Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5Y65OKGbHvTbio_8YPCkhU5uKQI.roa
File: 5Y65OKGbHvTbio_8YPCkhU5uKQI.roa (raw, json)
Hash identifier: Nttc3TGqeg86R/LYwKqrarJJDw+3sPiL+xM9mtidA9s=
Subject key identifier: E5:8E:B9:38:A1:9B:1E:F4:DB:8A:8F:FC:60:F0:A4:85:4E:6E:29:02
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01884E3D5EC71594B0FD97E004E0A6B8D48D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5Y65OKGbHvTbio_8YPCkhU5uKQI.roa
Signing time: Wed 24 May 2023 14:50:24 +0000
ROA not before: Wed 24 May 2023 14:50:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210281
IP address blocks: 193.233.134.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:4e:3d:5e:c7:15:94:b0:fd:97:e0:04:e0:a6:b8:d4:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 24 14:50:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e58eb938a19b1ef4db8a8ffc60f0a4854e6e2902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:31:c5:6f:a6:a0:0e:f6:e8:e4:5b:1e:b4:bb:
75:08:c5:03:92:f1:c6:ba:0e:e6:32:ff:82:2d:a0:
53:6c:13:dc:91:76:0e:15:d8:cf:24:01:db:a9:39:
a1:7c:56:9a:59:fd:4b:de:6b:4e:31:0d:f1:79:9d:
84:25:e7:b4:48:4c:cc:3b:b8:20:2a:2a:bf:df:4f:
ef:b9:f7:f3:c1:3e:16:16:cd:02:46:10:ce:3a:95:
14:21:44:69:65:9e:6c:72:5d:bf:9a:0c:5f:b6:5c:
c5:01:fe:d1:ab:75:ec:a3:02:cd:76:77:84:5d:14:
d7:b3:c1:e1:82:b7:9b:c7:04:11:61:b6:21:90:d1:
bf:28:b7:d0:9e:ac:f1:99:4d:e0:55:5f:04:2b:75:
e9:b5:96:e6:51:46:56:e3:a8:36:27:3e:2a:33:78:
e2:86:c2:95:7a:79:9e:53:7f:c5:8a:b1:1c:c6:cc:
6d:52:fc:f6:c5:e0:55:27:0a:81:42:ee:91:c4:48:
05:69:61:38:89:3c:6c:c2:d1:d6:92:98:b9:24:84:
eb:36:23:6c:fe:04:06:02:b3:33:c0:59:a9:0a:1b:
40:b1:b1:ab:af:74:42:66:a7:db:35:30:65:0f:67:
92:0e:24:be:1c:0f:e6:cd:aa:88:8b:eb:f5:06:0a:
a7:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8E:B9:38:A1:9B:1E:F4:DB:8A:8F:FC:60:F0:A4:85:4E:6E:29:02
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/5Y65OKGbHvTbio_8YPCkhU5uKQI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.134.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:b7:2f:84:d5:59:25:a9:14:5b:fc:47:59:06:19:2e:8c:ea:
83:c6:29:15:49:61:a4:41:85:73:1b:0d:58:88:50:21:bc:02:
23:b4:95:a2:24:28:7f:3c:21:63:95:43:c0:6c:b9:b4:aa:81:
b2:53:d4:23:29:98:72:28:65:13:58:dd:b1:b3:b7:bf:97:61:
7c:88:61:dc:67:c5:12:c3:55:ac:f7:16:22:82:69:0f:05:bb:
d8:b3:62:15:a8:25:e1:9a:1b:df:9b:0c:34:f1:6d:05:12:24:
36:76:12:97:32:56:00:aa:b2:42:43:53:1f:3b:11:06:06:f8:
3f:76:2c:a0:7b:9a:b0:de:27:ea:90:84:b6:db:19:65:88:c8:
4a:a2:b6:8c:d6:f3:2d:82:a4:cf:52:9a:e2:52:17:5b:a7:5b:
11:af:be:d2:cc:bf:39:cc:36:f7:97:45:21:09:62:ac:e4:d4:
56:85:38:df:12:65:3a:90:4c:17:c3:a2:80:3c:3b:74:44:89:
9a:85:9f:05:ca:d8:ab:ba:11:9d:18:82:d9:a0:df:a5:3b:77:
d7:74:ee:38:89:4c:e4:41:e9:88:67:ef:fe:a2:3b:4d:07:d7:
c1:d4:c9:7f:1f:ff:35:9f:5a:87:cb:35:94:ba:9a:e6:61:89:
e7:9a:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:37 2023 by rpki-client on console-fra.rpki-client.org