Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pYWyjyJfE92rQVZ8VcWLooQSce4.roa
File: pYWyjyJfE92rQVZ8VcWLooQSce4.roa (raw, json)
Hash identifier: Wr5RlbAaWG9k2ArpBVAR+2bc4vDXW2WhnkHOjJPa4QU=
Subject key identifier: A5:85:B2:8F:22:5F:13:DD:AB:41:56:7C:55:C5:8B:A2:84:12:71:EE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01863255C9C3586E3CECBBCC1D959F660B81
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pYWyjyJfE92rQVZ8VcWLooQSce4.roa
Signing time: Wed 08 Feb 2023 18:42:08 +0000
ROA not before: Wed 08 Feb 2023 18:42:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.112.0/22 maxlen: 22
193.233.108.0/22 maxlen: 22
193.233.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:32:55:c9:c3:58:6e:3c:ec:bb:cc:1d:95:9f:66:0b:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 8 18:42:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a585b28f225f13ddab41567c55c58ba2841271ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0d:3d:4a:63:c7:ea:e9:08:68:01:18:53:ee:
29:58:a6:00:f5:0d:a7:5d:24:e3:26:25:67:4e:dc:
ed:2c:cf:dc:a9:e3:6b:ba:7f:25:48:49:fb:9f:13:
e1:30:37:9e:89:2b:87:7e:9f:5d:0b:bb:aa:64:06:
e5:86:1b:fc:46:44:9d:75:44:99:d2:db:42:30:9e:
6f:e8:76:55:47:be:69:da:b0:86:24:e8:e7:79:91:
09:18:f8:b5:45:74:b7:74:24:f5:30:17:74:ef:de:
f2:76:01:7e:26:93:76:51:c3:c8:cd:08:8c:05:08:
64:3c:db:74:cd:89:be:31:46:40:1f:68:2b:94:d2:
56:10:96:5e:8b:73:9f:e9:c0:68:dc:e5:df:40:2c:
35:5b:9d:d0:0b:33:06:58:27:01:aa:f7:14:5b:12:
47:b4:3c:a5:2a:2b:d5:0e:1f:59:00:80:20:0d:f6:
5d:9a:af:55:b4:c2:0f:03:ee:7b:1d:95:8f:bd:ae:
8f:c9:21:4c:f7:9b:08:23:96:50:1d:af:c7:98:03:
a5:3e:45:a7:ea:46:46:94:a3:d8:e6:8e:2f:6b:f2:
75:38:9b:82:97:6d:53:7c:b3:84:b4:2a:c0:ea:15:
58:21:c4:73:29:fe:a6:2d:bd:f1:df:42:43:8e:47:
65:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:85:B2:8F:22:5F:13:DD:AB:41:56:7C:55:C5:8B:A2:84:12:71:EE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/pYWyjyJfE92rQVZ8VcWLooQSce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0-193.233.119.255
193.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:5d:23:2e:b8:90:0f:3e:5b:4c:b1:10:ad:dc:bc:52:1c:a3:
e6:1f:db:b0:4c:a0:bd:a8:aa:e8:af:64:f4:d5:d0:9e:b8:93:
57:06:de:3d:a9:f4:55:02:a6:f5:59:4f:fd:08:c4:b1:ce:95:
c6:63:3d:ee:0e:00:62:10:99:56:0b:b7:34:e4:0d:f7:70:f7:
40:4d:1c:f2:a0:f3:85:f5:ed:b0:30:8c:42:c2:10:d6:d0:e5:
ba:85:e3:06:b8:0a:5b:7a:c1:72:b2:83:60:97:45:f2:65:68:
f2:80:18:73:b3:15:9c:0d:59:35:20:ee:38:7b:e2:59:1d:6f:
a1:ba:4c:3d:af:93:d2:fc:ff:f8:99:12:9e:7f:6f:e0:4b:85:
ad:f4:6d:6d:cc:71:58:f3:b7:76:b7:24:68:f7:40:cf:6a:e6:
ef:e0:2b:df:aa:33:7e:d8:96:75:7b:23:a2:5d:29:ee:1e:6c:
3d:5b:b0:12:9e:c5:b1:41:32:ef:9c:5e:c8:2c:e2:06:ba:ce:
7f:d5:8e:32:ed:18:68:6a:18:64:1c:85:f1:c9:1a:bd:52:09:
b1:95:68:c6:c0:38:d6:56:32:48:eb:47:10:a5:0e:0d:24:d4:
61:7d:9c:b4:0e:be:8f:35:c7:8a:87:0d:50:0a:8c:33:09:14:
97:51:97:5a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-fra.rpki-client.org