Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B-R1NeUfyUhnuIsI1VHBWcyxh5U.roa
File: B-R1NeUfyUhnuIsI1VHBWcyxh5U.roa (raw, json)
Hash identifier: kAVAq6Rilv2kwKtzzYQim+8ewXduMDcnWKh8mjWW43g=
Subject key identifier: 07:E4:75:35:E5:1F:C9:48:67:B8:8B:08:D5:51:C1:59:CC:B1:87:95
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D6B15F0696F8D333F096D4C0C6E6EBD01
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B-R1NeUfyUhnuIsI1VHBWcyxh5U.roa
Signing time: Fri 02 Feb 2024 18:30:16 +0000
ROA not before: Fri 02 Feb 2024 18:30:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 199868
IP address blocks: 193.233.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 17:58:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6b:15:f0:69:6f:8d:33:3f:09:6d:4c:0c:6e:6e:bd:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 2 18:30:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=07e47535e51fc94867b88b08d551c159ccb18795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8f:28:63:9d:55:d0:6d:b8:14:d1:03:bc:e3:
9b:be:c8:74:2a:96:ad:f8:fb:f8:8c:83:64:ae:78:
ee:21:9c:d0:fd:dd:92:55:fb:13:67:40:f1:d4:e0:
d6:a7:61:e5:bd:74:22:02:99:a4:a9:f0:20:87:07:
90:9c:f7:e8:45:86:5f:f0:4e:33:d8:44:11:5a:f3:
8c:92:25:a9:1d:ae:e3:81:ee:b0:19:74:0e:60:aa:
8d:fb:59:c0:6d:9b:90:11:78:54:fd:5c:d8:b5:c2:
f5:03:92:78:40:d9:3d:ec:38:79:9c:be:5b:61:7c:
23:d5:84:68:c2:3a:19:6a:fa:9e:5f:c5:90:e5:75:
b0:39:64:b7:f7:8f:6b:05:f2:24:40:86:95:56:f1:
ff:5a:fe:64:0b:a6:9b:82:81:cc:12:59:27:22:8e:
55:a4:28:3f:f2:ca:3c:5d:eb:0c:70:40:a8:1b:1b:
59:cd:96:08:f8:3f:25:5e:85:96:09:bb:ac:4d:65:
1a:4c:74:5b:7b:bd:5a:33:88:e7:ef:41:21:68:50:
6a:86:6a:82:05:4e:c7:73:00:89:df:12:76:20:b3:
14:0e:26:7f:7b:d7:97:82:34:bd:c3:8d:97:cf:f5:
d3:3f:b0:a1:60:41:92:a1:fc:49:16:18:ef:e9:e2:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:75:35:E5:1F:C9:48:67:B8:8B:08:D5:51:C1:59:CC:B1:87:95
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/B-R1NeUfyUhnuIsI1VHBWcyxh5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:3c:ca:43:78:ab:e8:01:82:56:52:f3:2e:c7:61:b9:30:57:
de:52:5d:80:09:de:ef:ea:5a:c2:ba:77:ec:ce:39:79:d1:b5:
ff:82:88:da:e4:78:73:87:3c:62:fc:9c:75:1d:01:39:84:8b:
3b:fd:a1:d2:3e:c5:2b:56:a3:19:43:45:24:0b:f1:7b:41:24:
27:08:39:2c:78:4f:d4:3a:cc:ed:41:85:fc:02:a0:38:ed:0c:
90:af:7d:9b:74:f3:85:ec:f5:e1:b9:0d:63:1d:7f:a9:99:8e:
c5:8b:94:91:39:b7:b8:68:4b:6f:60:f1:30:18:dc:37:6c:22:
27:88:5f:a8:a1:29:20:e3:ac:4f:82:cc:b1:d6:e7:06:4f:0b:
23:be:a1:32:b3:fd:ef:13:d0:2a:dc:32:85:d0:f9:51:68:5f:
c3:5d:b6:2f:18:59:c4:2c:3f:ae:a7:ae:dd:08:83:ff:9f:f7:
7c:f8:a2:ed:f4:f6:53:9d:e9:62:7c:ed:56:5d:3b:df:6d:73:
0f:a4:51:18:b5:b8:3d:d0:40:66:26:bc:81:75:cf:55:25:67:
74:c9:62:2d:43:7b:cd:3f:71:ef:ea:07:d9:55:65:4d:c0:d7:
bb:55:af:01:ae:f8:3b:e9:79:37:ed:ea:d6:5b:34:f2:ee:02:
68:dc:f7:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 21:01:49 2024 by rpki-client on console-fra.rpki-client.org