Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ojKzlZ0v8QzM-DMRli4vIFwC1d0.roa
File: ojKzlZ0v8QzM-DMRli4vIFwC1d0.roa (raw, json)
Hash identifier: VRNn6LIL+9Gpg50ARIC3LHSojCr7FsRLwjEByH+ntVg=
Subject key identifier: A2:32:B3:95:9D:2F:F1:0C:CC:F8:33:11:96:2E:2F:20:5C:02:D5:DD
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F1BE28C0ECBB58456A8FA2949D85
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ojKzlZ0v8QzM-DMRli4vIFwC1d0.roa
Signing time: Sun 01 Jan 2023 21:05:01 +0000
ROA not before: Sun 01 Jan 2023 21:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207447
IP address blocks: 193.233.52.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f1:be:28:c0:ec:bb:58:45:6a:8f:a2:94:9d:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a232b3959d2ff10cccf83311962e2f205c02d5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:df:ff:8c:a0:e3:67:7b:76:e1:14:3e:75:9e:
f8:44:61:70:98:e0:be:7b:ed:44:6f:b7:03:04:07:
ba:5a:14:03:95:aa:f0:40:4f:75:3d:09:eb:ef:d4:
87:a5:34:52:89:67:96:43:28:6b:61:2d:7e:22:f9:
88:30:53:b8:b8:cf:ae:20:ac:1e:2e:0f:d8:65:58:
6d:7d:69:4b:48:15:71:3e:8f:7f:bb:9c:e5:76:d2:
2e:f2:03:96:72:b1:24:f8:68:a6:bc:3e:9a:26:f6:
18:0f:5c:8d:23:22:73:36:ad:c0:7a:48:b3:e0:c8:
c6:f1:95:92:ce:ec:46:36:46:66:b6:01:c8:fd:3d:
f3:54:a2:14:2c:88:d2:aa:79:df:80:62:d4:20:bf:
42:4c:dd:81:d3:fa:ad:3b:91:92:2a:b8:a5:39:b1:
96:a6:57:75:ab:f9:2c:f4:b9:97:04:80:f1:d9:81:
14:6b:ae:e2:56:70:be:a1:2e:ce:64:9c:7a:7f:30:
53:e9:2f:39:b8:0a:10:ef:1e:e7:92:37:c7:6f:bb:
ec:3b:6f:db:0b:66:0a:06:76:bf:de:33:c4:d1:17:
d6:40:26:5f:6a:34:9d:df:27:af:c1:64:93:0f:1f:
41:42:73:46:7c:4f:b4:ee:97:10:51:e0:cf:48:b7:
d9:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:32:B3:95:9D:2F:F1:0C:CC:F8:33:11:96:2E:2F:20:5C:02:D5:DD
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/ojKzlZ0v8QzM-DMRli4vIFwC1d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.52.0/23
Signature Algorithm: sha256WithRSAEncryption
93:ef:82:cd:3e:02:c1:c3:76:2e:36:ef:7b:1f:aa:27:7d:7f:
4d:73:4c:47:ac:d1:f9:4b:6b:4a:a0:b4:f1:b8:05:fc:6b:43:
cc:4f:d6:f9:45:81:82:a5:22:a1:0e:c1:7b:5a:fc:6b:08:99:
1f:63:5c:b1:82:ab:12:84:52:f5:a1:8a:ec:b8:8b:36:b2:ac:
f1:79:09:2b:48:f3:f3:df:1e:80:23:84:79:90:08:09:58:51:
ce:c8:0b:e2:e7:14:0a:f5:87:f3:26:ed:70:74:38:c6:6a:94:
28:a3:d6:66:1d:b8:c5:7a:83:4b:91:c5:45:1a:07:05:c9:cb:
5a:d4:5c:1c:30:24:6a:06:ec:f4:b7:5d:e9:0d:8a:69:78:74:
32:6e:2d:8f:da:52:13:d7:ed:47:0c:bc:10:b9:e8:c3:fd:2f:
0b:33:71:bd:63:61:79:fa:6a:50:c2:d5:da:0f:89:1b:b3:42:
fb:4b:40:cd:89:d9:49:41:e2:56:b2:0c:a4:61:c2:7d:07:6f:
8d:bb:4f:83:5d:3d:54:bf:7e:29:16:0c:cb:b8:dd:59:4b:2d:
bc:c7:72:96:14:02:af:e6:e2:25:fd:bd:7e:9a:24:04:23:f4:
df:ae:3c:d4:b2:51:46:21:77:28:a0:25:c9:cc:f8:ae:c5:1e:
4f:2e:7e:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org