Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HGO3TgSwwZets98ovFBKabO3WFs.roa
File: HGO3TgSwwZets98ovFBKabO3WFs.roa (raw, json)
Hash identifier: SHgcKTDvF6EJ4hWCXyoftX73lfd7HEpnr7UjmYGQ/R0=
Subject key identifier: 1C:63:B7:4E:04:B0:C1:97:AD:B3:DF:28:BC:50:4A:69:B3:B7:58:5B
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F3F89D3BF40DEB798751F948A090
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HGO3TgSwwZets98ovFBKabO3WFs.roa
Signing time: Sun 01 Jan 2023 21:05:01 +0000
ROA not before: Sun 01 Jan 2023 21:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209759
IP address blocks: 193.233.244.0/22 maxlen: 22
193.233.198.0/23 maxlen: 23
193.233.201.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f3:f8:9d:3b:f4:0d:eb:79:87:51:f9:48:a0:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1c63b74e04b0c197adb3df28bc504a69b3b7585b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:2a:55:9b:81:95:2b:6c:f2:e3:99:96:47:33:
1c:f5:68:96:24:e5:84:0a:4c:fb:27:2d:fd:6f:40:
db:d9:99:28:23:87:f5:a2:75:58:fe:db:2d:30:82:
3e:b7:57:09:ab:96:4c:44:39:b7:8b:0a:f7:f2:6f:
5b:bf:8c:c1:f3:b7:52:a5:61:d7:72:95:6a:51:d7:
37:b2:7d:c7:64:60:24:48:5c:a4:bf:4f:59:97:f0:
63:df:81:27:b8:db:6e:c3:3c:04:c0:8e:f8:e9:f7:
4a:47:47:71:69:9c:10:9a:16:2a:ff:69:dd:dc:44:
a6:79:7a:1c:2e:a7:4e:1f:8c:c2:fc:c8:a4:1f:5e:
c7:ac:a8:73:36:e8:47:93:9d:ea:ce:e0:d4:18:70:
f6:e3:74:76:11:4a:8a:f2:a1:e9:5f:ba:fc:cd:2b:
48:ab:37:a0:39:b7:63:25:32:ae:b3:4f:a0:31:22:
d2:4f:83:f2:eb:76:f3:98:66:3b:5f:1e:b7:68:9c:
35:74:79:2e:4c:b2:e8:10:54:03:6a:73:9d:d8:73:
c6:2b:96:92:30:32:ed:1a:0f:32:c7:90:34:ad:e9:
e2:17:db:7c:1c:7a:f7:ff:bd:29:6d:45:2a:05:90:
50:83:e3:4c:69:c1:e1:ab:81:52:b3:06:b4:4f:cb:
35:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:63:B7:4E:04:B0:C1:97:AD:B3:DF:28:BC:50:4A:69:B3:B7:58:5B
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/HGO3TgSwwZets98ovFBKabO3WFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.198.0/23
193.233.201.0/24
193.233.244.0/22
Signature Algorithm: sha256WithRSAEncryption
19:5e:77:ab:65:3b:5f:0e:fe:71:84:b1:b3:96:9f:72:8f:55:
c8:b8:06:ef:31:ed:e1:4e:65:63:a2:15:ee:5a:81:e0:27:c0:
a9:25:cd:fb:26:ee:a5:7d:d7:f6:d0:ac:2c:22:06:cd:3f:09:
aa:9d:3a:ca:58:17:bf:b7:51:45:63:66:af:58:24:bf:d6:23:
50:53:e7:10:44:5c:6f:9f:76:b8:25:35:a0:07:8f:6e:6e:c4:
74:dd:99:a3:cf:4b:0e:5f:08:39:a6:e2:3b:2e:70:f8:14:d0:
e8:54:87:9c:73:73:34:74:92:58:c8:b3:77:11:d5:15:53:6a:
cc:c5:65:dd:ad:d9:7b:78:0d:01:95:94:2a:aa:50:25:58:d6:
38:a7:b7:9b:1d:37:c7:82:7d:9c:d3:38:3d:85:07:ea:87:26:
86:9f:dd:09:9b:ed:5a:78:69:d4:92:46:5a:91:43:aa:d6:f5:
8d:ab:d4:e9:59:c3:1b:9f:cc:34:52:66:80:a1:62:fe:57:09:
e5:19:bd:f9:ba:89:21:97:98:3d:39:9c:28:a6:93:4d:ef:35:
0f:73:e3:7b:a0:44:33:1b:e8:d9:83:64:5c:6b:74:48:1c:96:
70:76:c9:f8:d7:06:79:88:b7:96:dc:63:13:f8:a3:18:c0:49:
9b:6b:78:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org