:E1:BA:CF:54:0F:07:3F:3D:6B:90:15:F0:63:17:6D:B2:31:C2
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/1IXhus9UDwc_PWuQFfBjF22yMcI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.161.0/24
193.233.202.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:4f:04:0c:51:b1:e2:75:27:da:37:69:62:f0:3a:54:5a:41:
2a:34:e0:fb:43:90:9c:f1:45:43:32:7d:71:70:5c:69:33:72:
87:cd:cb:fc:74:c5:1a:74:32:0b:1b:21:57:8b:92:a1:42:7f:
e2:85:cd:cc:67:4a:70:62:67:8a:d9:1a:a2:33:95:84:a3:49:
e5:3c:38:0f:21:ca:80:ff:a0:1c:99:a7:71:59:3d:2e:fc:46:
67:e4:e8:72:36:61:68:cb:6f:8d:96:30:14:50:e4:ed:81:6d:
25:1d:74:76:7d:63:2f:5e:a1:45:65:ac:ec:4e:07:76:9b:b8:
c3:f1:cc:86:ad:a0:58:77:ad:48:bc:00:f4:0c:be:80:8d:b6:
4e:35:54:58:9a:84:b7:cf:52:68:e0:27:f6:3b:bb:97:f9:d0:
eb:77:95:20:20:d8:89:fa:77:bb:dc:bc:d8:ae:75:19:8f:bd:
8b:4d:10:4b:cd:50:c8:e8:06:d8:47:c5:4f:68:f5:97:8d:ff:
75:5e:a0:fa:8b:33:4b:9c:b4:5a:e7:0a:9e:38:c9:5f:0e:87:
77:ad:b8:27:b8:f4:f6:77:af:19:37:5e:ea:ba:6b:ca:f7:0b:
11:9e:0d:99:26:c2:d0:9f:e8:6a:d3:67:30:40:49:8a:62:1b:
51:1e:57:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org