Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rw8FoSsiOEIzZUcOJGYJz5Vy2M8.roa
File: Rw8FoSsiOEIzZUcOJGYJz5Vy2M8.roa (raw, json)
Hash identifier: 8WI5TDaPy/C7gVykw/LDJHPOJWZq777HrfNXTd1dUsE=
Subject key identifier: 47:0F:05:A1:2B:22:38:42:33:65:47:0E:24:66:09:CF:95:72:D8:CF
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018703FA74244CE083F51817030E077CF0DD
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rw8FoSsiOEIzZUcOJGYJz5Vy2M8.roa
Signing time: Tue 21 Mar 2023 11:42:38 +0000
ROA not before: Tue 21 Mar 2023 11:42:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.252.0/23 maxlen: 23
193.233.192.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:03:fa:74:24:4c:e0:83:f5:18:17:03:0e:07:7c:f0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 21 11:42:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=470f05a12b2238423365470e246609cf9572d8cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:38:dc:60:d6:20:f0:e2:3f:c9:fb:76:fd:ab:
9b:08:24:5f:6d:ba:87:c7:04:b6:f4:00:e2:1f:44:
95:bc:ea:92:47:a1:6c:b3:08:48:3b:1b:07:66:dd:
5c:fc:4e:d8:f4:e1:3b:a1:86:b9:6b:76:29:e5:4b:
0a:4b:bc:ca:5e:71:72:e1:d6:13:f2:85:3c:f4:31:
64:3b:6e:21:d5:c1:62:1d:dc:14:3a:b6:13:15:ba:
73:01:fb:c9:84:8f:8e:b3:9f:3c:cd:ff:94:6f:59:
73:93:02:98:4b:a7:82:0c:b0:f7:07:d5:1d:b4:66:
7e:f4:df:ed:65:70:8f:8b:23:81:f2:f3:22:89:00:
98:e1:b5:19:55:4f:6d:78:43:27:d8:8c:65:34:7e:
a0:80:13:08:5e:c9:df:18:2c:2e:85:53:2d:e9:c5:
48:41:b4:8c:32:59:c0:9c:6c:64:60:ce:7f:1e:1a:
1b:2a:8b:c3:88:dd:5e:d7:b1:03:58:ca:1d:98:2e:
14:94:98:54:a8:f0:f5:94:57:88:a3:44:df:3b:c5:
41:b5:4d:79:e5:68:9f:16:be:cf:ae:c3:e3:9f:c1:
01:bb:23:1d:c2:76:36:a4:f5:25:81:a6:09:6b:a1:
e7:7f:c6:ac:c9:0a:46:d8:e5:47:dd:e4:65:73:74:
ba:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:0F:05:A1:2B:22:38:42:33:65:47:0E:24:66:09:CF:95:72:D8:CF
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Rw8FoSsiOEIzZUcOJGYJz5Vy2M8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.85.0-193.233.86.255
193.233.192.0/24
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
50:42:f3:f2:46:21:63:9f:c4:29:48:02:b5:1e:3f:71:10:6f:
3c:a4:4f:b2:d8:3f:74:bc:36:8e:ab:1e:11:f1:7e:36:48:bb:
73:96:8b:b9:53:5a:92:df:ae:69:46:34:3a:fe:68:43:3e:ff:
fd:1b:ef:07:47:39:72:b3:f9:28:09:59:aa:99:c0:08:13:ba:
70:77:da:01:8e:83:4a:d4:8a:46:15:68:cd:7b:c6:44:a7:e0:
fd:ef:47:06:f6:e6:de:fa:99:37:63:59:01:f7:49:b7:b7:94:
c5:73:9c:03:c3:95:2a:f6:7e:c7:6a:bc:49:3a:9d:1a:92:b7:
1d:54:ea:6a:42:0e:6b:0a:6f:e5:54:57:73:70:5a:40:4c:2b:
1d:6e:3d:cb:dc:4a:56:e4:d4:05:5d:4a:e2:9f:72:d0:5e:34:
70:40:b9:b8:b6:d0:25:72:fe:ed:fa:fa:d0:49:c8:33:98:f2:
52:d0:52:e1:b7:f0:c5:df:24:2a:6c:13:2b:cf:0d:8b:8b:a6:
fc:60:58:ab:13:fc:bd:2b:b8:ca:76:d3:ae:16:71:d9:4a:84:
28:e1:52:d2:03:69:16:12:77:c0:18:1d:f7:2c:b9:00:a9:1d:
cd:e9:aa:f5:67:1d:63:d0:66:c1:59:92:f0:e6:f1:24:a4:d7:
0f:9d:d3:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org