Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VrTaFwBTwtX0Fgr1-dcS-pbYYyQ.roa
File: VrTaFwBTwtX0Fgr1-dcS-pbYYyQ.roa (raw, json)
Hash identifier: DSdgHnNcU2a6dxeaoWul/ncNJvn7I+gd/jdN2g1sAKI=
Subject key identifier: 56:B4:DA:17:00:53:C2:D5:F4:16:0A:F5:F9:D7:12:FA:96:D8:63:24
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79535F4ED7AAEBC83A144B76B3A86E0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VrTaFwBTwtX0Fgr1-dcS-pbYYyQ.roa
Signing time: Tue 02 Jan 2024 00:31:33 +0000
ROA not before: Tue 02 Jan 2024 00:31:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207713
IP address blocks: 193.233.18.0/24 maxlen: 24
193.233.48.0/24 maxlen: 24
193.233.49.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Feb 2024 17:05:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:35:f4:ed:7a:ae:bc:83:a1:44:b7:6b:3a:86:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=56b4da170053c2d5f4160af5f9d712fa96d86324
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:29:76:0c:6d:15:17:3b:d8:39:85:af:9f:e4:
e0:22:77:2d:a0:8c:56:f2:a4:ee:b1:04:39:58:e4:
64:65:46:6c:07:13:67:2a:9a:4d:54:bb:ac:95:93:
31:cf:d8:97:af:b2:39:4c:9d:76:ee:c1:af:d8:32:
10:1b:25:08:0b:dd:cf:9c:0d:ed:69:6a:cf:d1:e7:
ee:3f:58:ca:69:4a:3a:44:0b:f8:00:45:5b:13:2d:
f9:eb:e7:5e:95:83:13:7f:7f:f9:20:69:05:9c:70:
f1:cc:e0:6d:c5:1c:cd:70:34:cb:21:b0:54:2f:6b:
26:08:cd:1b:69:78:d9:03:39:63:47:c2:d5:df:bf:
9a:59:98:21:14:92:34:49:50:96:68:23:af:16:b9:
3a:df:2c:eb:96:08:c5:56:19:c1:09:5e:db:6d:e7:
ba:ca:e3:00:34:88:b5:db:82:60:cd:a6:ab:5c:7a:
d0:e6:93:5b:14:20:5e:d2:c4:36:a2:9e:e2:4d:22:
93:a2:97:dc:b3:c2:77:c2:0a:ce:71:80:17:1f:57:
bd:ef:92:dd:02:b0:7a:0c:df:ee:57:69:1e:16:bf:
da:9b:3a:4a:20:f4:39:0f:55:42:bb:7f:bb:e1:96:
2b:eb:8b:ca:e7:93:c3:e8:19:10:75:43:6f:44:e3:
b0:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:B4:DA:17:00:53:C2:D5:F4:16:0A:F5:F9:D7:12:FA:96:D8:63:24
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/VrTaFwBTwtX0Fgr1-dcS-pbYYyQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.18.0/24
193.233.48.0/23
Signature Algorithm: sha256WithRSAEncryption
80:0d:ab:f7:90:34:50:53:27:b6:90:91:67:a8:76:fe:7d:a0:
44:11:29:36:4f:7a:a9:dc:1e:d2:8d:5c:bd:64:57:41:e2:2d:
d3:47:9a:81:54:bb:e4:b6:f7:21:9e:25:e6:23:d0:8e:3e:b1:
9a:a7:53:4a:c7:f4:b7:00:ff:b8:cd:ad:f9:d7:99:72:50:f5:
3b:56:70:cb:b8:02:de:b1:29:97:ef:98:b4:c2:08:f6:0b:6c:
f2:d1:9a:11:9b:36:89:ba:89:f4:25:5e:c4:0b:e0:9d:a8:55:
d5:66:a9:23:b6:94:98:37:2d:7f:82:77:96:e2:71:32:83:b2:
5d:97:6b:04:27:c1:ff:6d:a6:44:b9:68:65:91:4b:8b:5c:6f:
3d:61:aa:1b:eb:e3:83:db:18:2e:4c:3b:38:6c:07:35:60:a1:
fe:8f:50:af:3f:d8:c4:2e:19:39:07:76:f1:01:85:8b:0f:d5:
a4:1c:1b:f8:35:bd:f5:c1:a5:15:98:9e:c9:22:f1:9c:3a:c8:
e8:69:6d:82:4b:b3:75:f6:58:bf:5b:7c:d8:6f:c5:b6:fc:4b:
9f:62:d3:23:b0:f2:ed:db:b3:28:57:f6:d6:af:65:18:06:2e:
ba:04:2f:f7:20:24:f7:85:9d:ae:27:f7:f9:24:72:f6:9b:54:
05:d2:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 20:35:33 2024 by rpki-client on console-fra.rpki-client.org