Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/T6BMR_F62_sdqOy3XtaKwTPXsdE.roa
File: T6BMR_F62_sdqOy3XtaKwTPXsdE.roa (raw, json)
Hash identifier: e+lBFZTcpLuk5PHEtBVGkUg7gbs492AlAafGzTrXoAE=
Subject key identifier: 4F:A0:4C:47:F1:7A:DB:FB:1D:A8:EC:B7:5E:D6:8A:C1:33:D7:B1:D1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0187994D16454753EEB83C0A2895A085438C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/T6BMR_F62_sdqOy3XtaKwTPXsdE.roa
Signing time: Wed 19 Apr 2023 11:36:18 +0000
ROA not before: Wed 19 Apr 2023 11:36:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210352
IP address blocks: 193.233.49.0/24 maxlen: 24
193.233.48.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:99:4d:16:45:47:53:ee:b8:3c:0a:28:95:a0:85:43:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 19 11:36:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa04c47f17adbfb1da8ecb75ed68ac133d7b1d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:32:3f:34:b9:ba:38:02:b6:ab:53:ae:c6:50:
20:78:80:d6:ad:57:56:9b:bb:0e:46:f2:34:b8:66:
b7:b4:df:50:bf:93:fc:32:68:0f:d5:42:5f:5b:d9:
7f:31:ef:cb:64:78:17:c5:a5:83:be:60:5b:34:54:
5a:f3:f7:9e:04:61:5e:0a:01:de:e9:b4:af:63:b3:
1c:63:90:9c:a8:d2:8c:27:4d:f5:6a:ad:4d:be:5d:
24:79:de:82:ce:c7:8a:fb:f8:29:9c:68:25:d9:1e:
a2:22:c5:54:66:32:06:c5:af:14:cf:20:be:63:31:
c9:13:de:48:a1:86:fa:14:0b:97:49:5e:d4:ed:06:
ac:67:68:dd:0c:34:00:db:72:16:d0:c3:09:41:20:
fb:03:e5:cb:d5:fd:2d:d6:71:28:98:20:cf:c8:ce:
8a:be:bd:72:cf:c9:90:e8:60:fe:35:54:b3:e2:25:
c4:57:eb:4a:df:f6:f8:10:cb:4e:98:96:d1:a9:ac:
a9:12:20:90:8b:df:ec:96:43:3d:b7:cb:63:45:a5:
32:96:1c:34:7f:1e:4b:dd:cf:63:c6:37:d2:93:02:
34:be:ae:ac:7e:c3:13:48:e3:5e:c1:11:71:bc:ed:
5c:f2:7a:6d:83:e3:1e:d6:37:1f:7f:06:15:2d:98:
fe:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A0:4C:47:F1:7A:DB:FB:1D:A8:EC:B7:5E:D6:8A:C1:33:D7:B1:D1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/T6BMR_F62_sdqOy3XtaKwTPXsdE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
0c:47:7e:79:06:59:0c:bb:99:92:8f:8a:aa:8a:92:f7:8f:11:
33:78:67:39:04:02:f2:09:00:1d:67:9c:8c:60:80:9d:a8:db:
6b:2f:c9:cc:cf:0d:e9:8c:b6:9a:bb:9e:12:90:5d:0b:d7:12:
5b:8f:78:7b:70:c9:0b:42:c3:a6:88:cb:b0:cd:36:3e:45:fd:
6b:2d:e1:96:13:4a:06:b0:35:55:a9:f9:f6:8f:42:19:d4:48:
77:3f:57:68:68:46:59:51:6f:b5:d6:49:e0:92:a9:1e:eb:d0:
93:dc:07:33:a3:42:51:90:d5:6a:fa:f5:c6:3f:0a:07:4e:5c:
ee:bb:a8:d5:bf:db:c0:37:f0:be:21:26:2a:73:cb:84:d1:69:
8f:50:eb:a8:5a:b7:8f:a7:fd:92:a3:ff:0b:b9:e3:3c:2f:de:
2f:c0:19:a6:9b:ec:14:76:e2:8c:13:a7:96:47:2b:65:14:9a:
58:cc:75:de:84:8f:9c:44:f8:8b:96:01:4b:55:4a:7b:fe:1e:
f0:c5:91:2a:05:92:fd:94:4a:e4:9d:28:6c:d4:7f:2c:07:fd:
44:59:9c:0f:a7:46:d0:88:5f:5a:68:2c:1a:3b:43:75:27:29:
bb:20:4f:6d:b8:54:2f:b4:da:0d:c8:f1:27:eb:a1:04:58:97:
92:de:4e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org