Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GhhbulW66BiqMurWpijRA8erlzU.roa
File: GhhbulW66BiqMurWpijRA8erlzU.roa (raw, json)
Hash identifier: FYNaCBEVc7kiCE7gGItTaKUrutqFxrY7dqc8aheSHO4=
Subject key identifier: 1A:18:5B:BA:55:BA:E8:18:AA:32:EA:D6:A6:28:D1:03:C7:AB:97:35
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 019176135226CCB6EA99E9F459CC35793C45
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GhhbulW66BiqMurWpijRA8erlzU.roa
Signing time: Wed 21 Aug 2024 17:54:23 +0000
ROA not before: Wed 21 Aug 2024 17:54:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43444
IP address blocks: 193.233.128.0/22 maxlen: 22
193.233.216.0/22 maxlen: 22
193.233.220.0/23 maxlen: 23
193.233.222.0/23 maxlen: 23
Validation: Failed, certificate revoked on Fri 23 Aug 2024 06:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:76:13:52:26:cc:b6:ea:99:e9:f4:59:cc:35:79:3c:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Aug 21 17:54:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a185bba55bae818aa32ead6a628d103c7ab9735
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:7b:01:76:3f:b7:9e:e7:11:39:b6:2b:7a:f6:
ba:a3:ce:45:fd:98:e8:58:96:e1:19:7c:86:5d:78:
03:dd:1d:8b:b3:25:3e:0c:4a:6f:db:28:1a:61:8a:
a4:89:c0:32:70:38:8b:52:7d:4c:53:94:59:55:f7:
67:ee:5f:cd:d4:e5:cc:b8:b0:ec:aa:57:b7:a6:3d:
ed:30:df:7e:45:0f:be:18:5a:b9:c2:6f:92:de:58:
c8:fb:7e:ec:b9:2c:32:79:eb:69:23:1a:e7:19:9f:
72:72:57:68:6b:3e:e5:ed:29:22:37:45:79:95:33:
79:71:0f:cb:ad:c2:9d:b8:09:9e:65:4e:af:35:2e:
85:44:70:8b:aa:56:69:d3:6c:35:75:a3:ff:dc:1b:
d1:45:32:34:85:a6:12:6d:d9:9e:44:53:b2:3d:85:
81:cf:f7:96:9a:5b:25:c1:7c:26:1f:f5:3d:84:3c:
b7:5c:0a:d7:2e:8f:b2:c8:11:bf:10:80:61:b5:c8:
ef:32:a4:7c:93:e5:f5:49:53:67:90:4c:7e:74:b2:
70:c5:09:70:b3:c0:34:2d:3f:1c:3b:5c:e4:2d:60:
85:9e:f6:11:45:68:8f:7a:53:ef:12:2b:72:63:20:
07:88:b7:a5:52:b8:4c:ca:c2:70:41:0d:73:0e:99:
33:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:18:5B:BA:55:BA:E8:18:AA:32:EA:D6:A6:28:D1:03:C7:AB:97:35
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/GhhbulW66BiqMurWpijRA8erlzU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.128.0/22
193.233.216.0/21
Signature Algorithm: sha256WithRSAEncryption
75:29:67:cf:21:ef:d6:3b:1e:12:08:e8:a2:00:00:0a:36:2f:
5c:33:9a:f0:a3:4f:45:fd:87:cd:b4:08:2b:4c:f0:69:04:bd:
c1:e6:0b:36:37:5b:d9:a6:fc:05:a8:cd:0e:73:21:a1:6b:d0:
80:f6:d2:54:fd:c7:00:c1:54:37:86:1f:1a:5a:bf:69:a5:3d:
5e:3b:ad:9e:b8:bd:59:db:c9:53:8c:e0:91:e5:c3:92:78:72:
60:59:d6:d0:ec:2b:94:b6:af:1c:42:6d:c2:89:51:11:db:3f:
1f:35:54:c9:74:fb:f3:27:e4:b9:13:59:2d:5f:fa:24:10:e1:
8d:4a:d8:11:85:2e:ae:81:d0:e9:d7:43:64:dd:b9:40:a5:15:
57:61:c1:59:09:8f:a6:ef:40:47:b6:3c:c5:ec:a5:14:ff:be:
5f:eb:38:93:d6:49:a6:94:f6:c6:e8:f8:e0:07:6e:15:71:db:
11:8a:d8:06:26:67:d2:7f:e3:26:06:96:ab:7a:0f:30:51:7b:
93:c5:57:b1:4a:e6:95:80:bc:05:13:15:96:07:76:f4:2e:f5:
fe:dd:ca:55:23:b8:b9:eb:5b:41:59:e3:84:7d:96:29:22:a3:
4d:80:5a:ff:ee:64:cf:01:b0:b8:1f:7f:68:27:ca:ff:35:fc:
2b:b5:7c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 23 07:45:54 2024 by rpki-client on console-fra.rpki-client.org