Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OnD1xtn2jWuwhZT4o0tNt0w-v6Q.roa
File: OnD1xtn2jWuwhZT4o0tNt0w-v6Q.roa (raw, json)
Hash identifier: CKD5bGeeUPvBM5/AWgqAVBiR/+u5Fdc7CVz9GGQeBYk=
Subject key identifier: 3A:70:F5:C6:D9:F6:8D:6B:B0:85:94:F8:A3:4B:4D:B7:4C:3E:BF:A4
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018B637ECCA1DB21DF79E5CAB67C977E2CD9
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OnD1xtn2jWuwhZT4o0tNt0w-v6Q.roa
Signing time: Tue 24 Oct 2023 21:02:16 +0000
ROA not before: Tue 24 Oct 2023 21:02:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2895
IP address blocks: 185.103.100.0/22 maxlen: 22
147.45.194.0/23 maxlen: 23
147.45.0.0/19 maxlen: 19
147.45.0.0/16 maxlen: 16
147.45.32.0/23 maxlen: 23
193.233.4.0/24 maxlen: 24
193.233.0.0/22 maxlen: 22
147.45.64.0/24 maxlen: 24
193.233.10.0/23 maxlen: 23
193.233.8.0/24 maxlen: 24
2001:640::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:63:7e:cc:a1:db:21:df:79:e5:ca:b6:7c:97:7e:2c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Oct 24 21:02:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3a70f5c6d9f68d6bb08594f8a34b4db74c3ebfa4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b2:9d:50:33:38:85:11:0b:0e:6f:96:fb:4c:
e2:c5:b2:6a:be:4e:1f:a0:5f:ab:00:c1:c6:99:d0:
da:a1:ad:38:6d:ef:8e:9e:30:67:a6:76:3b:8e:f9:
b0:f5:5e:a0:e2:bf:42:5e:6c:05:70:96:e4:61:5a:
3c:5a:9e:8c:2f:f1:90:19:83:7d:df:ab:0f:2c:a2:
84:42:38:c0:8c:60:d7:85:c8:6d:eb:ef:d2:ba:8c:
d4:e1:de:c3:38:ee:4e:80:54:0b:58:b8:28:c1:a6:
04:f9:bf:b9:84:8d:bd:2e:10:63:91:c5:7f:5d:a2:
d4:58:b8:d2:45:71:48:d4:2c:a7:24:b0:1c:de:3d:
61:3b:ab:f3:66:45:ea:8d:80:1d:91:00:cc:53:44:
51:37:42:fc:fb:d3:21:e6:22:ec:79:a4:ea:85:4c:
b1:c6:30:9d:76:4e:53:7d:ad:76:e1:09:ba:6a:5c:
93:4e:e2:ad:55:09:07:e9:d4:74:3c:05:87:14:0d:
82:03:cb:89:dc:ec:b6:0f:70:85:1a:7d:ad:ad:85:
e3:23:ad:c1:7f:28:28:46:56:6c:3f:d6:16:87:8c:
a4:f5:9d:d3:de:ba:d2:19:bd:5a:ea:23:cb:d3:58:
95:54:65:7d:40:4c:19:b2:c5:b0:af:43:2c:b3:82:
8a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:70:F5:C6:D9:F6:8D:6B:B0:85:94:F8:A3:4B:4D:B7:4C:3E:BF:A4
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/OnD1xtn2jWuwhZT4o0tNt0w-v6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.0.0/16
185.103.100.0/22
193.233.0.0-193.233.4.255
193.233.8.0/24
193.233.10.0/23
IPv6:
2001:640::/32
Signature Algorithm: sha256WithRSAEncryption
06:fd:f6:83:fb:b6:8f:10:8c:41:dd:ba:6c:b0:9a:f5:89:45:
11:e7:79:af:b0:74:04:b8:4e:90:83:8c:84:e8:c2:e3:5c:6e:
85:d7:ee:5b:9f:6b:b4:0d:78:1c:07:bd:c3:a3:b6:e1:21:8a:
2c:49:89:74:72:30:82:5f:6e:46:1e:b7:50:e5:c9:5d:b8:3b:
02:d5:f8:b9:df:3f:df:8e:d2:4a:18:db:bf:d8:b8:b1:9e:0b:
9a:a4:e9:54:02:fa:b4:6d:57:7e:97:3d:8c:f0:46:9d:aa:08:
f0:62:bb:11:9b:7e:b3:b8:b0:0e:32:1f:22:28:00:fa:85:71:
c9:77:84:cc:df:22:0a:d0:87:42:53:b1:08:e6:73:be:1d:b7:
4e:3b:13:7d:ed:d5:54:f2:3a:3a:08:ea:cc:e6:22:cb:af:f3:
4a:d6:e8:9b:6a:33:a6:24:1d:df:fa:9b:11:b3:69:07:43:ca:
fe:e2:bd:7c:b2:f8:fe:24:52:5f:e4:44:b2:5f:eb:04:7d:49:
ba:39:50:c9:8a:05:fd:29:53:ce:87:10:86:d7:16:3e:30:a2:
0a:de:36:c0:eb:7c:97:be:bc:43:d4:54:1c:66:12:67:06:19:
d2:95:d7:17:05:3d:3c:4a:19:2a:2a:7b:e9:b6:c1:9a:f5:e7:
52:70:9a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 10:27:08 2023 by rpki-client on console-fra.rpki-client.org