Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rUNtxoHL1ghDoD0nXpvJ6oHTWbE.roa
File: rUNtxoHL1ghDoD0nXpvJ6oHTWbE.roa (raw, json)
Hash identifier: yeAUXjbt4uCpQYgDquxS6S50f+lTsjtHCfGEZBs1/xo=
Subject key identifier: AD:43:6D:C6:81:CB:D6:08:43:A0:3D:27:5E:9B:C9:EA:81:D3:59:B1
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F158083162E26E600107FF6B2F81
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rUNtxoHL1ghDoD0nXpvJ6oHTWbE.roa
Signing time: Sun 01 Jan 2023 21:05:01 +0000
ROA not before: Sun 01 Jan 2023 21:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206167
IP address blocks: 193.233.165.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f1:58:08:31:62:e2:6e:60:01:07:ff:6b:2f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ad436dc681cbd60843a03d275e9bc9ea81d359b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:16:82:a8:12:93:db:c8:dd:8f:71:30:62:da:
f1:11:f5:fa:71:e4:aa:f1:19:65:ab:e9:64:c2:d5:
6b:08:1b:2a:ec:2d:a9:75:74:ce:80:39:e4:44:56:
07:2d:39:36:8f:13:c0:7e:8e:1b:f4:08:e2:b2:b1:
9b:7e:4c:16:eb:bc:93:7d:6f:38:71:9e:68:6e:89:
91:08:a9:97:b8:c7:ed:9c:4c:3f:a7:d0:38:81:a4:
c2:5d:b8:23:3d:89:03:6f:fe:70:e4:cc:e4:ab:f1:
6a:1d:80:9f:1b:60:68:0c:35:da:6d:c0:bc:be:ef:
6f:ad:cd:73:32:37:0f:4b:e1:64:c6:ea:0c:dc:bb:
38:3d:20:6d:b7:33:4f:54:bb:e1:c3:86:a8:c5:f5:
fb:03:a5:ab:fd:2b:f7:a2:b0:3a:74:78:a7:6d:63:
a2:67:2c:14:78:be:de:e4:57:cf:31:d2:c8:5f:24:
1e:e4:e6:f0:99:b8:8b:fc:31:27:e4:0d:db:28:8c:
f4:1e:6e:3d:f6:36:78:b0:1f:00:ce:59:28:10:37:
d5:48:5a:d0:00:10:32:06:28:fb:4e:cd:76:4b:ea:
14:f9:6c:bd:ec:c4:4e:ee:9e:4b:88:0f:b9:59:86:
15:c5:1d:de:d4:a5:bb:43:fa:40:70:c3:b2:65:af:
8d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:43:6D:C6:81:CB:D6:08:43:A0:3D:27:5E:9B:C9:EA:81:D3:59:B1
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/rUNtxoHL1ghDoD0nXpvJ6oHTWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.165.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:99:bf:24:ed:a1:03:e7:8e:16:8a:e5:53:92:f5:46:95:ea:
5a:55:c6:bd:db:58:5f:b0:93:cf:96:74:87:ee:25:ba:74:2b:
56:d7:f7:7f:ec:de:23:14:c6:49:d9:3f:36:52:38:f4:fd:2e:
cf:8c:6c:4c:d2:07:a4:27:03:59:33:b9:e6:e7:84:d1:19:17:
0a:a5:07:48:bd:9b:61:d7:1c:a5:7f:8e:b7:ab:c1:d2:51:ae:
01:65:54:03:e6:96:d3:93:7d:b1:28:0a:ed:c9:95:6a:5a:4a:
79:6e:4b:5f:e6:be:81:71:c3:0f:b1:3e:00:87:e1:a1:82:66:
b5:4c:01:58:90:42:1c:d2:04:0b:6a:be:3a:5a:2e:7c:c6:16:
08:0a:20:12:1d:cc:e3:68:58:ad:95:20:c4:f2:aa:c6:3e:71:
43:4b:e5:97:df:c0:06:75:ef:0e:e9:39:b4:68:cd:ef:b4:ab:
54:62:eb:85:29:22:47:56:dc:d2:80:00:9b:ad:5b:05:42:1e:
dd:c8:4e:35:bc:bf:bb:90:7b:30:ad:0e:c6:38:52:fa:ca:d4:
e8:0c:d5:53:17:ca:f6:c3:f1:35:3e:bd:bd:e2:08:d1:78:e1:
72:09:5a:d8:0e:ca:e3:52:cb:09:67:5a:b4:09:22:83:d9:c6:
f2:78:da:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org