Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYiTDlvMxZuu7tseOBS7o-gInuk.roa
File: sYiTDlvMxZuu7tseOBS7o-gInuk.roa (raw, json)
Hash identifier: Q2GVi9fHtT8IqabZ1kJKtuijYqy8/mpeinD8Byz/ys0=
Subject key identifier: B1:88:93:0E:5B:CC:C5:9B:AE:EE:DB:1E:38:14:BB:A3:E8:08:9E:E9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26ED479B4D1B3F726DE977321036DE
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYiTDlvMxZuu7tseOBS7o-gInuk.roa
Signing time: Sun 01 Jan 2023 21:05:00 +0000
ROA not before: Sun 01 Jan 2023 21:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203337
IP address blocks: 193.233.158.0/24 maxlen: 24
193.233.157.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:ed:47:9b:4d:1b:3f:72:6d:e9:77:32:10:36:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b188930e5bccc59baeeedb1e3814bba3e8089ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:41:5c:b6:45:4d:e0:9f:32:99:f2:b8:b0:ff:
5a:14:df:66:c9:a0:41:ad:ba:dd:03:5d:5c:25:aa:
95:b9:dd:06:d2:04:7d:f6:97:4c:34:97:87:14:20:
e9:00:e7:b6:f1:f8:0f:91:8a:86:b3:e4:51:54:12:
a7:ed:a2:fc:36:ac:b5:9a:f2:d1:99:fc:69:56:32:
83:e5:38:f0:93:45:ae:70:bc:16:5b:bb:4f:11:61:
21:a1:df:a9:eb:85:4f:9b:7e:0a:27:2f:07:36:d4:
52:d3:7c:26:07:90:60:1d:39:cf:df:aa:0e:09:13:
07:ee:33:86:12:c5:2f:5b:65:fa:a2:d3:df:88:d3:
e0:2c:73:86:90:cc:95:ab:74:bb:2c:14:8c:9f:e6:
87:84:fb:83:e9:ee:5d:37:73:d0:33:b1:0a:b2:37:
c5:f0:6d:89:08:8b:cd:36:ca:59:36:1e:91:47:c4:
cf:79:9f:9a:51:75:e0:4d:15:53:70:67:17:6d:b7:
bf:e6:8e:ac:eb:82:c4:88:65:0f:c5:78:23:9d:31:
34:c7:29:2a:50:d0:ae:de:9f:99:e6:12:7d:5e:97:
e4:92:f6:3e:f9:bb:e5:ea:fe:7d:4c:93:fd:04:f8:
96:94:66:0b:da:aa:ec:7d:e1:cb:ff:4a:72:8f:0d:
1e:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:88:93:0E:5B:CC:C5:9B:AE:EE:DB:1E:38:14:BB:A3:E8:08:9E:E9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/sYiTDlvMxZuu7tseOBS7o-gInuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.157.0-193.233.158.255
Signature Algorithm: sha256WithRSAEncryption
7c:15:5c:95:15:20:b8:f5:04:0a:a6:52:e5:cc:e4:8b:73:87:
97:d3:f7:35:b5:ea:23:82:66:8f:c6:5c:a0:7f:05:2b:00:e1:
5c:58:77:64:56:63:a3:d1:98:bd:b1:03:a0:c7:96:61:85:e7:
3c:30:e8:b9:e5:26:52:40:f8:99:59:d7:88:cf:8a:e6:51:c0:
06:bb:3d:75:a5:62:b6:b7:cf:04:f0:a2:76:3b:36:e2:1c:d9:
7f:89:30:f3:af:20:af:66:3a:17:d1:50:16:3b:3f:8c:8b:fd:
fa:32:22:60:1d:27:5a:c0:75:bb:6b:df:4b:3f:9d:44:26:63:
dd:36:f6:04:cc:f7:1a:ae:e3:9b:5b:4a:6e:ec:fa:3c:2f:e6:
cd:e5:56:49:36:ac:7b:7b:f1:00:b9:ab:e8:1d:3d:2d:98:71:
77:12:bb:9d:66:65:fd:4c:d6:35:1a:2f:c7:72:05:f3:d6:f7:
15:0e:bf:57:3b:3b:db:8e:68:72:0d:c9:11:0d:c0:e2:d4:ad:
5c:e0:d9:49:c6:67:6b:4a:37:50:36:c4:bd:b3:b2:96:69:f9:
e6:2b:bf:96:60:df:79:76:8a:d6:15:d2:93:12:d2:0c:2c:b6:
46:7c:ed:35:27:79:1e:85:64:d9:4d:04:4e:24:9a:e0:14:f9:
f8:f3:45:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org