Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5WmRDGCg4MCZcM5CMh4yef0tqFA.roa
File: 5WmRDGCg4MCZcM5CMh4yef0tqFA.roa (raw, json)
Hash identifier: iwlnR+ckDZ+HZZDWcNktw1h+T2NrymvIC1DNtcDw1yk=
Subject key identifier: E5:69:91:0C:60:A0:E0:C0:99:70:CE:42:32:1E:32:79:FD:2D:A8:50
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952323D0CAF22373255A785E5AEA61
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5WmRDGCg4MCZcM5CMh4yef0tqFA.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 26548
IP address blocks: 193.233.208.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 Apr 2024 18:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:23:23:d0:ca:f2:23:73:25:5a:78:5e:5a:ea:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e569910c60a0e0c09970ce42321e3279fd2da850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:b9:70:2a:b9:6f:c4:cf:61:87:8c:9a:25:
2c:ec:ca:12:59:fb:48:c4:48:23:59:a1:f8:d8:f7:
89:f9:74:b8:33:f7:1b:88:31:76:55:0d:03:55:db:
83:82:cb:61:54:9c:ae:f7:45:6f:30:bc:d0:6a:c6:
d3:d1:63:fd:db:4c:6b:f8:f2:d5:d5:5d:8e:86:46:
eb:c5:c6:22:2a:b6:57:bc:1c:08:ac:6c:3f:11:79:
d8:58:70:b2:f5:d0:0c:70:bd:8e:e9:ba:db:87:80:
a8:93:80:79:49:f1:10:f6:49:5d:0c:16:e8:51:b9:
85:b6:3c:6b:e2:78:e4:2f:ec:d3:10:82:7d:1b:9a:
b3:fd:fc:67:0f:04:eb:ee:b5:bf:90:6e:a2:9c:50:
09:64:ed:52:04:3e:fb:4c:ae:a9:ec:ef:7b:50:99:
c0:fb:0d:c3:4d:fc:43:1d:5c:70:a4:bc:ef:f6:1c:
c2:7d:b3:1e:4b:2c:11:8b:f2:03:8a:fd:20:31:23:
fc:06:bb:46:43:b7:62:01:5a:49:a0:fe:6f:d3:c8:
14:3a:42:ab:7a:66:3f:c2:d6:76:5d:f2:94:21:3e:
71:7e:d5:e1:84:38:d6:53:18:69:59:cc:94:3b:b4:
32:40:68:3b:69:a1:00:0f:5b:4b:ce:3f:bb:27:d1:
6f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:69:91:0C:60:A0:E0:C0:99:70:CE:42:32:1E:32:79:FD:2D:A8:50
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5WmRDGCg4MCZcM5CMh4yef0tqFA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.208.0/23
Signature Algorithm: sha256WithRSAEncryption
04:87:46:fd:78:56:c6:f5:ee:2d:12:06:17:3d:a4:55:07:68:
a3:ee:8d:4a:c9:50:76:aa:60:98:2e:c0:dc:49:1d:50:0c:bd:
53:c1:58:8c:4d:29:e7:b2:82:4c:70:0a:27:64:58:d3:52:5b:
80:eb:30:68:7a:79:5b:2a:40:64:90:70:8c:3c:0c:08:f8:a0:
78:4c:f1:5b:d8:af:6c:fd:58:7a:0c:a9:a5:98:ff:81:4a:e7:
20:a7:4f:eb:5c:e7:9a:82:58:90:42:07:f3:8c:0b:6d:60:df:
b3:1c:2a:66:e6:4c:49:fc:51:85:17:43:bf:94:5e:00:c3:96:
6f:c4:74:d9:dc:69:86:72:7a:53:22:b5:9c:b4:5f:9d:87:95:
5c:eb:f6:a0:c4:57:4a:e5:e5:14:0c:1d:47:8a:39:08:0e:04:
4c:77:d6:6b:92:3e:53:37:7e:9c:bc:20:e1:73:f3:43:23:a1:
6e:f7:a6:42:8e:fa:6c:f4:32:fe:24:50:f3:45:93:a1:b3:d7:
c2:ac:cb:3d:5b:cf:15:bd:8e:99:b6:0c:90:4e:0b:c5:9c:d2:
40:33:82:58:c3:12:ab:0d:b6:f4:b9:25:72:45:db:20:0d:50:
78:c7:11:c1:56:c2:79:60:b5:15:6e:e1:52:11:be:f0:2e:4f:
96:4c:93:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 22:46:51 2024 by rpki-client on console-ams.rpki-client.org