Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wCcxv3-auBYJ2gRRAuDIugVJxu0.roa
File: wCcxv3-auBYJ2gRRAuDIugVJxu0.roa (raw, json)
Hash identifier: s3io6lDdm4djSTjcZcGRuYn7sCktzLwowgY2uYuD6LI=
Subject key identifier: C0:27:31:BF:7F:9A:B8:16:09:DA:04:51:02:E0:C8:BA:05:49:C6:ED
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26F75AA7E937887E6F3C7DD70B0EDA
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wCcxv3-auBYJ2gRRAuDIugVJxu0.roa
Signing time: Sun 01 Jan 2023 21:05:02 +0000
ROA not before: Sun 01 Jan 2023 21:05:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 398343
IP address blocks: 193.233.84.0/24 maxlen: 24
193.233.204.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:f7:5a:a7:e9:37:88:7e:6f:3c:7d:d7:0b:0e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:05:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c02731bf7f9ab81609da045102e0c8ba0549c6ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6a:c7:1b:c3:1d:a0:a6:03:25:75:36:91:26:
34:92:22:46:60:81:4e:a8:db:e5:96:8f:c1:50:a8:
4b:b4:86:34:e9:b2:30:41:ce:51:91:52:cc:ef:bc:
ef:65:d6:fc:2a:39:7a:e7:e9:d5:8e:7a:c1:03:2a:
f7:3a:6e:a3:d0:7a:7c:0f:e2:46:2d:ec:1a:1d:37:
d1:4a:5c:d3:68:93:6d:9c:b5:89:3f:27:3c:a2:2a:
af:2a:e5:7f:e7:89:15:ad:90:13:07:e9:a7:e6:21:
5b:53:06:44:8a:cd:25:f6:b1:76:55:bc:8d:eb:fa:
0e:8e:a5:68:09:5c:c0:57:82:a2:2a:a0:72:0b:3a:
ec:77:f8:17:02:c6:f6:23:ab:0f:e8:dd:da:f1:16:
d5:31:8b:08:1b:76:e7:d6:08:a2:72:1f:65:8a:83:
e0:ad:e6:ee:b8:e0:63:bf:96:1d:f1:60:5e:46:93:
b9:04:c5:23:3c:7b:69:40:eb:12:8a:50:fa:eb:5c:
ee:55:fe:33:84:3b:38:82:c9:4a:cb:06:e2:a5:f3:
4c:40:5c:06:31:0b:b4:b5:f2:ea:73:68:69:6b:ae:
88:8f:93:47:3b:dd:0e:b8:b3:81:8e:fb:cb:60:15:
4b:3a:24:09:0b:86:3f:ca:46:f4:fb:bf:51:94:1c:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:27:31:BF:7F:9A:B8:16:09:DA:04:51:02:E0:C8:BA:05:49:C6:ED
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wCcxv3-auBYJ2gRRAuDIugVJxu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.84.0/24
193.233.204.0/22
Signature Algorithm: sha256WithRSAEncryption
4e:6e:6d:e1:5c:21:f3:44:1d:a4:4d:a2:07:84:fd:59:64:51:
c4:a6:db:0b:40:93:e5:33:bd:7f:47:55:21:82:25:8b:9c:af:
28:aa:d4:a4:5d:04:a7:13:f5:75:28:bc:8b:18:00:63:6a:90:
ee:e1:f5:fa:ad:74:a7:28:dd:84:d1:af:e3:21:0d:16:47:19:
07:5a:8f:cc:22:70:de:b1:46:2a:e4:53:1c:f3:21:7a:05:21:
d0:d1:85:4b:c2:e6:c1:42:a6:9c:02:ed:e9:12:b8:e0:37:79:
29:b4:8c:5e:ca:ec:8f:4f:5a:f1:3e:d4:97:d5:36:da:8e:6f:
04:a2:85:2e:52:c5:e9:92:05:e4:2b:11:c5:9c:ba:2a:c4:78:
ce:42:21:23:43:f7:ac:d7:61:46:e5:8c:a6:29:4f:52:62:68:
da:a4:1e:ae:71:13:ec:f5:34:bd:aa:be:81:5a:b8:49:58:e8:
ef:66:46:9e:7c:95:09:72:2b:69:33:74:3c:18:92:e8:c7:77:
c6:5e:44:f1:63:98:b3:de:2f:f3:1c:c9:58:5b:3c:43:51:c3:
4a:17:0c:b5:78:10:1b:cb:56:d6:57:2a:e3:64:5c:39:e2:b6:
5b:a9:ef:45:5d:5c:f0:b9:c8:eb:fc:fc:8a:d2:74:c1:8d:52:
0b:e2:49:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org