Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CmaF6TK9GbW4JyYjpbREPK492VI.roa
File: CmaF6TK9GbW4JyYjpbREPK492VI.roa (raw, json)
Hash identifier: WDP60RnbIE6sm7ngrWyFJeu2pk60J3x3YipSxNt6hIY=
Subject key identifier: 0A:66:85:E9:32:BD:19:B5:B8:27:26:23:A5:B4:44:3C:AE:3D:D9:52
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018C0C2E79A6BE65931A4A1622C94FE18383
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CmaF6TK9GbW4JyYjpbREPK492VI.roa
Signing time: Sun 26 Nov 2023 15:10:21 +0000
ROA not before: Sun 26 Nov 2023 15:10:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 193.233.234.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
193.233.197.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:0c:2e:79:a6:be:65:93:1a:4a:16:22:c9:4f:e1:83:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 26 15:10:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0a6685e932bd19b5b8272623a5b4443cae3dd952
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b8:c8:74:77:f4:90:ae:dc:4f:aa:87:90:ac:
16:44:df:b2:db:c5:c3:37:73:bc:55:fe:37:60:99:
50:dd:56:6a:9f:13:e8:c3:29:46:5d:5c:6a:f9:30:
f1:e0:5f:d8:7a:5b:10:14:0c:a9:c8:69:68:08:c6:
4b:76:f6:7d:ac:8a:dc:c2:d8:5e:17:03:2b:14:0c:
09:1b:f8:f3:30:3a:29:b2:08:18:2a:03:92:f1:94:
b4:99:a3:f2:d9:88:a3:28:29:80:27:8f:7c:2c:9b:
3a:9e:72:77:19:0c:9e:58:6b:49:0b:9a:92:a1:32:
da:3f:73:3c:26:f6:c1:a9:77:0c:32:b3:4a:67:6c:
6c:e9:0a:dd:a6:fe:0e:87:60:42:a0:5a:b9:7e:fc:
67:62:36:51:cd:8b:36:03:55:b9:a9:f8:73:ef:2d:
85:bf:e3:52:ca:d2:c4:4a:cc:3a:19:93:b3:87:77:
86:c0:c7:4e:64:90:fe:c3:b9:4c:2c:2d:f5:c6:86:
ef:ea:3b:12:f0:74:90:2a:67:59:40:dd:83:a6:04:
5d:85:14:dc:94:64:b8:81:29:97:e3:9f:4a:c9:81:
38:09:63:62:5e:62:09:ff:cd:57:93:80:2b:37:83:
aa:db:7d:14:6e:4c:29:91:47:c8:8c:8a:c5:a9:98:
91:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:66:85:E9:32:BD:19:B5:B8:27:26:23:A5:B4:44:3C:AE:3D:D9:52
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/CmaF6TK9GbW4JyYjpbREPK492VI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.61.0/24
193.233.197.0/24
193.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
84:9c:f5:62:b6:a8:07:46:6a:92:de:24:cd:ef:03:4e:22:06:
77:2b:41:5a:80:06:3e:f4:12:8f:1e:8b:37:7b:fd:93:4f:52:
27:01:c8:0b:2a:78:b6:96:63:91:b2:e3:0e:80:03:7a:24:d2:
84:5d:d9:df:7e:2b:7d:5a:31:21:a1:5e:f0:04:4e:c5:4d:de:
00:11:08:7c:72:e7:9f:0a:1b:44:43:92:ad:8b:2e:87:79:72:
22:71:0c:65:4b:a0:c8:af:02:d2:cd:a0:30:20:94:86:58:52:
e3:0e:5e:0c:e7:1e:3d:5c:c2:ce:78:7f:90:02:94:f5:75:6a:
05:ea:e4:26:b0:a4:88:3b:c1:f3:71:9e:d1:56:77:d8:1f:19:
bd:19:f3:0b:47:91:c6:fa:2f:d3:76:13:54:95:b5:7a:17:ab:
6a:27:b7:5b:0c:2b:53:5b:7d:4d:5d:e9:89:a1:45:30:34:b2:
fc:b6:aa:bd:b1:3b:08:10:a6:86:6f:a2:21:07:11:0d:e2:29:
62:a6:30:8a:15:4e:87:d8:3b:f6:ae:d5:6f:14:9d:79:8a:1c:
4e:de:eb:97:6f:63:cf:ca:69:e3:12:d0:96:6d:00:09:3c:0c:
ba:ec:f8:00:f8:62:e7:4e:b3:9a:ee:95:f3:dd:35:8f:7c:dd:
a4:c6:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org