Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/DDSgX1pc_UuyxZ9QifY3toCw7GI.roa
File: DDSgX1pc_UuyxZ9QifY3toCw7GI.roa (raw, json)
Hash identifier: VQTzs+MxLO+EQIO3iwyz0L5GBadPHLhCBWNqphgBWUw=
Subject key identifier: 0C:34:A0:5F:5A:5C:FD:4B:B2:C5:9F:50:89:F6:37:B6:80:B0:EC:62
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CDF030D2A813C57327C4CD1FA750570F7
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/DDSgX1pc_UuyxZ9QifY3toCw7GI.roa
Signing time: Sat 06 Jan 2024 13:42:48 +0000
ROA not before: Sat 06 Jan 2024 13:42:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 193.233.16.0/24 maxlen: 24
147.45.65.0/24 maxlen: 24
193.233.234.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
193.233.171.0/24 maxlen: 24
193.233.197.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 11 Jan 2024 12:51:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:df:03:0d:2a:81:3c:57:32:7c:4c:d1:fa:75:05:70:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 6 13:42:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0c34a05f5a5cfd4bb2c59f5089f637b680b0ec62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:a6:8d:70:54:85:e9:23:51:1e:68:7a:14:ad:
a7:9f:64:3e:8b:5a:b3:27:31:1a:d9:23:b5:71:62:
ce:5a:9b:e1:b0:ce:bf:88:e0:3a:81:bc:6a:de:a2:
ff:c0:08:e0:33:9c:f6:af:a9:11:c4:f6:bf:9d:88:
5d:2e:67:48:b7:eb:ce:e3:8c:8b:41:b8:90:47:d1:
2c:6b:de:34:00:e7:ad:8f:fd:5e:a0:22:09:87:1b:
91:ba:21:6e:75:2a:53:d1:17:1b:20:d4:b0:c5:3f:
28:a6:9d:d5:7e:72:fc:a3:e6:7a:f5:0c:55:82:87:
36:72:72:8b:93:37:0c:f6:6f:dd:21:40:7b:7e:c9:
51:9e:c1:1c:7a:a8:bc:4c:d2:09:81:65:a8:bd:51:
a9:0a:24:38:5f:0d:be:75:9a:c3:15:79:74:be:a3:
d9:42:11:ac:c3:d4:5c:cc:86:97:5f:eb:5f:20:8f:
de:41:f4:1f:37:96:66:ac:98:5d:06:6f:5c:af:bd:
df:e0:26:ab:8f:ab:8b:f5:a6:37:6f:e8:81:9c:d6:
e1:d4:4a:fa:bc:1a:5d:02:13:62:25:ab:5d:8b:29:
15:88:f1:11:59:2d:d6:40:04:3d:83:ad:2c:9d:1a:
83:3e:80:1e:73:61:9c:63:64:44:29:50:0a:fc:3d:
f6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:34:A0:5F:5A:5C:FD:4B:B2:C5:9F:50:89:F6:37:B6:80:B0:EC:62
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/DDSgX1pc_UuyxZ9QifY3toCw7GI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.65.0/24
193.233.16.0/24
193.233.61.0/24
193.233.171.0/24
193.233.197.0/24
193.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
69:9d:24:3c:6f:8f:ea:b8:f4:8e:2a:4c:bd:52:34:37:0d:ed:
c3:dd:1d:00:e7:93:6a:64:b1:e1:aa:f3:a3:25:e4:38:6b:ee:
e0:7e:9d:50:06:3b:26:75:14:1d:6c:2a:60:b7:05:9b:18:b3:
55:30:f7:4a:01:92:8e:ac:c4:70:db:c9:d9:21:a3:74:e8:48:
1e:5d:3b:69:10:66:6b:e8:ae:a8:1d:1d:b9:5e:5e:d8:8c:b3:
23:4d:8c:cb:2b:dd:8b:9e:05:1b:04:2a:f6:a2:5a:7f:e1:c6:
87:4d:61:e4:67:26:87:f4:db:db:c3:fd:32:4a:19:53:06:47:
84:66:91:af:07:37:e4:c5:c7:eb:c6:c0:52:eb:36:01:50:d8:
32:0d:df:8e:2f:2e:23:4f:7b:c3:13:00:06:dc:29:9d:d4:f5:
c4:28:e2:28:63:c4:83:b1:3b:55:d1:a1:36:1e:2a:e5:73:7a:
96:fb:87:8f:d4:c3:e5:a5:f3:ed:a3:b3:bd:01:4f:4c:b1:81:
9f:a4:09:d3:22:10:fd:3b:8e:43:7f:90:4c:67:f5:f5:f2:3d:
a9:ff:c6:d1:fa:e2:12:5a:26:ae:a4:62:af:43:af:5c:1f:0c:
30:eb:f5:76:e7:92:4d:a6:41:68:ce:31:6e:19:9e:03:c8:93:
02:c6:50:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jan 11 18:10:21 2024 by rpki-client on console-fra.rpki-client.org