Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/81UcuOnkVh8KrREAOEmjbzsHSjk.roa
File: 81UcuOnkVh8KrREAOEmjbzsHSjk.roa (raw, json)
Hash identifier: wJFlf+scIF6ESqrvjghXSb4X+QpNPBPik1pU8KwPVrY=
Subject key identifier: F3:55:1C:B8:E9:E4:56:1F:0A:AD:11:00:38:49:A3:6F:3B:07:4A:39
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0188308D1BD8B4AFEFEA11E1150DCEDEDE80
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/81UcuOnkVh8KrREAOEmjbzsHSjk.roa
Signing time: Thu 18 May 2023 20:28:54 +0000
ROA not before: Thu 18 May 2023 20:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212165
IP address blocks: 193.233.20.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:8d:1b:d8:b4:af:ef:ea:11:e1:15:0d:ce:de:de:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 18 20:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f3551cb8e9e4561f0aad11003849a36f3b074a39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:25:bf:91:d9:74:74:5e:46:81:e3:98:9d:f0:
6b:e4:2c:3d:bc:82:dd:4a:91:0a:1c:af:ad:68:aa:
a8:cc:b0:28:c5:54:fb:25:b6:cf:af:76:ca:75:49:
73:9a:3a:06:be:79:d4:56:66:a0:14:86:1e:48:75:
51:f1:37:f2:e2:24:cb:87:27:9d:9a:5d:a4:a8:18:
4a:5e:fc:52:03:fd:97:9f:0c:4c:16:f7:ce:2a:73:
0f:67:6a:41:ed:2a:92:f9:2e:71:15:0d:36:71:03:
2d:6f:70:2a:ad:3a:34:0c:89:74:6d:45:88:62:61:
b8:04:44:49:a2:59:91:55:55:4b:ca:a9:d4:2d:41:
67:61:3b:0b:71:1f:40:bc:94:de:9e:6b:73:3c:0d:
21:6f:17:fe:93:7d:39:10:93:a0:ff:d3:3c:14:b0:
06:e3:0c:ab:f2:67:41:4a:c6:09:f5:95:ef:a3:a6:
bc:29:b3:e2:16:25:db:22:5d:93:e5:2b:45:db:5e:
9f:55:87:62:45:b3:c0:fc:47:b0:c7:35:b1:d2:7e:
97:c9:3f:75:40:8a:79:b2:ec:96:f9:b8:72:e5:c4:
c9:2a:48:b5:8e:dc:29:2a:af:1a:00:b9:28:34:f6:
eb:f0:bc:7a:3d:61:eb:60:b5:5d:41:d7:35:19:7d:
1b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:55:1C:B8:E9:E4:56:1F:0A:AD:11:00:38:49:A3:6F:3B:07:4A:39
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/81UcuOnkVh8KrREAOEmjbzsHSjk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.20.0/24
Signature Algorithm: sha256WithRSAEncryption
49:99:8f:08:89:fd:43:92:02:08:0b:20:9a:db:ca:cc:6e:90:
f5:1c:4f:b9:08:aa:f9:11:25:14:26:2c:67:f4:d7:08:6e:7e:
7b:7c:52:af:17:eb:4e:0a:8d:1d:57:2d:5e:1a:ac:92:58:7c:
ca:ea:44:4f:9e:3e:c2:79:2b:e1:13:da:43:5d:b8:8e:26:92:
27:2f:08:95:b5:33:73:fd:1a:0d:c7:8a:83:82:a5:8b:d7:54:
f8:e5:41:ce:ff:68:64:e1:dd:dc:52:07:9e:72:2b:49:58:99:
3f:25:39:1c:ed:70:39:ba:7f:94:6d:2d:db:91:45:f5:05:eb:
4c:d9:06:37:4b:35:2b:4c:91:ce:23:11:93:e4:53:46:e4:2e:
83:ed:b9:7d:e5:8d:54:b9:d0:45:22:e5:17:79:43:1f:af:c3:
b0:6f:3b:ff:a4:52:dc:fd:7a:44:90:4b:f7:14:39:24:72:54:
00:e9:b4:3f:ae:a6:c1:9e:f9:ce:63:28:67:00:be:be:33:ac:
cb:79:88:16:fa:21:93:49:7e:5b:3f:16:a3:7f:b2:fb:ea:cc:
2c:e6:f1:5f:32:b9:81:2a:2d:c3:33:33:d7:e6:e7:51:2f:c6:
6b:0b:1f:aa:8b:25:9c:e0:00:e4:b7:cb:04:21:e6:81:2a:4c:
9e:cb:5c:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org