Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wqZflOtlvK-xi2_H3oBQFD47-9k.roa
File: wqZflOtlvK-xi2_H3oBQFD47-9k.roa (raw, json)
Hash identifier: 5vGe0swPs/BU0oivz8A7cNtJoKOKU6kodHhxWpNctIE=
Subject key identifier: C2:A6:5F:94:EB:65:BC:AF:B1:8B:6F:C7:DE:80:50:14:3E:3B:FB:D9
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01874C2263F4F5A65AA89D695F9FD3607492
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wqZflOtlvK-xi2_H3oBQFD47-9k.roa
Signing time: Tue 04 Apr 2023 11:58:54 +0000
ROA not before: Tue 04 Apr 2023 11:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207883
IP address blocks: 193.233.236.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4c:22:63:f4:f5:a6:5a:a8:9d:69:5f:9f:d3:60:74:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 4 11:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2a65f94eb65bcafb18b6fc7de8050143e3bfbd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:d7:ad:41:72:92:d0:9d:8e:0d:cc:96:a9:af:
ce:72:bf:9d:5f:77:cb:3a:2b:71:2c:bc:bf:3c:19:
17:8e:9d:65:5f:11:e0:21:ec:59:ca:79:a0:54:4b:
f8:51:e1:c9:0d:1e:e3:35:9c:76:94:26:f6:5d:30:
94:18:e2:c6:46:56:9b:44:f8:f0:b2:8e:97:b7:00:
2b:4f:b3:14:06:c1:66:04:99:a1:d9:ca:72:47:7f:
5c:e6:fd:09:f4:5a:7c:86:be:dd:f0:94:ee:6d:5c:
a3:b5:97:ee:cd:3f:e5:b0:55:e8:bb:7d:3c:8b:6f:
4e:9f:6a:36:82:96:fc:a2:2e:b7:01:7a:fc:4d:d7:
f2:85:c6:3f:98:e9:f5:88:ca:3a:db:4b:cb:8d:97:
0b:c0:24:f6:54:56:e6:d8:db:a2:1e:44:6c:3a:9d:
a8:da:e4:76:b3:b5:a9:6c:4e:fb:29:c6:5b:a5:a7:
45:1a:99:80:49:3d:31:0b:38:98:48:66:b8:1d:c8:
54:9c:aa:6a:e9:23:59:ca:e9:63:fd:a1:e9:0c:14:
67:8c:65:71:61:25:55:41:f6:6a:b5:a1:1c:79:96:
58:85:6d:2b:6f:08:59:ec:32:97:c5:98:39:5a:b6:
20:e5:df:0e:8f:b0:03:86:0f:11:af:b9:74:e8:17:
f7:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A6:5F:94:EB:65:BC:AF:B1:8B:6F:C7:DE:80:50:14:3E:3B:FB:D9
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/wqZflOtlvK-xi2_H3oBQFD47-9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.236.0/22
Signature Algorithm: sha256WithRSAEncryption
75:13:ec:c1:a9:3e:99:01:35:af:4c:51:8e:f1:67:5e:85:64:
b0:e3:62:62:90:3e:cc:35:f7:c5:07:2d:75:38:ac:3c:8c:bf:
a0:77:9c:41:db:19:e2:c0:d5:cf:98:f6:58:4a:57:6e:23:e6:
05:1f:8e:4a:52:73:b2:40:0c:5d:52:53:6d:ff:4d:d2:69:4d:
23:89:a6:2b:5d:37:41:90:95:3c:c7:46:48:b3:fb:e2:41:0b:
6a:d7:18:67:08:b2:dd:7c:fd:dc:a7:30:db:3f:ff:9b:1c:d2:
66:e9:7f:78:98:52:ee:ca:dd:d0:85:4f:15:50:3d:57:2f:8f:
84:a1:4a:f8:1e:6c:a2:db:cf:a2:72:66:53:e7:af:88:ff:06:
74:51:84:2e:8e:f2:49:61:70:d8:ea:32:2c:31:95:9d:d4:7a:
4f:41:75:3c:33:86:10:1e:33:4f:69:a7:4a:9f:df:0f:24:84:
7d:07:b8:a0:d7:05:0d:96:5a:5e:64:07:ca:78:36:80:0d:60:
53:eb:c9:ab:2c:d8:f8:44:73:64:97:c4:0e:15:83:27:32:fe:
42:07:a6:66:4f:38:e9:32:b7:55:71:1c:72:1a:a7:68:3e:e3:
aa:bb:1f:92:fa:50:52:88:e6:14:9c:d3:39:bb:8f:40:20:66:
4f:38:99:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:39 2023 by rpki-client on console-fra.rpki-client.org