Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/x7LVE_O7E_gulI3dokABtumymlY.roa
File: x7LVE_O7E_gulI3dokABtumymlY.roa (raw, json)
Hash identifier: GW6/NNZb+IKs95QMZF68Xe/gso2jcpz2uljxoeEAni0=
Subject key identifier: C7:B2:D5:13:F3:BB:13:F8:2E:94:8D:DD:A2:40:01:B6:E9:B2:9A:56
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26DA9205B2FE77E8AEF4C2FE4601E6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/x7LVE_O7E_gulI3dokABtumymlY.roa
Signing time: Sun 01 Jan 2023 21:04:55 +0000
ROA not before: Sun 01 Jan 2023 21:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 193.233.108.0/22 maxlen: 24
193.233.118.0/23 maxlen: 23
193.233.116.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:da:92:05:b2:fe:77:e8:ae:f4:c2:fe:46:01:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c7b2d513f3bb13f82e948ddda24001b6e9b29a56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:3a:8b:b0:70:f1:89:51:89:97:06:a7:f2:ca:
f7:69:72:c1:ce:76:93:71:4b:96:08:7e:47:92:0a:
b4:75:62:31:73:b0:52:15:77:28:9c:3d:1f:e4:12:
6c:ec:05:9a:7f:33:3f:d8:30:8a:34:2e:3f:fb:6b:
d6:b8:e7:b3:e2:ae:00:ed:73:85:a9:87:91:c4:5f:
fc:bf:04:dc:7f:76:24:bd:6b:8b:92:14:ac:19:4a:
a9:5d:75:8b:08:a3:7c:3b:4d:82:54:8e:6a:0c:10:
23:33:8f:4a:4b:5b:6b:4a:98:a3:2c:b5:78:6d:1d:
35:12:51:d8:7c:21:82:a2:77:c5:4e:bb:d9:c6:c9:
cd:af:4a:f6:aa:fe:d0:79:ca:77:02:7f:91:33:e8:
29:5e:f2:12:62:4f:25:46:33:2f:90:61:d5:79:39:
51:52:3a:fc:19:fb:c0:4d:ad:f2:ca:49:6e:64:2d:
45:d1:19:fe:d7:29:cd:83:d1:c3:1f:cb:2a:05:01:
1e:93:6e:42:71:95:e7:02:60:de:75:b4:0d:4f:01:
45:ce:75:30:5c:0b:eb:6a:61:24:32:29:e9:03:64:
39:8a:24:98:7d:73:86:ed:7f:cc:6e:53:44:9e:98:
e9:32:fc:c6:3e:32:c5:9e:50:01:b8:cf:cf:61:b4:
ad:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B2:D5:13:F3:BB:13:F8:2E:94:8D:DD:A2:40:01:B6:E9:B2:9A:56
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/x7LVE_O7E_gulI3dokABtumymlY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:83:07:06:d3:e0:7d:76:77:a6:d4:62:4f:18:7c:00:d7:75:
f6:32:8f:28:8b:c6:d2:e2:d6:d7:03:55:c5:5c:ed:b6:70:55:
13:0b:57:0e:7c:01:e0:66:12:54:e4:90:c0:c1:7e:e0:9f:0c:
55:ab:4c:08:a8:b1:a8:e7:0d:42:68:fd:c9:88:b1:58:91:c3:
6e:26:70:e7:92:09:00:87:7c:17:2d:53:b2:7d:86:8e:80:e4:
02:fd:a3:e9:51:3e:03:e0:d6:27:69:c0:10:96:39:1d:c6:6f:
c7:b8:f2:14:aa:36:3b:45:d0:ad:b1:69:0f:9f:00:4c:2f:5d:
9c:8f:6e:df:2f:87:f6:36:02:c8:5e:02:82:56:bc:da:c7:f5:
78:8f:ac:9b:11:15:7a:ca:35:c8:6f:50:8f:6b:34:e7:56:90:
f2:ea:4e:89:34:43:18:2d:52:b5:4e:e4:0f:e4:10:59:d4:d8:
f2:26:23:38:e5:23:26:62:be:36:fa:a6:8b:85:94:00:00:a6:
2d:3c:86:12:0a:f1:33:0c:70:e2:5f:1a:7e:99:a4:e8:5f:de:
a7:57:97:cb:02:99:a1:9a:11:d2:c3:9a:ec:76:93:24:55:94:
ff:2b:6e:6d:23:02:37:3d:58:23:28:bd:2a:71:e4:34:c3:b1:
c5:52:4d:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:21 2024 by rpki-client on console-ams.rpki-client.org