Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/URuUS9qBguaVDBCCo_LsNWvw-Mg.roa
File: URuUS9qBguaVDBCCo_LsNWvw-Mg.roa (raw, json)
Hash identifier: xAcknRV2aZ7wTJu92WolOzohSJU0tBSbN8BCkDwVaAI=
Subject key identifier: 51:1B:94:4B:DA:81:82:E6:95:0C:10:82:A3:F2:EC:35:6B:F0:F8:C8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DD551F75D4B2242BA5ED48960B15
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/URuUS9qBguaVDBCCo_LsNWvw-Mg.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14576
IP address blocks: 193.233.228.0/22 maxlen: 22
193.233.136.0/22 maxlen: 22
193.233.140.0/22 maxlen: 22
193.233.82.0/23 maxlen: 23
193.233.210.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:dd:55:1f:75:d4:b2:24:2b:a5:ed:48:96:0b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=511b944bda8182e6950c1082a3f2ec356bf0f8c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:80:8e:9b:0c:a9:b5:b3:b9:ac:cc:20:03:
66:f7:f0:70:03:e6:f2:4e:1e:73:16:f1:97:0e:ca:
31:19:9c:2f:25:6d:82:e3:92:ee:1f:4a:db:af:3d:
be:59:27:06:4e:86:c8:02:35:44:97:03:74:9d:e3:
8e:4d:6f:53:ed:b5:14:f1:8e:e4:0d:70:f6:12:fa:
17:58:f6:71:e9:94:23:91:71:d3:48:6a:5b:34:9c:
16:a4:5f:ef:15:fc:c3:c6:f2:c5:10:97:e2:01:ad:
2d:55:66:0f:c2:04:0e:8f:90:72:63:6c:b9:b0:6a:
d1:1e:29:fe:1d:7e:ab:62:0d:0a:41:60:23:3c:fe:
71:25:75:04:d0:5b:b5:e5:7d:fd:18:3d:bc:9b:7b:
d2:ce:f9:8e:f5:63:8d:1b:cd:0d:50:d9:d6:a5:53:
ee:38:8c:da:be:00:0c:96:9f:b9:4f:9c:6e:be:cf:
83:79:77:20:58:c0:2d:88:62:43:83:c7:3f:59:b4:
7c:80:7a:12:55:5e:b2:65:62:f0:40:0b:42:48:c4:
4a:d5:a6:5f:35:7d:f6:65:00:78:5b:fe:df:0b:c8:
03:01:c0:31:c0:79:49:08:0d:11:46:e5:cb:ca:9c:
d0:7f:1d:fc:bd:34:db:12:c0:c7:94:08:0f:7f:4e:
55:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:1B:94:4B:DA:81:82:E6:95:0C:10:82:A3:F2:EC:35:6B:F0:F8:C8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/URuUS9qBguaVDBCCo_LsNWvw-Mg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.82.0/23
193.233.136.0/21
193.233.210.0/23
193.233.228.0/22
Signature Algorithm: sha256WithRSAEncryption
2e:4f:4c:fa:6c:d1:f6:17:db:79:6f:ef:1f:d2:de:07:8d:97:
22:c9:2e:8a:e2:ea:ba:ae:6f:95:7e:76:81:0e:6b:88:d2:bf:
bb:1e:4c:fc:b0:cc:e7:61:74:c3:db:59:ec:b7:f8:23:21:a4:
aa:aa:9a:45:d2:11:bb:ff:99:f9:be:25:35:d5:73:26:3f:97:
e2:65:eb:30:bc:ef:56:67:3c:12:8d:92:63:6c:67:bc:95:95:
a2:15:54:a5:8c:95:46:3a:61:ca:46:6d:29:75:4f:0d:99:1a:
a7:36:e8:ca:0d:13:10:b3:14:01:2b:e1:fe:98:bd:59:0a:7c:
b1:79:60:63:40:69:d7:58:ce:e0:04:5a:db:b8:32:11:e9:75:
a5:a3:0c:f7:3e:1d:b1:2a:5d:c6:6f:ab:81:55:f8:c7:c3:ff:
64:40:bd:7c:6d:85:01:6c:21:07:9f:59:2d:a7:9e:23:92:34:
a0:af:05:4c:92:1b:2a:e4:5f:a2:2c:0a:98:14:21:38:33:f8:
94:0e:05:0b:ef:80:d3:f5:a3:b1:91:af:9e:4b:72:2a:3a:ab:
c0:07:82:ed:ce:4a:cf:92:a1:70:e2:a0:a8:bb:a1:a5:27:f5:
6b:fc:d2:38:54:6f:c7:d4:81:33:78:33:78:fb:c9:8e:c9:d3:
7e:ac:f7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org