Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UuYRdnlDJs1mcCD9ZnuSSnUiBIM.roa
File: UuYRdnlDJs1mcCD9ZnuSSnUiBIM.roa (raw, json)
Hash identifier: RDyMLmWgKh0MCr+jALCFeBgqgbzgBydplbFmRUz8DWE=
Subject key identifier: 52:E6:11:76:79:43:26:CD:66:70:20:FD:66:7B:92:4A:75:22:04:83
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018B91133251E6010B2B3141878453E7A1B5
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UuYRdnlDJs1mcCD9ZnuSSnUiBIM.roa
Signing time: Thu 02 Nov 2023 17:27:16 +0000
ROA not before: Thu 02 Nov 2023 17:27:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52000
IP address blocks: 193.233.22.0/24 maxlen: 24
193.233.250.0/24 maxlen: 24
193.233.249.0/24 maxlen: 24
193.233.248.0/24 maxlen: 24
193.233.251.0/24 maxlen: 24
193.233.171.0/24 maxlen: 24
193.233.175.0/24 maxlen: 24
193.233.88.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 19:16:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:91:13:32:51:e6:01:0b:2b:31:41:87:84:53:e7:a1:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Nov 2 17:27:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=52e61176794326cd667020fd667b924a75220483
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c5:cb:33:90:ae:40:71:48:7c:84:1c:84:13:
fb:19:5c:6f:1c:d4:00:74:15:37:ca:c7:bb:4f:38:
b8:c4:d8:a3:d9:4a:ca:a8:97:62:c8:e6:d5:56:73:
5a:98:c7:19:16:d5:6f:aa:4a:37:b4:71:e4:3f:07:
c5:b5:71:c4:23:d1:0d:df:0d:44:bd:38:08:bb:42:
eb:aa:66:ec:68:58:fc:f9:db:84:7d:44:d2:65:51:
34:04:41:cf:03:c1:f3:9a:23:4f:28:9b:13:79:00:
b8:3e:f5:53:1e:61:4c:d3:59:bf:13:be:c0:37:d5:
2f:91:66:c1:4f:f3:a2:84:74:84:6d:75:eb:19:cc:
16:30:1d:5c:8c:a4:27:ab:9c:f9:0c:e7:8c:59:3b:
1e:be:9d:98:d9:37:67:ed:91:16:d9:c9:db:54:66:
5f:21:fe:b9:1d:51:f4:b5:1b:c3:d1:50:1d:6a:eb:
13:db:6a:4b:61:9c:a2:ad:6a:14:c8:a9:6d:95:57:
b8:d0:e0:90:25:9d:c4:3a:7e:84:a4:d5:6b:98:d8:
c0:7d:e0:ab:08:f8:fb:bb:4d:5b:d6:7a:28:ce:c2:
d8:13:eb:2b:23:9c:55:f2:fb:18:68:a1:ab:01:87:
25:db:0c:63:4d:63:24:86:3f:41:94:ad:1c:3e:b5:
97:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:E6:11:76:79:43:26:CD:66:70:20:FD:66:7B:92:4A:75:22:04:83
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/UuYRdnlDJs1mcCD9ZnuSSnUiBIM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.22.0/24
193.233.88.0/22
193.233.171.0/24
193.233.175.0/24
193.233.248.0/22
Signature Algorithm: sha256WithRSAEncryption
1a:0b:3e:7b:06:b3:73:13:76:70:87:08:d9:c6:13:ff:88:c7:
ea:b1:f6:da:10:54:e8:54:9e:14:1d:4f:2f:7d:b9:a6:89:52:
3a:0e:98:23:a9:d1:ae:65:ec:47:99:11:22:e2:64:8c:6c:64:
cf:68:7c:1c:ff:6d:7e:a3:e8:e5:e9:c4:2b:5c:1c:7b:fe:05:
a5:ba:d3:cc:f1:9d:26:7e:54:62:e2:44:39:f4:a8:be:b5:3c:
d4:4f:6f:de:f5:4b:d2:b4:9c:26:3c:5b:f8:3b:c3:c4:fb:d6:
04:63:d6:84:c4:57:f0:de:2d:ff:db:5c:55:37:20:43:38:ec:
51:0d:99:49:bd:97:d5:fc:59:0d:63:a3:f2:9d:33:79:63:b6:
5e:fb:1f:b6:1a:b8:2e:79:b2:eb:5e:42:f6:f6:c8:58:b5:9e:
6c:da:e9:d3:e3:c5:80:08:7d:75:1c:a6:87:21:87:b4:c4:b5:
df:d1:10:1b:c5:52:48:f5:a4:e0:b4:01:99:bf:a1:45:3b:48:
eb:7d:f2:fb:7d:fb:22:95:20:c8:b0:83:24:c9:6a:dd:99:56:
36:3d:8d:8b:e3:0c:14:0a:79:6c:e7:68:d9:30:13:1c:c9:9a:
ae:1d:71:2d:60:10:1a:8e:95:3b:b6:f5:35:84:31:0d:a5:1f:
3c:ce:b5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:52:32 2024 by rpki-client on console-ams.rpki-client.org