Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8H8jBZHdjY2K76JxIh_-qyvLR5w.roa
File: 8H8jBZHdjY2K76JxIh_-qyvLR5w.roa (raw, json)
Hash identifier: J1eksRRWtY41eW5JriHxEl+MOB+a0nxqZRsOAUyPnIA=
Subject key identifier: F0:7F:23:05:91:DD:8D:8D:8A:EF:A2:71:22:1F:FE:AB:2B:CB:47:9C
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC7952FD3C4288C017D2FE29F04B6CC6E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8H8jBZHdjY2K76JxIh_-qyvLR5w.roa
Signing time: Tue 02 Jan 2024 00:31:32 +0000
ROA not before: Tue 02 Jan 2024 00:31:32 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 202423
IP address blocks: 193.233.31.0/24 maxlen: 24
193.233.149.0/24 maxlen: 24
193.233.174.0/24 maxlen: 24
193.233.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 16 Feb 2024 09:34:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:2f:d3:c4:28:8c:01:7d:2f:e2:9f:04:b6:cc:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:32 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f07f230591dd8d8d8aefa271221ffeab2bcb479c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:ce:9e:a1:b5:fd:29:4a:b8:f9:2d:de:9c:2a:
37:cf:37:4c:d6:15:15:2f:7a:43:30:bc:ec:bb:9a:
e7:1e:4d:f2:24:08:25:3e:f7:ce:fe:a3:10:a7:c6:
fc:73:f8:b3:20:7b:1d:0e:2f:ff:f1:db:2b:b8:4a:
24:c1:f9:fc:70:dd:ed:7b:ef:24:c4:3f:06:c5:d3:
21:96:9b:fc:2e:79:8c:da:84:ea:42:f7:f7:70:df:
a8:24:3a:2a:c1:e2:e2:8a:b9:ab:e9:16:8f:96:16:
55:43:7f:fc:08:52:22:cd:3b:55:0f:2b:50:f8:bf:
b6:92:6f:99:1f:a7:b5:42:7f:3d:be:be:ea:e5:da:
04:48:9d:52:e2:ec:9a:ad:81:d9:61:9a:fa:ad:d1:
46:ce:a7:55:5f:75:b2:dd:55:23:26:77:f4:59:ce:
8d:ae:b0:8c:cd:dd:37:dd:6c:b8:8a:a2:ab:a4:84:
4d:f8:d9:d5:50:aa:e8:ca:db:bf:86:7b:2f:79:f2:
97:2e:ee:0a:f7:69:45:60:7f:5d:af:9c:ac:16:06:
74:a7:c2:f4:a2:8c:ce:73:5d:f9:03:d0:23:c5:5d:
1d:81:f9:3a:51:96:0e:f5:9d:52:23:1f:ba:d0:cb:
40:02:09:a2:f2:00:4a:35:8d:1b:cb:eb:d0:80:e4:
cc:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:23:05:91:DD:8D:8D:8A:EF:A2:71:22:1F:FE:AB:2B:CB:47:9C
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/8H8jBZHdjY2K76JxIh_-qyvLR5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.31.0/24
193.233.72.0/24
193.233.149.0/24
193.233.174.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:39:60:53:cd:a6:bd:43:f4:bc:38:d2:ea:b1:da:9a:04:29:
1b:7c:eb:0a:3b:5c:fa:e8:df:69:70:90:71:d4:8f:8f:8b:8e:
0f:e8:5b:e6:7b:77:c5:c8:76:45:7e:6b:10:aa:02:19:ae:97:
e5:57:ec:75:28:52:28:91:a5:7e:4f:96:40:fc:97:1a:8a:ae:
a1:92:d2:f7:0d:ef:fa:87:ae:64:b3:5b:4a:22:af:d3:ac:ca:
86:51:56:14:f0:ae:c6:5e:2b:cd:ac:77:8b:1b:e0:e2:96:a5:
25:60:05:7f:30:95:0a:a1:62:c1:a4:b3:d9:2c:4a:29:48:a1:
13:a5:86:8b:92:5e:99:4c:29:88:7e:28:b8:a5:e4:fb:a4:6a:
96:b3:ad:3e:89:3a:ce:da:c3:68:fa:c6:5a:32:0c:83:e0:3c:
bf:4a:fa:9c:e2:5f:8f:49:a7:6d:ce:ff:b0:57:97:4a:08:af:
c5:1c:83:61:6d:84:61:ce:ca:18:3f:4d:b9:08:71:16:d6:0e:
e0:ad:37:00:19:a2:42:2b:a1:a9:6a:22:60:26:b7:58:1c:6f:
41:b6:57:39:b5:36:e6:c8:e3:0a:99:b0:db:5b:e7:57:6d:45:
6b:22:c6:77:44:db:c2:64:58:de:dd:53:81:ea:c6:3e:7e:5e:
83:61:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 16 14:45:39 2024 by rpki-client on console-fra.rpki-client.org