Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ir-idVXamKQz-DQUmsikOcjh-So.roa
File: Ir-idVXamKQz-DQUmsikOcjh-So.roa (raw, json)
Hash identifier: UaTsR3lZJLFCzIKssXvFfBiZUfskCHgtvZ9eT7eh41I=
Subject key identifier: 22:BF:A2:75:55:DA:98:A4:33:F8:34:14:9A:C8:A4:39:C8:E1:F9:2A
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F1FF262BAE6ABDBF6F2C50EA630C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ir-idVXamKQz-DQUmsikOcjh-So.roa
Signing time: Sun 01 Jan 2023 21:05:01 +0000
ROA not before: Sun 01 Jan 2023 21:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 193.233.49.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f1:ff:26:2b:ae:6a:bd:bf:6f:2c:50:ea:63:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22bfa27555da98a433f834149ac8a439c8e1f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:a6:89:5e:db:fc:fb:0e:24:29:ec:9f:65:7e:
1f:ea:91:df:47:31:42:e6:73:45:e5:07:5a:7e:ac:
8f:ab:4f:bd:79:ea:07:87:02:8f:35:d6:ac:21:85:
77:ad:e7:d8:9d:3d:08:78:f9:e1:09:4e:1f:81:0f:
c1:b1:c5:1f:a0:5b:5a:b4:54:8a:65:c2:41:af:49:
ca:a6:e1:ff:a3:ea:b2:e5:61:56:56:74:e4:6b:fe:
dc:5c:c8:12:b5:db:28:c1:b6:bc:71:79:a9:a3:59:
32:19:d2:04:96:5e:f0:b8:87:2b:dc:7b:fb:de:31:
f6:e2:7f:bb:7d:d4:8e:38:d7:17:ae:91:4f:aa:cf:
7e:68:c5:7b:3e:2c:8f:11:e7:55:4b:2e:3a:c2:cf:
d9:d4:2e:42:7b:8b:36:eb:42:5f:c8:50:88:45:37:
b7:a1:4c:3f:d7:12:d3:dc:bd:99:69:f3:bf:65:7b:
58:e3:2b:56:85:9a:b2:23:94:16:bb:dd:93:b9:39:
e0:a0:07:83:2b:18:6b:7f:b1:de:dd:bb:4a:0f:7c:
70:f2:d0:1a:a4:09:98:9a:1a:5c:00:d6:d0:d5:fc:
e5:b8:33:85:63:35:43:58:f0:89:c3:31:98:88:17:
c0:63:00:9a:63:7d:23:14:07:ec:4e:02:b0:c5:9b:
19:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:BF:A2:75:55:DA:98:A4:33:F8:34:14:9A:C8:A4:39:C8:E1:F9:2A
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Ir-idVXamKQz-DQUmsikOcjh-So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.49.0/24
Signature Algorithm: sha256WithRSAEncryption
15:c4:a1:f0:f7:b4:d8:cf:a3:fc:f9:f4:85:a6:6b:48:04:2c:
36:20:a6:a6:7c:bf:26:1c:b2:70:80:95:ed:c1:d1:39:59:cd:
f1:df:41:36:be:e1:ec:3e:b0:21:26:2c:05:dd:f2:ff:e9:48:
61:c7:e8:ee:46:79:6a:29:3e:04:1a:f4:de:aa:3c:a3:27:f2:
3f:79:32:62:9f:58:f6:06:61:64:2b:0f:50:52:6e:54:34:93:
1a:54:a2:90:ac:57:fe:71:59:04:1a:71:f9:1f:46:b7:38:d7:
4a:6a:45:81:ad:c3:61:bf:48:75:32:d2:16:f8:25:68:fb:38:
ca:26:66:8b:2c:d6:bc:a0:da:b0:02:cc:b2:de:36:b0:e9:0e:
cb:c4:34:51:22:a9:39:c5:93:30:55:d9:18:f4:55:f0:ca:f8:
b4:46:de:bc:cf:61:cd:58:81:16:74:bd:f9:f4:94:f6:37:b0:
43:1c:9a:d0:42:ce:85:1b:c5:e5:60:2b:3e:06:1a:a3:4f:bb:
01:17:3d:63:bb:0e:b4:f1:33:e5:8e:c4:80:aa:0d:1b:3d:be:
6f:98:1b:09:f0:92:05:6a:a0:20:ed:75:f4:d1:12:3d:38:e5:
8a:26:78:76:49:ac:ed:31:d3:09:44:bf:21:c8:ef:c9:5d:32:
fc:e4:28:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org