Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YF_yGqurDQ7FRFEqa2e7Et3uAsw.roa
File: YF_yGqurDQ7FRFEqa2e7Et3uAsw.roa (raw, json)
Hash identifier: oqk1jq3HlI5vKYIlSZStcoatn2TGMDduvkssWzYnbqg=
Subject key identifier: 60:5F:F2:1A:AB:AB:0D:0E:C5:44:51:2A:6B:67:BB:12:DD:EE:02:CC
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01888D8658D478C1891990096F8C901EC0EC
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YF_yGqurDQ7FRFEqa2e7Et3uAsw.roa
Signing time: Mon 05 Jun 2023 21:46:11 +0000
ROA not before: Mon 05 Jun 2023 21:46:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34665
IP address blocks: 193.233.234.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8d:86:58:d4:78:c1:89:19:90:09:6f:8c:90:1e:c0:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jun 5 21:46:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=605ff21aabab0d0ec544512a6b67bb12ddee02cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ca:09:4d:e1:1d:33:a8:ed:2e:1d:6c:de:19:
9b:29:25:5c:c2:ec:15:22:68:42:8f:5d:b0:ae:d1:
57:b0:55:9b:9e:53:24:96:63:b2:78:e9:1f:cf:b9:
a8:93:b7:5e:ef:77:47:60:fb:eb:1d:1b:16:a6:0c:
00:dd:cc:69:34:e3:e4:a5:59:02:82:eb:3f:49:42:
99:d3:fd:e3:3f:de:90:54:24:4b:80:6a:e0:43:10:
6a:5c:bd:bd:89:87:b2:b1:3d:aa:0e:bb:48:99:5c:
58:96:ba:5d:04:a1:cf:41:54:06:8c:bb:cd:a9:8c:
01:9a:39:c7:f7:32:df:dd:40:7c:c2:28:fe:0e:f1:
40:ff:f0:41:18:70:44:8a:a5:4f:95:01:60:4b:dd:
01:a2:ff:d0:97:ec:4e:b7:ca:14:32:7a:25:ad:0f:
72:48:2b:a7:4a:08:c4:4b:3a:c0:d3:64:85:53:c8:
be:a6:33:a9:26:96:32:7a:f0:f2:c2:f0:2a:5d:50:
22:1f:b3:81:69:4d:85:59:c8:3a:e7:a2:a2:ba:a1:
a0:55:d2:8e:42:ba:08:de:52:77:20:ea:88:10:62:
d9:60:07:76:c8:c8:77:a6:28:1f:1b:2e:30:3b:7e:
ad:49:ba:f0:38:13:3a:44:91:0e:64:6d:33:4d:12:
8f:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:5F:F2:1A:AB:AB:0D:0E:C5:44:51:2A:6B:67:BB:12:DD:EE:02:CC
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/YF_yGqurDQ7FRFEqa2e7Et3uAsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.61.0/24
193.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
53:13:95:0d:91:3f:32:86:fb:db:40:18:81:26:ff:5d:7d:6d:
19:3c:6e:a6:fb:c7:9a:83:a8:ac:80:3c:d0:27:ee:27:52:3d:
0c:53:80:22:2e:f5:d7:6f:29:8c:ba:b5:52:22:4c:24:32:14:
34:b1:42:75:17:bc:5b:c6:e4:9f:3e:4e:79:d1:48:fe:bb:19:
df:fb:dc:02:f9:3e:5a:76:d0:ff:6f:6f:e8:8e:99:79:5a:f4:
40:c2:29:df:c1:f9:ab:ba:6f:9f:d6:ff:3a:3d:13:36:da:9e:
2d:13:79:6f:9f:6f:b7:2d:e7:54:07:ee:a8:14:da:1d:25:2d:
a9:a7:27:6d:3c:35:11:bd:f7:ba:cc:d8:7e:b1:06:54:e2:de:
ff:dd:d4:e8:90:35:4a:c8:93:78:7d:e8:4b:96:b1:24:92:9d:
85:5e:5d:b8:d6:a1:99:c5:2f:d4:32:d1:9e:8d:71:bc:80:ec:
1c:14:88:cb:c9:3a:b1:6b:8e:51:39:1a:27:ef:f6:46:fc:2a:
1c:f6:36:84:69:c7:47:48:31:2a:16:8c:02:96:48:6c:53:cf:
d1:3b:7a:01:ae:6c:79:a1:5a:6b:4d:bd:e1:5a:9c:f9:ba:1d:
23:e3:f9:b5:dd:d2:11:0a:d5:df:91:11:a2:22:5f:03:46:b4:
56:c5:50:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 26 16:01:47 2023 by rpki-client on console-fra.rpki-client.org