Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gOcTUoluyEQcTYcoVr3GO4Khw-4.roa
File: gOcTUoluyEQcTYcoVr3GO4Khw-4.roa (raw, json)
Hash identifier: tJakDadBRzYs2Dl9+RjeeMuugCQozHbCpsanPRxskm4=
Subject key identifier: 80:E7:13:52:89:6E:C8:44:1C:4D:87:28:56:BD:C6:3B:82:A1:C3:EE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DB76820118B643447AE60CF22820
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gOcTUoluyEQcTYcoVr3GO4Khw-4.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7029
IP address blocks: 193.233.108.0/22 maxlen: 24
193.233.116.0/23 maxlen: 23
193.233.118.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:db:76:82:01:18:b6:43:44:7a:e6:0c:f2:28:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=80e71352896ec8441c4d872856bdc63b82a1c3ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:a5:3b:2f:16:80:fd:9c:e1:5d:14:e7:91:73:
87:97:3d:71:10:31:8e:8e:fe:35:06:ea:80:ac:d4:
93:7e:b8:b0:59:94:7d:26:58:5a:e5:6a:8f:59:f5:
f6:5c:a2:84:c8:66:dc:82:53:b0:5a:f0:26:43:a6:
c3:87:4d:0d:89:86:f6:57:07:92:60:b0:ac:81:83:
7d:c1:06:e9:8a:b1:d2:73:80:da:41:f1:96:b9:99:
29:63:56:8c:c3:83:22:58:94:d2:67:55:18:2f:ed:
b7:0e:8f:0d:3a:92:24:53:6b:81:84:e6:2c:98:52:
7d:98:9b:5f:25:76:53:8f:47:48:51:5c:06:0e:f1:
61:b5:4f:93:ca:9a:c0:4e:3a:69:c7:ff:15:fa:a1:
7c:85:48:30:0f:a9:4b:b1:29:49:2a:43:53:d6:59:
2f:37:b3:1d:16:24:7c:c6:70:e2:be:45:b5:e6:79:
4b:c4:49:e2:31:0b:77:dd:66:9a:e2:31:b9:f9:24:
47:cb:f4:a6:54:41:27:f0:0b:b4:81:48:23:48:24:
e3:a6:42:5a:80:4a:28:a9:6d:03:7e:a9:05:15:14:
49:20:83:27:a2:f9:c0:3c:46:c1:63:ec:4d:0e:da:
46:1a:37:24:ac:ca:e0:f7:39:29:ef:00:75:0f:20:
74:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:E7:13:52:89:6E:C8:44:1C:4D:87:28:56:BD:C6:3B:82:A1:C3:EE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/gOcTUoluyEQcTYcoVr3GO4Khw-4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
41:7d:2f:48:1d:30:f6:b8:ed:de:5d:cd:5f:9d:2c:3d:67:12:
cb:0d:32:49:8f:b7:ee:44:47:5f:d6:60:f6:41:66:74:1c:24:
f9:05:34:dc:42:da:84:86:b4:d9:7c:68:3e:45:e6:38:1f:34:
12:a9:31:0e:a2:7a:7e:f8:ae:a6:9a:75:9d:7c:20:6b:9f:b0:
fc:19:c3:6b:63:54:50:43:7f:16:4f:64:37:c9:2a:f8:f7:74:
f6:e1:fc:87:38:79:04:7f:2f:da:56:50:ec:0a:b6:08:84:31:
1c:13:0d:24:5a:81:a7:95:97:de:c6:15:23:62:bb:84:99:44:
4e:a5:82:79:98:ef:90:f3:31:48:21:23:6c:26:00:93:6e:e8:
79:12:ac:95:93:44:98:bd:65:f2:b1:aa:fb:54:02:36:a9:bc:
99:ec:a7:bd:dc:5f:1b:38:3b:f6:64:5e:93:ee:f4:bc:a5:31:
97:4d:20:90:58:05:e0:99:2d:eb:00:26:84:60:58:56:b1:85:
a7:18:e8:dc:09:7c:a1:d6:e0:15:c8:bd:92:8f:05:70:fc:c7:
75:c5:6c:1e:a7:55:8b:11:a0:13:e3:2e:74:ae:7f:5c:a6:ef:
27:a8:31:91:b5:3a:ea:42:01:f6:4d:05:0b:89:d3:6a:7c:4a:
de:39:a2:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org