Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i6OpPCXYI3po3d9zq0dNOdfDLgY.roa
File: i6OpPCXYI3po3d9zq0dNOdfDLgY.roa (raw, json)
Hash identifier: sPU8bK3XRDzoVf7ArfUukXUjnxRGiDJutPKkOncUflo=
Subject key identifier: 8B:A3:A9:3C:25:D8:23:7A:68:DD:DF:73:AB:47:4D:39:D7:C3:2E:06
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018682B2B549DD32549C7572BAA9DC1E7EE8
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i6OpPCXYI3po3d9zq0dNOdfDLgY.roa
Signing time: Fri 24 Feb 2023 09:13:15 +0000
ROA not before: Fri 24 Feb 2023 09:13:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20626
IP address blocks: 193.235.236.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:82:b2:b5:49:dd:32:54:9c:75:72:ba:a9:dc:1e:7e:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Feb 24 09:13:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ba3a93c25d8237a68dddf73ab474d39d7c32e06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:c4:53:69:bc:b1:89:59:03:b3:cf:f2:81:1e:
31:ff:92:2c:f4:6c:ba:ee:b9:f2:63:21:2c:df:81:
bf:00:fd:c8:05:5e:15:c6:0f:d1:11:a7:ca:9c:ca:
19:f9:7d:36:4f:66:a6:6e:59:d6:9e:3b:be:cd:a4:
6e:41:9e:17:7b:61:75:dd:8c:fc:a8:f2:6c:a8:4d:
2f:76:29:15:33:c9:58:02:2b:e2:37:3f:bb:c2:06:
11:d6:ac:2f:88:89:fd:6d:2e:14:09:e1:54:4e:5a:
a4:a5:75:ae:08:d4:45:48:df:66:39:f2:a0:cf:d8:
89:f6:7f:1b:a9:28:e4:56:11:18:65:a3:3a:59:b7:
31:36:1f:35:12:28:12:bb:4f:ea:b9:de:3b:59:e0:
a4:1d:a8:5c:2a:b3:0e:85:98:e0:07:7a:95:9c:f4:
05:17:4f:24:3f:18:87:76:8d:05:b1:a8:40:ab:55:
96:95:ae:fa:f5:ea:0f:73:04:52:d6:9d:4d:b1:54:
45:d9:6f:b7:32:d6:9e:7d:38:5f:f1:bf:9b:e4:d3:
fd:fc:72:0b:66:eb:05:cc:20:7a:55:f2:ba:b1:5c:
33:c1:45:7f:0c:ce:c5:ef:94:0a:9c:2e:a8:79:65:
3d:06:41:34:07:88:a8:4c:e1:dc:b0:5e:bc:d5:07:
85:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:A3:A9:3C:25:D8:23:7A:68:DD:DF:73:AB:47:4D:39:D7:C3:2E:06
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/i6OpPCXYI3po3d9zq0dNOdfDLgY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.235.236.0/24
Signature Algorithm: sha256WithRSAEncryption
88:1a:c2:71:e9:31:0d:93:3e:38:4c:35:7a:80:6f:98:02:84:
8d:f7:69:e9:dd:6e:f4:25:16:65:ef:9b:2c:20:af:b4:c6:de:
31:1f:56:c3:01:90:b1:96:e4:8d:56:82:3a:c7:c0:22:fb:42:
e7:f3:44:24:b2:a2:39:ed:17:ff:e5:3d:91:8f:1f:63:36:c3:
cf:2e:9a:e1:11:4d:fe:bb:83:39:65:e3:49:89:1c:a2:31:4c:
3f:dc:b2:54:b5:c3:89:c6:c8:f7:8f:a4:b3:de:cf:e7:c6:bd:
ff:d6:aa:69:0f:c8:7e:f6:dc:6e:a8:9e:d5:44:11:76:b9:fd:
02:9a:7e:7a:49:58:92:ec:b8:d2:65:b0:09:c2:7f:8b:8e:21:
79:e8:47:0f:ce:98:74:59:f9:a7:4c:e6:2a:be:4e:3a:ce:3a:
3c:58:eb:66:cd:bb:f5:0a:1f:0e:ee:fc:86:16:7f:4f:e3:d2:
66:f2:88:fa:9c:ad:bd:d9:de:bc:14:22:b9:09:b6:da:dd:ea:
95:6a:30:ad:11:cb:5b:34:b6:e9:74:d5:ac:e0:1d:82:ea:e2:
87:8d:15:f4:21:d3:65:4e:ed:20:aa:4c:7f:8a:75:42:fb:e8:
64:39:4d:81:2d:1d:73:7e:3f:b8:d8:5d:10:b7:30:d1:43:65:
f8:23:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org