Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S0gBQnGQp9E5FdeFPDZhvYzRtoU.roa
File: S0gBQnGQp9E5FdeFPDZhvYzRtoU.roa (raw, json)
Hash identifier: HkG+8R3+lUUyAXMTRA5G6rnHA6NbcCSX35LPOMummIY=
Subject key identifier: 4B:48:01:42:71:90:A7:D1:39:15:D7:85:3C:36:61:BD:8C:D1:B6:85
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26E1A246A1656712D6A35A80CB84D6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S0gBQnGQp9E5FdeFPDZhvYzRtoU.roa
Signing time: Sun 01 Jan 2023 21:04:57 +0000
ROA not before: Sun 01 Jan 2023 21:04:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42745
IP address blocks: 193.233.15.0/24 maxlen: 24
193.233.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e1:a2:46:a1:65:67:12:d6:a3:5a:80:cb:84:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b4801427190a7d13915d7853c3661bd8cd1b685
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:a2:c0:cc:20:25:33:26:0d:bd:56:6e:a7:45:
93:b6:41:ff:b5:27:4d:57:f1:57:d8:f1:c4:2a:2c:
36:e2:5c:8e:2a:1b:c7:47:f0:7d:0c:86:39:bb:f5:
2e:3d:e7:d8:55:4c:b6:7b:71:88:6c:19:f0:eb:5e:
92:59:2f:9f:ca:fd:06:27:cd:26:eb:ef:66:a6:c7:
41:ba:a4:96:9a:83:bf:80:4d:ce:de:00:c7:94:9d:
82:ae:08:96:46:55:c3:2e:f7:39:1b:aa:57:3c:7d:
76:a1:1f:d4:32:17:b7:95:d5:21:b4:83:a3:73:27:
7a:14:59:a1:b5:fe:bd:04:e9:9a:1f:29:1d:7b:36:
67:11:a5:2b:b3:95:ed:ce:84:03:55:05:38:b3:e8:
2b:11:20:b1:45:03:42:a8:8d:63:af:1d:0d:0f:b9:
ff:a6:c7:76:07:d4:86:0c:d0:dc:d4:88:40:01:5c:
a9:97:a1:eb:61:9d:08:ca:ef:98:58:b7:c0:68:b1:
84:af:40:74:49:71:1f:74:a2:f3:92:e9:57:c6:95:
b2:50:11:a0:35:13:b5:e7:25:ec:f1:be:f4:f0:aa:
70:51:a4:38:21:b7:c2:df:5f:39:30:a7:36:94:22:
61:6e:72:24:ce:f9:bb:a3:50:02:b1:14:1b:ad:66:
69:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:48:01:42:71:90:A7:D1:39:15:D7:85:3C:36:61:BD:8C:D1:B6:85
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/S0gBQnGQp9E5FdeFPDZhvYzRtoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.15.0/24
193.233.63.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:aa:72:b2:96:ed:22:26:37:de:23:2d:fb:26:13:20:88:7c:
17:ce:4c:ac:61:a4:f7:54:c1:b3:89:d8:cf:c9:48:e1:55:5d:
b7:fc:17:3d:8b:a2:82:93:33:e3:33:0b:eb:57:40:fc:02:09:
db:d6:ba:0f:52:29:16:4f:19:e9:14:8f:1c:22:80:76:4f:97:
10:aa:1b:90:f0:e1:00:b2:93:ae:da:c8:6b:df:5b:20:67:7a:
24:65:88:cf:51:b7:ca:15:dd:b5:37:cf:75:00:71:b1:2a:72:
86:e0:69:0a:aa:d5:23:d1:9f:a8:e5:81:fe:ad:4e:9c:ea:0c:
f7:3e:39:4f:6c:fa:d8:e9:dc:b1:ab:49:4d:72:18:16:6f:97:
c8:54:01:7d:7c:a1:8b:14:9f:23:d8:f8:06:21:63:0d:4e:60:
9d:1c:86:75:b1:7c:0e:db:ee:2f:99:a8:37:8e:c6:f5:bd:76:
6b:51:98:33:53:41:52:25:c7:be:fd:63:5f:69:c3:dc:54:1b:
b5:ed:0e:b0:84:20:5c:bc:12:3d:7f:12:da:27:35:a9:ce:8b:
e6:6f:9c:d9:db:65:dc:19:c4:39:0a:ef:55:4c:76:59:d8:3e:
f6:31:08:cc:dd:ef:f2:a9:11:a5:f4:b0:b4:e9:25:48:3e:12:
45:bc:14:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org