Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pFTGRdHOU05_YhKcZvaAQQzgZtg.roa
File: pFTGRdHOU05_YhKcZvaAQQzgZtg.roa (raw, json)
Hash identifier: tjRs5GfUno6xBMiIXh3rlARmpplC4EkKgCZCOkt0y6I=
Subject key identifier: A4:54:C6:45:D1:CE:53:4E:7F:62:12:9C:66:F6:80:41:0C:E0:66:D8
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018776CB835DD1D5F529764FE182E8479AD1
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pFTGRdHOU05_YhKcZvaAQQzgZtg.roa
Signing time: Wed 12 Apr 2023 18:47:41 +0000
ROA not before: Wed 12 Apr 2023 18:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199264
IP address blocks: 193.233.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Jun 2023 00:09:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:76:cb:83:5d:d1:d5:f5:29:76:4f:e1:82:e8:47:9a:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 12 18:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a454c645d1ce534e7f62129c66f680410ce066d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:03:61:b1:7d:64:96:7e:ed:a2:ba:9a:ee:fd:
a9:a8:49:70:af:35:3e:68:7d:e3:65:81:99:ae:3e:
8c:c1:26:4a:79:4a:3b:00:4b:c7:78:ee:85:6b:da:
51:a8:42:17:0c:4a:a5:5f:21:30:9c:19:5f:f5:55:
ab:ab:e4:9f:0c:16:9b:6a:b6:1c:f5:5a:8d:dd:3c:
e6:1b:ea:d3:7f:ba:17:dc:83:83:20:05:82:02:0f:
8e:86:23:b3:12:2d:a9:47:d8:87:13:25:9a:c4:da:
de:ac:53:76:18:76:26:82:35:3d:69:86:1f:ff:06:
c7:c7:bc:75:5e:6b:a9:6f:24:73:11:05:b6:c6:74:
77:4d:97:34:ed:a9:d4:71:c5:6f:0f:fe:c8:a0:4d:
ff:a6:ce:ce:b6:04:6f:2a:78:40:83:4a:05:56:84:
18:6a:5d:50:4e:59:9a:82:be:ed:93:9b:e1:c2:2a:
df:51:b7:4b:e7:1b:c7:7a:b0:6d:8c:93:a8:20:37:
02:26:af:ff:f5:f5:eb:6c:70:aa:11:de:f4:21:72:
49:c0:ba:1a:b4:85:a8:be:25:b9:32:76:24:f4:15:
48:67:80:0a:79:ec:a4:83:f0:d3:a6:b5:8c:97:e2:
d5:3e:1b:56:e3:87:10:41:6e:44:05:33:44:27:33:
30:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:54:C6:45:D1:CE:53:4E:7F:62:12:9C:66:F6:80:41:0C:E0:66:D8
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pFTGRdHOU05_YhKcZvaAQQzgZtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.133.0/24
Signature Algorithm: sha256WithRSAEncryption
92:4d:70:17:99:8b:1b:86:fe:4b:5e:44:aa:9b:14:f9:94:2a:
34:13:e8:18:29:cc:cf:7a:dd:6b:6e:11:f9:1a:a1:7b:e5:1e:
96:51:47:73:24:54:1b:b5:c4:98:70:f5:a2:cc:9c:52:93:d7:
c3:4b:f2:58:15:6d:54:40:2f:36:27:57:af:bc:50:61:b8:14:
01:94:48:a6:c9:09:b3:92:1c:d0:ca:bd:0b:36:b8:25:f2:7f:
c7:e8:2a:72:e3:ca:57:a5:3e:c7:5b:36:f8:79:16:74:63:de:
fd:c4:88:97:ef:97:8a:02:ef:2c:92:fe:1d:36:36:d1:62:fa:
f0:fd:4e:21:12:f6:69:00:38:62:33:50:64:2e:e5:51:d6:54:
97:08:9a:b9:10:0e:57:8e:10:fb:b6:85:2b:b7:a9:20:6e:95:
66:f3:10:ec:1a:4e:e7:60:17:e0:32:5e:68:b1:e7:6d:28:ea:
04:4e:f1:98:d1:26:85:4b:19:2f:b5:a9:3d:00:d9:d2:57:1d:
27:20:e6:62:4c:05:b3:2b:ed:ed:65:cd:07:4a:cb:44:1d:96:
27:4e:ad:fd:36:c9:50:e1:73:0c:50:da:f9:df:e6:a5:2d:a1:
8c:72:60:7c:bc:14:d7:f8:32:ca:c1:ad:ee:b7:5e:a2:c2:6e:
d6:54:0f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:33 2024 by rpki-client on console-ams.rpki-client.org