Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JFToe4oy8SQmlewqzNSSWaydYg4.roa
File: JFToe4oy8SQmlewqzNSSWaydYg4.roa (raw, json)
Hash identifier: Q+eTPz6PKXLlGf44hW5yqzlwOK/uNQrQtD3hjI0G870=
Subject key identifier: 24:54:E8:7B:8A:32:F1:24:26:95:EC:2A:CC:D4:92:59:AC:9D:62:0E
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DD9055645BD3BCC556C72BAC092B
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JFToe4oy8SQmlewqzNSSWaydYg4.roa
Signing time: Sun 01 Jan 2023 21:04:56 +0000
ROA not before: Sun 01 Jan 2023 21:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20549
IP address blocks: 193.233.64.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:dd:90:55:64:5b:d3:bc:c5:56:c7:2b:ac:09:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2454e87b8a32f1242695ec2accd49259ac9d620e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:05:97:4c:f4:78:b1:58:10:30:ae:98:ae:f1:
21:5b:67:5d:de:84:20:78:4f:fc:83:56:ba:1a:b7:
bc:43:58:b4:c6:ef:10:93:90:30:58:63:34:02:48:
38:e2:4b:68:fe:5c:60:08:4a:f1:6a:05:2a:99:d3:
98:62:c7:eb:8e:38:93:5f:31:4f:56:75:a4:87:0a:
9f:14:2a:bf:66:69:0e:21:15:39:35:6d:3d:67:36:
b6:0d:b4:f7:1c:81:a3:2a:d7:27:62:2f:ec:8a:2f:
bb:64:e2:5e:16:3e:e9:08:60:c9:d0:ea:3b:91:2c:
7d:79:25:c1:da:66:64:54:2a:2f:b3:cb:00:6f:d8:
f5:42:b6:1f:2d:08:fc:9c:77:cf:ff:10:5d:17:d4:
6a:76:77:4e:42:76:6d:43:23:76:1f:e1:af:c5:e3:
70:dc:fa:c9:f1:0f:63:70:71:37:aa:1a:d9:fc:3e:
01:5a:2a:44:40:1d:aa:45:24:6c:0a:f0:77:84:52:
37:6a:e6:56:da:4f:5c:2f:60:4c:17:c5:bd:67:cd:
32:d6:55:4d:cc:6e:be:f6:5a:29:08:85:a7:49:78:
8e:e5:da:7b:4d:a0:29:3f:53:38:ae:87:14:12:22:
86:aa:49:18:f1:b5:c5:a6:e8:52:27:ca:00:8e:31:
5c:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:54:E8:7B:8A:32:F1:24:26:95:EC:2A:CC:D4:92:59:AC:9D:62:0E
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/JFToe4oy8SQmlewqzNSSWaydYg4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.64.0/21
Signature Algorithm: sha256WithRSAEncryption
97:31:cd:e8:f8:d8:65:2d:83:dc:8e:17:f3:6f:52:02:b9:47:
2c:2a:b3:5d:ba:bf:53:5c:48:f1:e0:0b:02:dd:e2:ab:e4:6f:
48:dc:95:ac:3d:18:fa:38:b8:14:2e:16:d6:d7:b8:0c:48:fe:
b9:ae:21:22:17:59:62:14:ab:8a:43:fb:d2:ee:f7:a9:90:2d:
de:d7:03:0b:78:64:ce:1d:38:bd:22:03:69:37:5c:76:26:9e:
be:8a:a7:d8:ec:2c:0f:f5:76:c7:66:35:30:31:e1:73:b1:2c:
8d:24:5f:28:88:da:72:66:54:70:81:1d:f2:77:19:60:be:39:
42:71:63:44:3a:39:3a:f9:ec:08:f7:c4:28:bc:cd:49:0d:46:
b5:58:ce:9a:29:b0:98:8f:fd:04:6a:e7:5c:91:8f:ed:53:84:
51:fe:27:f1:c9:c5:c3:f7:65:59:96:95:35:df:53:e6:24:46:
c7:5f:89:22:12:08:a4:84:e8:da:02:56:2a:6e:b7:39:c0:0e:
ee:0b:4b:33:e7:54:4a:ed:fd:72:09:d6:d2:17:1f:aa:24:48:
b9:8e:f0:ae:eb:55:ea:f4:ed:be:2a:c7:a0:32:98:ea:6a:48:
6e:89:7a:07:0d:ce:9b:fd:8b:11:f2:9b:cf:07:e5:dc:83:3d:
52:c0:4a:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org