Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SP9FnVJ_aCftSk-hjZHdgXH7HAU.roa
File: SP9FnVJ_aCftSk-hjZHdgXH7HAU.roa (raw, json)
Hash identifier: pCwelYBsx5VY99w2v+FZ6X5K/Ztu3KSwUbd+TeGYzZY=
Subject key identifier: 48:FF:45:9D:52:7F:68:27:ED:4A:4F:A1:8D:91:DD:81:71:FB:1C:05
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0186DFFE4081B09B16EFA06BF2BA9435C1E6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SP9FnVJ_aCftSk-hjZHdgXH7HAU.roa
Signing time: Tue 14 Mar 2023 12:00:27 +0000
ROA not before: Tue 14 Mar 2023 12:00:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 193.233.150.0/24 maxlen: 24
193.233.164.0/24 maxlen: 24
193.233.166.0/23 maxlen: 23
193.233.168.0/23 maxlen: 23
193.233.73.0/24 maxlen: 24
193.233.92.0/22 maxlen: 22
193.233.12.0/23 maxlen: 23
193.233.24.0/23 maxlen: 23
193.233.240.0/22 maxlen: 22
193.233.26.0/23 maxlen: 23
193.233.28.0/23 maxlen: 23
193.233.254.0/23 maxlen: 23
193.233.54.0/23 maxlen: 23
193.233.176.0/20 maxlen: 20
193.233.212.0/22 maxlen: 22
193.233.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:fe:40:81:b0:9b:16:ef:a0:6b:f2:ba:94:35:c1:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Mar 14 12:00:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=48ff459d527f6827ed4a4fa18d91dd8171fb1c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:d2:4e:66:a0:9e:0e:b7:5c:76:48:c1:4c:69:
21:fa:22:7f:a3:b4:ca:03:aa:51:5e:25:70:bf:79:
27:47:65:4a:d0:58:4b:fb:6e:85:47:a8:28:9b:0b:
66:30:5f:32:db:ab:fc:9b:ae:4d:4e:35:ae:26:69:
f8:6c:e6:73:9c:91:02:6b:0c:5b:b4:58:79:18:cf:
bd:49:9d:d7:60:21:1a:cd:71:e7:94:da:12:ab:56:
44:8f:b1:26:ec:75:39:fa:14:5c:10:a8:04:07:75:
1c:54:f7:ed:bf:21:43:5b:d2:53:11:10:0d:f4:cb:
84:5a:e7:d8:7f:3e:6b:97:48:07:d0:9e:a0:8c:df:
55:94:6c:53:46:12:4c:22:1c:31:d2:0f:66:8a:e1:
64:0a:c0:61:88:de:7d:71:d5:11:86:ed:ff:87:79:
1f:e1:03:a9:8f:86:42:96:b2:e2:d7:b6:02:60:37:
e5:0e:12:3e:48:12:7e:df:55:7f:33:50:c8:2a:91:
87:81:db:27:82:3f:12:74:c6:ac:95:8c:4c:f9:07:
bb:1a:e2:7a:a4:41:89:fd:97:7c:0a:be:48:4e:c8:
fc:3b:b3:5e:1d:c4:97:3e:8f:64:e7:50:66:d9:ed:
e6:82:0b:9b:e5:f6:99:8d:0f:9d:3a:9a:a3:63:ec:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:FF:45:9D:52:7F:68:27:ED:4A:4F:A1:8D:91:DD:81:71:FB:1C:05
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/SP9FnVJ_aCftSk-hjZHdgXH7HAU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.12.0/23
193.233.24.0-193.233.29.255
193.233.54.0/23
193.233.73.0/24
193.233.92.0/22
193.233.150.0/24
193.233.164.0/24
193.233.166.0-193.233.169.255
193.233.176.0/20
193.233.212.0/22
193.233.224.0/22
193.233.240.0/22
193.233.254.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:62:97:03:9e:f8:28:da:59:5c:37:f0:cf:ff:bf:ce:b1:14:
68:20:d0:e9:f5:1c:0c:fc:d7:06:52:3d:c0:5e:5d:e0:13:9e:
65:4b:e7:7c:56:67:2c:01:2e:ab:fd:d6:24:7c:ed:81:21:ea:
aa:21:eb:6b:e8:c2:3b:25:18:32:86:3b:93:c9:a9:c0:d9:a0:
5c:7c:cd:54:e1:a6:ca:ab:ef:e6:c9:84:ae:67:08:94:46:88:
50:ea:4e:dd:d6:3a:cf:b4:2c:8f:eb:c8:d7:17:a3:0d:42:a9:
83:5c:91:2d:59:87:c2:6b:04:f2:cd:89:84:6d:c6:7d:a9:dd:
57:2e:1a:84:47:d7:1b:22:87:fd:ba:85:cf:3d:26:80:8d:42:
c1:33:b4:96:49:5d:a4:4e:b2:0c:46:19:1e:fe:13:6e:7b:fb:
e5:ea:77:8d:ec:ac:7a:54:64:d3:f3:ac:ba:c6:70:ca:3b:83:
1e:01:d9:27:e3:65:28:57:38:4e:19:3f:6e:51:15:4f:7b:89:
c5:53:83:81:8a:ae:a3:f6:e5:8a:e6:e2:aa:e7:a8:88:85:31:
6f:7d:ef:f5:63:4f:9c:b0:9a:7f:be:f2:42:ed:d8:69:62:21:
c8:09:7c:49:b5:eb:41:4a:3f:7f:3b:84:c2:0b:dc:4c:2b:5a:
ee:d4:0b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:43:38 2023 by rpki-client on console-fra.rpki-client.org