Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4UPaYLk1jF8e1E5tD5D2DgtzBWA.roa
File: 4UPaYLk1jF8e1E5tD5D2DgtzBWA.roa (raw, json)
Hash identifier: D/uCFzL98CLvJdvpPOn53QnK6K3qMtuDQsrGCcTbSL4=
Subject key identifier: E1:43:DA:60:B9:35:8C:5F:1E:D4:4E:6D:0F:90:F6:0E:0B:73:05:60
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F5CECDA952087172F6B94CD84672
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4UPaYLk1jF8e1E5tD5D2DgtzBWA.roa
Signing time: Sun 01 Jan 2023 21:05:02 +0000
ROA not before: Sun 01 Jan 2023 21:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212624
IP address blocks: 193.233.200.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f5:ce:cd:a9:52:08:71:72:f6:b9:4c:d8:46:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e143da60b9358c5f1ed44e6d0f90f60e0b730560
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1a:b6:0d:1d:62:ab:63:7f:ae:76:71:3d:b4:
0b:07:33:da:ac:5f:69:33:c9:f3:31:b0:aa:31:e4:
83:a1:7c:a5:6a:25:72:6b:82:00:a0:fd:74:9e:82:
4a:3c:68:ae:49:0d:fb:c6:b2:33:1c:0f:6f:02:82:
5d:ad:0a:26:e5:67:74:6b:d6:e4:1a:f4:94:19:36:
ab:0f:8e:da:e3:78:2c:88:fc:64:81:07:d7:08:3c:
af:c1:f2:2d:c8:ae:a8:aa:71:d8:86:00:ee:48:8d:
db:27:84:69:04:f9:54:4a:78:e5:16:0a:08:17:07:
9f:40:91:79:04:76:35:d1:11:fb:cb:ab:1c:f3:0d:
9f:22:1a:55:2c:61:6d:e4:b4:21:dc:42:66:36:cc:
86:d6:c3:97:43:6d:c0:d2:25:fa:56:8c:4f:64:4c:
3b:ec:d4:e7:c2:a5:0f:71:24:1e:63:0d:79:88:ed:
db:1c:4d:0a:9f:eb:48:31:b5:c0:00:0b:a1:ac:ee:
de:ff:4e:94:54:31:45:fd:f9:5c:53:a5:d4:2c:c7:
63:87:75:5f:0c:b9:23:bd:cc:a0:89:8e:6b:f4:d4:
0c:cc:d4:7e:7e:eb:77:e8:15:f1:f9:8b:cf:2c:2f:
52:2d:49:e8:5c:4f:68:fc:14:f3:01:d1:1c:7e:a9:
fb:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:43:DA:60:B9:35:8C:5F:1E:D4:4E:6D:0F:90:F6:0E:0B:73:05:60
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/4UPaYLk1jF8e1E5tD5D2DgtzBWA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.200.0/24
Signature Algorithm: sha256WithRSAEncryption
19:31:c2:c0:6e:af:aa:16:7b:cd:64:4c:00:db:99:35:ee:5b:
19:ad:cf:7a:24:73:9b:39:9f:32:f5:2a:a0:d6:60:0e:bf:80:
05:c6:c5:21:7c:8f:9a:94:9f:4c:1f:d2:b5:a0:e5:95:22:a7:
32:26:44:fd:c0:9f:a2:ad:3f:e7:18:2d:45:48:f8:97:10:29:
f9:79:5a:73:7e:87:b5:19:b3:d7:45:cc:21:12:e2:4a:70:3e:
fd:e6:28:f7:d7:18:9f:63:20:c3:df:50:3c:6e:5f:e8:72:af:
da:b9:1d:dd:33:80:7e:d2:2a:54:69:7d:8f:ba:57:44:01:a5:
83:67:ce:db:d9:82:dc:8a:88:33:31:81:61:8a:00:fd:0d:a0:
b9:9f:c1:04:6e:a7:ae:b8:f0:6c:d7:59:3e:aa:48:21:fd:dc:
b8:de:6a:63:f0:ef:47:94:ec:d4:83:54:bf:54:c6:6f:d5:8c:
ef:65:71:c1:fb:b8:70:61:97:74:01:07:46:a5:e2:38:ab:b6:
52:55:30:ef:66:c7:bf:d8:17:8b:b3:bd:15:19:73:ba:0c:9f:
5e:d7:e5:4e:b2:e2:eb:af:2c:e0:4f:3f:d4:28:b1:b6:e1:df:
21:93:03:44:bb:e6:ba:34:4a:9b:7e:bf:7a:ff:3b:de:61:81:
c9:87:a6:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org