Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/90y6IKQzfkP0e5S4-VGsmNY7eYE.roa
File: 90y6IKQzfkP0e5S4-VGsmNY7eYE.roa (raw, json)
Hash identifier: nagHy2iB89QpZs6ffQWKoseW1QUafSNnsBUDGcgUkDs=
Subject key identifier: F7:4C:BA:20:A4:33:7E:43:F4:7B:94:B8:F9:51:AC:98:D6:3B:79:81
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018618FBA2268844C8440AA9CF0F71A4D98E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/90y6IKQzfkP0e5S4-VGsmNY7eYE.roa
Signing time: Fri 03 Feb 2023 20:33:09 +0000
ROA not before: Fri 03 Feb 2023 20:33:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51765
IP address blocks: 193.233.23.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:fb:a2:26:88:44:c8:44:0a:a9:cf:0f:71:a4:d9:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 3 20:33:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f74cba20a4337e43f47b94b8f951ac98d63b7981
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:11:c5:9c:6b:90:f6:ae:31:57:90:74:39:d8:
2e:da:c0:ae:1f:3d:cd:0c:62:13:ea:e8:e4:6d:29:
d2:39:9f:2c:ea:fc:7d:79:46:fa:26:06:06:bd:1a:
ed:69:9d:1c:91:78:a9:e6:d3:fd:3c:1c:50:33:81:
cd:c4:29:21:ba:30:b9:c2:77:70:56:ec:64:5d:f6:
a4:c6:1a:cf:9f:bd:5c:70:fa:b0:aa:b3:19:6c:e9:
0a:03:1f:c6:44:a7:e0:37:04:3f:36:bd:4d:c6:ba:
5c:94:b5:5a:48:1f:04:1e:b1:4c:b9:6a:cc:01:91:
9d:0f:c0:11:ef:e6:aa:9b:94:49:c6:e5:60:50:09:
c6:c7:22:bc:23:3d:b7:b7:03:2c:68:77:29:8f:d7:
bb:70:9c:0f:b7:e3:77:43:58:03:ce:6e:14:59:30:
8f:02:71:04:11:d2:78:5d:a6:dd:9b:d3:f3:49:ef:
68:e9:ca:5a:76:30:db:e5:57:94:b1:51:69:7d:38:
04:dc:17:49:e4:a7:c9:b8:95:6b:ca:c7:08:d0:39:
59:4e:15:a3:d0:00:d5:67:26:2d:f0:0f:dc:7b:64:
af:67:9c:7b:9a:c3:f8:25:8a:9d:bc:fc:4c:fc:5f:
da:d4:6b:c9:25:eb:ec:e0:fa:87:52:a3:1e:22:82:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:4C:BA:20:A4:33:7E:43:F4:7B:94:B8:F9:51:AC:98:D6:3B:79:81
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/90y6IKQzfkP0e5S4-VGsmNY7eYE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.23.0/24
Signature Algorithm: sha256WithRSAEncryption
14:d8:8b:d1:89:2b:8e:17:be:27:8a:d0:25:a5:9b:65:e7:1a:
4d:f8:00:b3:15:2a:6a:fe:82:29:18:9d:f0:51:57:38:91:65:
f4:f9:8b:b8:17:c7:c3:2f:ba:7a:8c:b9:55:c5:0d:2c:66:a8:
78:0e:23:03:e4:8f:d0:56:b4:2f:bf:12:56:05:ad:de:37:29:
b3:9b:58:4a:90:19:37:93:1a:cc:3c:da:04:37:7e:4d:84:c5:
1f:a7:87:85:ba:c4:e2:16:6a:61:8c:84:b0:3a:9d:0d:41:a3:
aa:27:c2:d3:6a:67:df:3c:cb:b0:96:d5:da:53:a6:da:8f:45:
db:f5:b6:06:61:b8:4f:ab:09:8a:7b:ab:26:cd:ac:9d:55:03:
62:01:2b:50:7e:77:3e:5a:02:dd:df:6e:5e:76:ac:c7:40:e0:
73:8d:68:01:12:12:a9:af:ee:73:25:9c:b7:1a:f4:20:75:ae:
cc:dc:96:fb:ec:a8:c3:98:06:f8:e2:76:92:be:db:b0:db:46:
5e:91:3a:07:27:fd:44:d0:65:62:79:4d:b6:4c:72:39:ba:2b:
02:2a:7c:2d:1e:89:d2:3b:a4:5c:c3:f5:84:1e:23:c2:16:5f:
b0:c6:ec:f9:bb:9f:d6:6b:c1:c8:12:fa:ad:44:e2:3c:6b:35:
75:b2:40:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org