Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Wdq1H5D_UR9NCvdX-B76ReEcdGU.roa
File: Wdq1H5D_UR9NCvdX-B76ReEcdGU.roa (raw, json)
Hash identifier: lMI1UU3TEZY/epSfza/sAZSysWxlo09txmiuPV4FfDc=
Subject key identifier: 59:DA:B5:1F:90:FF:51:1F:4D:0A:F7:57:F8:1E:FA:45:E1:1C:74:65
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CC79526290CA2197FC1DFAFD290D6BCF6
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Wdq1H5D_UR9NCvdX-B76ReEcdGU.roa
Signing time: Tue 02 Jan 2024 00:31:29 +0000
ROA not before: Tue 02 Jan 2024 00:31:29 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43444
IP address blocks: 193.233.128.0/22 maxlen: 22
193.233.216.0/22 maxlen: 22
193.233.220.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 15 Apr 2024 18:27:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:95:26:29:0c:a2:19:7f:c1:df:af:d2:90:d6:bc:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 2 00:31:29 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=59dab51f90ff511f4d0af757f81efa45e11c7465
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:59:3d:a6:58:8c:3b:34:8e:cb:36:fd:be:18:
03:5a:c3:ae:b8:c2:41:37:52:e9:92:6a:94:20:f0:
4d:91:62:2a:01:3d:53:db:7f:c9:61:ab:13:fd:3c:
eb:b9:a4:65:95:87:d9:bd:ec:72:f0:ad:e3:67:bf:
a2:19:67:1e:f9:89:bb:32:38:2d:e1:ee:bd:d5:14:
de:77:25:82:65:c6:9a:c0:a9:7c:70:fd:ca:3d:8c:
a1:5b:88:45:32:88:7c:01:1e:82:e1:f7:3f:03:80:
f5:35:19:90:ac:b5:82:43:c9:1f:f2:de:3e:d0:80:
e8:97:28:00:37:12:e1:e5:6c:59:f5:41:24:2d:f6:
c4:36:08:2d:bc:97:fb:7d:c5:a0:46:15:36:e1:5e:
24:ab:6d:87:7f:75:9b:06:de:3b:64:20:98:40:fd:
38:51:4c:d3:59:bb:b3:9c:04:fd:a5:e2:65:41:5c:
30:09:34:93:fa:a9:a3:49:18:fd:ca:8a:2c:61:9f:
56:7f:e8:d0:08:af:e2:b5:6a:90:87:78:68:cd:17:
07:d5:57:d1:61:2f:70:e1:06:48:dc:29:cf:66:a3:
5d:41:cc:9c:ee:a8:ee:b5:96:f3:03:fc:60:f2:c7:
d8:f6:06:31:33:b4:2f:83:b2:ca:4d:d5:a1:4d:91:
cb:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DA:B5:1F:90:FF:51:1F:4D:0A:F7:57:F8:1E:FA:45:E1:1C:74:65
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Wdq1H5D_UR9NCvdX-B76ReEcdGU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.128.0/22
193.233.216.0-193.233.221.255
Signature Algorithm: sha256WithRSAEncryption
50:74:58:8f:f5:04:c3:74:4c:20:9b:1c:6e:f6:8a:ac:a0:6d:
7d:c0:dd:ba:69:fe:97:14:d9:91:10:92:3f:50:6a:8a:2c:a6:
82:69:d3:33:44:3a:08:fc:17:a2:50:7e:2c:4d:bf:27:30:10:
f5:04:36:d7:90:2d:99:6c:0c:03:2e:31:7c:3c:0f:8f:79:0f:
fe:b0:bb:b6:0b:09:48:86:12:a6:f0:83:2e:a0:ee:08:ac:3c:
d8:c3:4f:82:cc:b5:28:5e:bc:cd:60:ac:e2:96:99:a4:6a:40:
3d:15:f6:91:35:49:ed:87:6d:74:27:66:6b:a5:3c:dd:4a:e0:
53:9d:83:5f:86:ce:31:db:3b:43:61:5b:a5:ac:38:8e:50:6b:
7c:37:6a:da:21:63:ba:66:c6:bd:61:8e:d0:c5:8c:89:8d:7b:
30:0b:c3:6f:89:cf:2f:43:35:1c:4a:bf:e6:28:99:4f:58:45:
69:5b:0b:14:6d:d4:52:ed:15:1e:cb:c5:29:9e:96:3c:86:82:
a9:52:c4:f8:5c:12:22:d3:af:cc:a9:2e:25:27:aa:e0:e7:64:
6f:43:b3:7e:e8:6b:07:a1:22:ba:22:30:7e:70:70:9a:e9:6b:
e4:9a:b8:ed:d7:29:94:2a:02:37:d0:8d:6b:cb:ed:ba:44:df:
bc:85:ca:54
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 22:46:51 2024 by rpki-client on console-ams.rpki-client.org