Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/q2IeVHpLo6Sq3Az1Ex_0sJhurRU.roa
File: q2IeVHpLo6Sq3Az1Ex_0sJhurRU.roa (raw, json)
Hash identifier: 0t0p81oLpxcV6VOCswrasYzPqQ4iaE6eIbh8MGNY2qU=
Subject key identifier: AB:62:1E:54:7A:4B:A3:A4:AA:DC:0C:F5:13:1F:F4:B0:98:6E:AD:15
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0187BCFD7C83DE7505E36A823046345E11D7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/q2IeVHpLo6Sq3Az1Ex_0sJhurRU.roa
Signing time: Wed 26 Apr 2023 09:55:41 +0000
ROA not before: Wed 26 Apr 2023 09:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.112.0/22 maxlen: 22
193.233.108.0/22 maxlen: 22
193.233.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:fd:7c:83:de:75:05:e3:6a:82:30:46:34:5e:11:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 26 09:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ab621e547a4ba3a4aadc0cf5131ff4b0986ead15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:1a:c4:95:a3:ba:ee:b7:26:cf:e2:2a:ce:
f1:8f:9d:02:96:91:03:5b:83:da:2f:0b:d2:8a:e2:
89:69:13:38:23:bf:d4:44:a4:fc:dc:fe:b5:b5:d7:
07:b1:09:dc:27:f9:e2:39:c7:1d:63:3a:2f:26:20:
52:c0:7c:bc:b7:3a:a8:03:83:b9:a6:87:6b:96:72:
0d:79:40:9e:05:54:9d:fa:3e:ef:ca:9c:14:ba:5c:
14:c9:4d:f6:da:ea:c5:6c:30:56:4e:4c:46:75:db:
ee:2e:eb:6d:a1:0c:78:f3:05:fd:bd:f7:d8:fc:18:
b1:7c:91:8a:7b:39:07:e2:c2:d1:58:4a:72:ae:5f:
3a:79:47:12:5d:f8:07:23:be:1b:5d:ae:c3:fb:03:
66:83:47:a3:a8:65:89:87:50:b3:35:c5:b0:f6:50:
4d:6b:d1:a7:e8:f9:5e:57:02:50:46:be:c6:28:25:
55:c1:71:dc:a0:f8:27:6c:5c:d2:d6:6d:b8:f9:db:
12:5a:56:30:71:08:0c:32:07:2e:4b:b9:32:6a:40:
5a:8b:22:be:75:7d:72:3b:3e:39:0b:3f:94:be:f1:
19:9d:7b:ef:e8:4a:77:00:fc:ca:d4:95:81:12:c5:
2b:60:ae:89:f3:5d:12:ff:d4:9f:e9:28:d4:12:49:
06:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:62:1E:54:7A:4B:A3:A4:AA:DC:0C:F5:13:1F:F4:B0:98:6E:AD:15
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/q2IeVHpLo6Sq3Az1Ex_0sJhurRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0-193.233.119.255
193.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
79:35:8e:f4:86:f4:eb:be:05:b7:07:c1:4f:fd:74:1e:5b:60:
03:c9:f5:de:fa:57:b1:6a:a2:e9:00:1b:aa:66:63:dd:10:3b:
b2:19:84:9f:ce:25:7a:8e:73:4b:8d:cc:cb:24:4a:6f:2b:39:
d6:73:bb:f5:bf:e2:8c:1c:10:92:5b:25:d5:c8:87:0d:28:15:
1f:92:12:0b:1f:19:da:08:12:e3:91:d5:5e:5f:bc:a1:6a:3c:
2a:db:ec:a5:1e:74:5a:ad:00:b0:a4:54:2f:ab:95:fa:2b:67:
a3:e1:11:2c:37:ea:db:12:81:75:10:8d:9d:ef:e5:ff:03:14:
56:cd:9e:de:cd:b7:e4:af:19:90:03:d9:7a:b4:1c:c1:7f:91:
f3:14:39:15:c9:87:56:1b:a7:89:a9:5f:fe:34:8c:c4:25:04:
2d:9f:6b:00:62:a1:89:21:42:da:18:ab:10:79:fb:69:d3:b6:
ff:c7:64:b1:cd:a5:6f:60:b9:6e:14:13:bb:dd:4a:9c:ee:4a:
61:e1:10:da:f1:da:fb:fc:a5:88:0c:1e:c9:15:35:92:26:db:
27:77:39:54:d3:d2:c2:8a:dc:61:53:a4:9f:4d:a2:e9:d4:99:
c7:2c:d8:1c:a6:ae:9b:4d:85:60:54:fa:64:6a:f8:43:ba:c4:
02:88:5c:b9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Dec 2 11:16:57 2023 by rpki-client on console-fra.rpki-client.org