Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wBZpuLlmiAUpb4p2IgzAQAAyAJM.roa
File: wBZpuLlmiAUpb4p2IgzAQAAyAJM.roa (raw, json)
Hash identifier: 2AkHG+ezd6KDK9+3Ax3snVm7JsHXNTu3MJyQUbLhBSI=
Subject key identifier: C0:16:69:B8:B9:66:88:05:29:6F:8A:76:22:0C:C0:40:00:32:00:93
Certificate issuer: /CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Certificate serial: 01856D8AED6D12E5299F240B84C7077A6EF8
Authority key identifier: DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wBZpuLlmiAUpb4p2IgzAQAAyAJM.roa
Signing time: Sun 01 Jan 2023 13:34:59 +0000
ROA not before: Sun 01 Jan 2023 13:34:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198949
IP address blocks: 193.56.233.0/24 maxlen: 24
193.56.237.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:ed:6d:12:e5:29:9f:24:0b:84:c7:07:7a:6e:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc700b96e9a7a0f9db89bf5e18115b12a3ef1692
Validity
Not Before: Jan 1 13:34:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c01669b8b9668805296f8a76220cc04000320093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:bd:04:78:55:ac:4c:6a:c0:9a:c4:23:cd:32:
a3:66:e5:30:8d:2d:eb:3e:2f:4a:02:b5:c0:70:74:
ad:6a:53:11:33:b1:2b:61:d6:22:6c:d8:ac:02:37:
fd:a9:cc:91:96:3d:2b:8b:dd:ec:41:91:f6:0b:b9:
78:ee:d5:86:72:a7:6c:b3:22:b6:ad:ec:09:eb:f1:
1d:44:f3:a0:7d:ba:c4:a7:35:44:bc:35:92:e4:f6:
9e:c8:9a:7f:66:e6:43:67:46:6c:bc:b3:a1:d8:29:
03:ba:70:b2:41:27:b1:cf:8f:27:fe:24:63:45:15:
a9:52:5d:71:bf:fb:e4:53:93:e1:69:9d:aa:0a:df:
44:5d:d5:13:8d:1b:88:de:07:bd:96:65:29:e8:bd:
0c:a1:74:fd:6b:7e:78:54:b4:2f:99:1e:bb:5d:37:
75:9f:86:f3:0f:e9:85:31:42:65:17:42:2f:8c:10:
9f:79:4e:8a:21:51:2b:4b:e5:e7:a7:11:fd:4c:a1:
1b:13:e9:63:38:2e:bd:12:6c:ab:ae:ea:83:2c:ed:
74:01:f0:2d:d9:6e:a1:35:58:f0:b3:4e:ce:12:50:
69:c8:7b:e0:3f:3d:7a:b0:aa:18:06:2c:ce:cb:0f:
47:16:67:ad:fb:f0:4f:54:34:c4:3c:6b:e6:a3:64:
83:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:16:69:B8:B9:66:88:05:29:6F:8A:76:22:0C:C0:40:00:32:00:93
X509v3 Authority Key Identifier:
keyid:DC:70:0B:96:E9:A7:A0:F9:DB:89:BF:5E:18:11:5B:12:A3:EF:16:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3HALlumnoPnbib9eGBFbEqPvFpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/wBZpuLlmiAUpb4p2IgzAQAAyAJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3cedfe-026c-4d78-b8c8-525230e20681/1/3HALlumnoPnbib9eGBFbEqPvFpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.233.0/24
193.56.237.0/24
Signature Algorithm: sha256WithRSAEncryption
95:e2:83:05:62:e8:53:87:05:08:81:bc:0d:e7:89:77:a2:79:
d8:e9:5d:54:ab:f3:60:6a:ad:09:af:f5:c4:3d:20:83:e8:53:
27:e2:ba:c9:01:bd:c8:13:00:79:05:03:5d:4a:bc:12:11:b2:
44:ec:26:3a:5b:69:54:6d:da:c8:e0:5b:d7:4e:b5:53:cc:10:
fe:79:cc:0a:02:e9:12:63:11:cf:c0:1f:61:6f:9d:30:61:d3:
dd:86:d6:0a:b8:c2:ad:26:9a:a8:c1:be:ef:2e:e9:a0:5f:d0:
cf:d1:a6:d0:1a:0e:6b:40:72:77:4b:85:ea:78:83:c7:36:79:
94:b0:9f:a8:4b:aa:f4:43:5d:41:f2:55:d2:16:fb:57:4b:5e:
cb:21:1a:74:84:fa:ca:a1:09:7c:88:e7:df:6e:bc:4b:61:ff:
d4:73:c9:96:a8:44:79:d8:23:45:27:69:2b:0b:91:1d:6c:3a:
a1:de:bd:6d:3f:61:34:90:e1:3e:94:e0:23:b6:0c:ef:af:26:
19:c0:f4:cd:e4:a7:f9:ad:5d:68:e1:a9:32:e1:19:2d:8e:e4:
ee:2b:f1:1e:bc:fa:2d:aa:e2:94:10:05:7e:3e:85:df:b9:0f:
88:e2:6f:69:13:9c:30:4c:57:50:88:f8:bf:12:3a:e1:49:b9:
a8:9a:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:40:37 2024 by rpki-client on console-ams.rpki-client.org