Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Z6w0_XrVxTpEL_RxcE4Tt5Z833Q.roa
File: Z6w0_XrVxTpEL_RxcE4Tt5Z833Q.roa (raw, json)
Hash identifier: nE6rtke5z14xViUDqk1xiL+HzpuvNIMLxKnsoXOG+lU=
Subject key identifier: 67:AC:34:FD:7A:D5:C5:3A:44:2F:F4:71:70:4E:13:B7:96:7C:DF:74
Certificate issuer: /CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Certificate serial: 0188BEF0F9AADB4A0DBEFC73CEF4075B931E
Authority key identifier: EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Z6w0_XrVxTpEL_RxcE4Tt5Z833Q.roa
Signing time: Thu 15 Jun 2023 12:04:03 +0000
ROA not before: Thu 15 Jun 2023 12:04:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8985
IP address blocks: 193.232.64.0/24 maxlen: 24
193.232.76.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 15 Jun 2023 13:12:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:f0:f9:aa:db:4a:0d:be:fc:73:ce:f4:07:5b:93:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef1c665b038692b93bdf5d1d8f3cea3e98697a03
Validity
Not Before: Jun 15 12:04:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67ac34fd7ad5c53a442ff471704e13b7967cdf74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:81:d8:90:3c:d3:17:6c:fd:1a:a9:25:53:e2:
06:d7:0a:ab:2b:96:59:03:b5:10:16:c8:ed:25:e7:
09:b3:2d:b3:42:9e:63:f2:44:cd:c6:0a:1c:9b:09:
d9:90:87:19:0f:8b:fe:a6:ba:48:77:d2:02:23:9e:
34:7c:3e:ca:dc:e2:17:22:3f:29:f2:00:6f:00:b3:
ef:44:4a:93:9f:74:db:a2:5c:56:ff:3b:5f:c6:78:
62:a6:43:4d:96:d5:16:ca:65:4e:d5:aa:0c:b7:13:
d0:7c:16:ec:2f:5b:e1:99:7e:67:6e:63:95:23:87:
59:f1:22:cf:92:85:8f:40:fb:55:b3:b0:c3:1d:be:
84:54:19:5c:18:97:a1:fc:6f:dc:13:ee:ef:f4:24:
73:98:88:ce:ab:18:49:18:ac:9b:e5:ab:ff:da:f8:
22:e7:11:85:ed:9b:98:b8:b5:45:1c:58:1c:4f:b7:
e8:53:42:e7:d3:ff:2f:36:6f:3a:ed:b0:f6:b9:45:
46:c2:12:f7:eb:cb:a1:32:76:be:23:b0:82:d4:84:
41:e3:d9:d9:7d:54:3b:02:2d:63:24:53:24:13:bf:
1c:9e:b5:33:34:69:81:5d:59:22:1e:3f:24:3b:5e:
09:d4:29:17:13:95:00:af:dc:b7:01:26:de:47:d5:
5c:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:AC:34:FD:7A:D5:C5:3A:44:2F:F4:71:70:4E:13:B7:96:7C:DF:74
X509v3 Authority Key Identifier:
keyid:EF:1C:66:5B:03:86:92:B9:3B:DF:5D:1D:8F:3C:EA:3E:98:69:7A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7xxmWwOGkrk7310djzzqPphpegM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/Z6w0_XrVxTpEL_RxcE4Tt5Z833Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/2925a3-871b-4676-ae10-688d333ed9d5/1/7xxmWwOGkrk7310djzzqPphpegM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.232.64.0/24
193.232.76.0/24
Signature Algorithm: sha256WithRSAEncryption
31:08:9d:f4:8e:a2:7c:3b:9e:5a:a1:3a:38:6f:7f:44:83:b4:
55:7b:1b:9b:c3:bd:cd:fa:3c:da:ce:63:56:cd:f3:b1:f3:06:
85:3c:b1:5f:23:cd:c5:83:23:8d:c9:83:9f:57:db:12:13:28:
3b:1f:f6:e4:ba:df:f6:4c:bd:24:2c:33:38:2f:3c:60:27:dc:
15:b5:ab:38:bc:c8:09:30:4a:32:fa:8e:cc:29:05:25:a2:25:
6b:e2:a5:ef:32:75:db:f5:ad:86:2b:77:72:66:4d:60:36:24:
cd:9a:1c:b8:2d:a3:53:89:c4:d7:6c:ea:d0:ef:bf:2d:5f:b6:
c3:b0:64:bc:f4:57:4b:5c:5e:e4:69:6a:c8:8f:c5:f7:b9:d2:
4c:01:51:2b:bf:a3:0e:a3:0d:e3:4b:d8:37:ae:7f:2a:b8:83:
a8:8f:12:18:31:9e:5e:15:be:78:3f:fd:0d:a3:b9:fc:3a:c5:
af:99:bd:c6:c6:c0:2a:5c:58:9f:b1:65:0e:40:06:27:a5:1f:
1f:03:dd:cb:a0:76:ce:07:52:1c:bb:90:37:10:89:47:06:cd:
33:03:48:b7:8c:54:15:d7:5c:79:6b:c3:70:66:79:65:44:26:
a0:cc:f0:85:37:2a:28:57:33:22:de:df:a5:6e:7d:ee:11:35:
af:12:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:51 2024 by rpki-client on console-fra.rpki-client.org