Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k3HXTmxDcYO9hAw8tJ4VMxZOScY.roa
File: k3HXTmxDcYO9hAw8tJ4VMxZOScY.roa (raw, json)
Hash identifier: qiLDnaY3PC844ZxVEzeu14sEsM02kOILvf4PowuHLaw=
Subject key identifier: 93:71:D7:4E:6C:43:71:83:BD:84:0C:3C:B4:9E:15:33:16:4E:49:C6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01876B5282F6331F1E1872021376397FF41E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k3HXTmxDcYO9hAw8tJ4VMxZOScY.roa
Signing time: Mon 10 Apr 2023 13:19:42 +0000
ROA not before: Mon 10 Apr 2023 13:19:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.233.234.0/24 maxlen: 24
193.233.252.0/23 maxlen: 23
193.233.192.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.86.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6b:52:82:f6:33:1f:1e:18:72:02:13:76:39:7f:f4:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 10 13:19:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9371d74e6c437183bd840c3cb49e1533164e49c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:67:41:9e:76:48:ff:63:78:07:77:3f:c7:22:
88:7c:45:61:e6:08:f2:4d:8e:0a:b8:0d:27:66:f9:
3a:c0:be:7e:8d:ab:39:c2:bb:81:8e:d3:a6:67:a1:
64:e8:13:b9:a2:d5:4f:06:49:b0:94:9f:0f:24:00:
34:b1:20:d0:be:19:a7:84:e8:cd:7c:04:bc:15:0b:
3a:d9:1e:cf:3e:06:fa:0d:2a:14:db:c7:8f:5b:a9:
fe:9c:a0:63:a8:2c:17:7c:c9:58:c9:0c:0b:a8:7f:
86:f4:09:5d:ca:87:f8:28:cf:ab:79:4d:d5:dd:98:
27:98:64:36:03:a4:16:e2:fa:4b:93:a1:cb:88:94:
a8:3a:cc:61:ed:77:8a:0d:a0:a2:6a:16:4d:1e:a0:
29:c5:46:a6:16:15:18:f2:57:8e:02:62:ec:41:47:
c6:cd:9c:bb:63:95:b6:87:01:a6:ad:1f:81:b2:08:
7c:71:0c:5e:5e:2e:fa:ee:76:2d:5f:fd:32:61:42:
8d:91:aa:22:3f:d1:c4:08:c4:f7:26:63:e6:c4:0b:
35:ef:8e:85:50:b8:3d:37:b7:ed:73:fb:3e:b6:db:
58:25:24:32:77:b9:ce:04:b9:61:f4:86:9c:ab:d7:
7c:6c:d9:b8:0f:89:34:d6:57:c6:36:b6:91:47:67:
ce:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:71:D7:4E:6C:43:71:83:BD:84:0C:3C:B4:9E:15:33:16:4E:49:C6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/k3HXTmxDcYO9hAw8tJ4VMxZOScY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.85.0-193.233.86.255
193.233.192.0/24
193.233.234.0/24
193.233.252.0/23
Signature Algorithm: sha256WithRSAEncryption
46:35:2d:ad:9d:70:1f:b2:1b:1c:62:de:6d:09:bd:1b:a8:cd:
fd:f5:70:5e:f2:16:9d:95:52:5f:08:28:5a:81:3c:88:c8:0d:
3a:41:c4:43:43:64:14:df:72:22:e8:f2:4c:03:d8:41:64:d8:
ca:42:e7:b6:08:5c:f6:88:0d:ff:d8:69:24:d4:26:e5:83:17:
36:e8:f6:9d:d9:4a:93:10:20:b8:7e:a9:9d:c7:c7:03:4e:86:
6c:65:6e:65:4b:c2:11:24:db:b9:f2:b2:dd:13:03:cc:e4:59:
0f:8f:58:d9:c9:ba:ab:ef:ae:25:0b:9a:db:88:d0:b5:bb:c6:
3a:ef:4f:61:44:9d:d9:02:0b:11:08:bf:ec:03:f3:17:85:41:
60:2b:db:8b:6f:2f:d6:b7:e3:c2:df:0f:82:87:88:9a:6d:99:
94:32:79:d5:00:05:03:2e:06:98:b8:a6:89:90:38:7b:8f:30:
e9:59:bc:ba:85:4a:d4:0c:5c:bb:bc:17:ab:41:87:58:2e:4c:
b8:be:2b:94:4a:fe:b6:03:c8:81:2c:32:47:a8:40:fa:b6:f8:
28:37:1b:90:12:8e:37:30:f6:89:6d:81:df:c4:c1:92:92:35:
74:ca:b1:80:f8:a9:51:5b:ba:72:9a:cf:df:d6:67:6c:47:54:
84:ad:8b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org