Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Z1RN2Htsu2zAwjUCiM9SdfYbLvU.roa
File: Z1RN2Htsu2zAwjUCiM9SdfYbLvU.roa (raw, json)
Hash identifier: Vb34xw7UYXHJj0jJZdCL+k4sha7mgVd0ilIONgqE2YQ=
Subject key identifier: 67:54:4D:D8:7B:6C:BB:6C:C0:C2:35:02:88:CF:52:75:F6:1B:2E:F5
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26D8791B1AD3E11B2B7EB5BA375202
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Z1RN2Htsu2zAwjUCiM9SdfYbLvU.roa
Signing time: Sun 01 Jan 2023 21:04:54 +0000
ROA not before: Sun 01 Jan 2023 21:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 193.233.108.0/23 maxlen: 24
193.233.110.0/23 maxlen: 24
193.233.118.0/23 maxlen: 24
193.233.116.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:d8:79:1b:1a:d3:e1:1b:2b:7e:b5:ba:37:52:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=67544dd87b6cbb6cc0c2350288cf5275f61b2ef5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f0:64:62:06:5b:13:99:b6:f5:ff:5d:d8:6c:
31:26:ad:72:89:33:12:5d:65:c4:9c:d3:ff:93:25:
23:99:5f:9f:68:95:0b:35:ec:00:af:dc:1d:80:1e:
53:fd:0a:e8:66:ad:d8:bb:dc:3a:74:08:52:70:45:
46:75:8a:0b:d6:ce:5a:30:38:97:3f:d7:5d:14:e9:
0f:72:9b:2e:ff:24:cc:5f:eb:47:ed:9d:30:21:69:
8d:2b:b2:4f:d3:3a:c8:90:2b:a9:c8:a2:f9:3e:66:
83:39:78:7d:c6:e1:fb:71:80:bf:a3:4b:4f:96:1b:
c8:28:62:62:07:63:bb:4b:0f:d6:39:64:24:2f:9c:
e3:ad:60:17:02:78:11:9d:fd:d2:31:36:55:94:0a:
42:1d:01:8e:de:56:7e:51:1f:6a:38:d5:83:cf:c1:
82:df:1d:89:a0:e4:b9:8f:05:b5:ff:f7:2e:6a:3a:
27:c0:d3:39:c0:39:47:ae:ea:0d:13:c8:94:1d:57:
c0:cd:2a:96:87:a1:60:d3:93:46:c3:ac:ed:bd:b1:
82:3d:91:d8:23:b1:b6:ce:0e:cf:be:7d:82:92:a5:
2f:35:4f:7c:63:b1:c0:8c:8f:1b:13:f5:e0:72:91:
6a:5a:4f:b3:af:4c:8f:e0:41:26:16:e8:a0:8e:17:
94:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:54:4D:D8:7B:6C:BB:6C:C0:C2:35:02:88:CF:52:75:F6:1B:2E:F5
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Z1RN2Htsu2zAwjUCiM9SdfYbLvU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.108.0/22
193.233.116.0/22
Signature Algorithm: sha256WithRSAEncryption
88:e8:ff:d6:81:a3:b5:c6:f2:a9:83:85:d6:32:73:60:3c:06:
fd:46:9e:7e:58:74:63:11:3f:1d:8f:5b:f7:5e:86:4d:3b:e7:
83:3a:29:9e:02:78:90:98:39:33:e8:a7:c0:ab:9b:d4:b0:3b:
ff:40:9a:0d:4f:12:19:f5:02:b6:03:45:39:66:d4:a2:fb:f3:
80:e9:d9:cf:f5:0c:6f:32:df:a7:5d:8d:df:74:76:2c:fb:f4:
23:fb:38:af:89:d6:0c:87:eb:52:58:91:c3:ca:a9:94:25:6a:
e6:9c:19:d0:69:9e:71:10:d7:3c:ef:ed:dc:23:49:d8:47:e0:
64:8b:29:7b:b8:91:3f:1d:2f:c2:26:16:0a:45:47:a9:7e:ce:
d6:9e:77:0c:f7:a8:74:58:52:27:8c:53:d8:d8:b0:63:4d:10:
7c:71:3a:17:55:e7:38:a0:37:2f:1d:e3:b6:ed:e1:1a:41:51:
5d:e9:f7:46:4a:a1:d8:0c:fa:9f:91:a1:60:ea:c1:6f:ee:d3:
4f:2b:98:96:69:3c:df:ab:38:de:2d:19:36:84:ef:56:16:af:
da:33:ef:2b:4a:9f:e3:32:c9:36:ad:64:45:91:13:96:36:b9:
a6:f7:91:86:7d:25:76:f5:e9:18:99:a6:73:e5:d1:8d:da:b3:
12:c6:4c:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org