Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cX6eeeIoGZznwmtWwyEhmdhwB-Y.roa
File: cX6eeeIoGZznwmtWwyEhmdhwB-Y.roa (raw, json)
Hash identifier: Oo7Q00YkCa341fmrF0Yd3Onh1K+2nIcCFTdi6bD6/RM=
Subject key identifier: 71:7E:9E:79:E2:28:19:9C:E7:C2:6B:56:C3:21:21:99:D8:70:07:E6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D41A2E84F6AB2A2D5AACD7911B4D6F6F3
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cX6eeeIoGZznwmtWwyEhmdhwB-Y.roa
Signing time: Thu 25 Jan 2024 17:20:11 +0000
ROA not before: Thu 25 Jan 2024 17:20:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 147.45.40.0/22 maxlen: 32
193.233.133.0/24 maxlen: 24
193.233.232.0/24 maxlen: 24
193.233.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jan 2024 10:45:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:41:a2:e8:4f:6a:b2:a2:d5:aa:cd:79:11:b4:d6:f6:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 25 17:20:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=717e9e79e228199ce7c26b56c3212199d87007e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:86:d2:6b:0f:2a:9d:68:e3:75:41:5f:c7:
b1:18:e1:30:d4:43:8b:16:40:f8:6a:b1:b2:a0:4a:
b2:89:5f:23:4b:4e:1d:61:43:45:e7:e8:99:c4:86:
82:ed:fd:bf:d0:05:7c:5c:46:28:9f:e9:20:c6:ca:
1b:e9:d8:0d:5d:f3:ac:d2:40:a0:02:d1:6b:68:52:
e4:fe:f3:43:85:5c:46:95:34:a9:9f:83:52:03:73:
8b:9f:38:f6:0c:06:6c:25:1f:66:d4:ab:a0:2a:4a:
34:14:a4:1b:f2:73:d3:3d:4a:94:f2:16:cc:5d:77:
d8:27:0f:4a:ac:7f:c4:d4:42:e3:ef:0f:1f:60:5f:
08:fd:da:13:4e:71:f3:24:08:d9:b9:4c:69:fd:9a:
ee:03:1a:cc:41:f5:8a:e4:eb:d2:50:09:59:e0:5f:
4f:43:b9:74:4c:87:0a:1d:77:ee:f9:87:55:a2:39:
45:d7:f1:c6:8a:36:b6:1d:28:75:42:0c:69:8c:ad:
d6:7a:d0:4e:05:96:9e:4b:b3:37:bd:e4:44:98:5b:
85:7a:6d:19:2a:5c:05:ed:9b:de:dc:97:c7:97:ac:
ae:2d:d7:7f:b5:af:36:10:8a:cd:60:69:7a:ba:c7:
a7:43:76:ab:19:5f:4b:10:93:7b:cb:8d:5d:07:45:
70:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:7E:9E:79:E2:28:19:9C:E7:C2:6B:56:C3:21:21:99:D8:70:07:E6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/cX6eeeIoGZznwmtWwyEhmdhwB-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.40.0/22
193.233.133.0/24
193.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:63:94:bb:e1:db:4b:31:d6:a3:6b:06:5d:02:18:a2:ce:a6:
6a:85:5b:8b:9b:6b:ff:ff:02:90:8e:bb:38:41:df:a0:6c:d0:
83:23:a8:f9:0d:1e:5b:de:60:05:53:ee:d9:26:36:a2:93:f8:
65:58:8c:e3:11:b4:f6:c0:1a:a3:c7:3b:89:10:36:be:d9:88:
4f:6e:7a:cd:c1:57:3e:28:99:80:e1:57:fa:5c:23:31:62:35:
44:60:e1:90:03:24:74:f8:a1:00:c6:4e:52:a2:b0:13:1e:d2:
85:e3:8b:ed:c0:66:48:4c:ee:2d:b8:d2:55:97:ca:4b:41:c8:
e3:c5:d4:c6:59:42:9f:53:63:fc:91:ac:29:f4:2d:18:dc:d2:
9e:25:f1:66:07:32:8a:52:2f:9f:9c:d2:e2:f9:f3:04:ff:dc:
a6:ff:d2:e1:77:00:e4:67:14:ac:ca:e3:82:5f:e0:15:ce:eb:
8e:71:c8:30:22:b3:1d:06:22:a8:ac:16:1c:2a:b0:d4:5b:3b:
0c:73:55:8e:65:e2:97:a1:1b:f8:a0:82:5d:e8:4f:44:5e:8e:
ba:4b:99:f2:6f:06:65:5e:68:cb:a8:7b:01:68:4b:4f:cf:c3:
6a:bd:aa:a8:85:25:14:b8:56:b2:dc:0b:d5:36:75:9e:e5:0c:
42:f1:cb:be
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAY1BouhParKi1arNeRG01vbzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg2ZDY0OGJkYmE5NjU0NjFiMWU4YzExYjlkZDQzNmM2MTM4
Mjg3M2MwHhcNMjQwMTI1MTcyMDExWhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3MTdlOWU3OWUyMjgxOTljZTdjMjZiNTZjMzIxMjE5OWQ4NzAwN2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVeG0msPKp1o43VBX8exGOEw1EOL
FkD4arGyoEqyiV8jS04dYUNF5+iZxIaC7f2/0AV8XEYon+kgxsob6dgNXfOs0kCg
AtFraFLk/vNDhVxGlTSpn4NSA3OLnzj2DAZsJR9m1KugKko0FKQb8nPTPUqU8hbM
XXfYJw9KrH/E1ELj7w8fYF8I/doTTnHzJAjZuUxp/ZruAxrMQfWK5OvSUAlZ4F9P
Q7l0TIcKHXfu+YdVojlF1/HGija2HSh1QgxpjK3WetBOBZaeS7M3veREmFuFem0Z
KlwF7Zve3JfHl6yuLdd/ta82EIrNYGl6usenQ3arGV9LEJN7y41dB0Vw/wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFHF+nnniKBmc58JrVsMhIZnYcAfmMB8GA1UdIwQY
MBaAFIbWSL26llRhsejBG53UNsYTgoc8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmIt
NGRlYzRkYWZlZTQ5LzEvY1g2ZWVlSW9HWnpud210V3d5RWhtZGh3Qi1ZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hYzU4ZWEtYzQ1OS00OGNhLWI4MmItNGRlYzRkYWZlZTQ5
LzEvaHRaSXZicVdWR0d4Nk1FYm5kUTJ4aE9DaHp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCky0oAwQA
wemFAwQBwenoMA0GCSqGSIb3DQEBCwUAA4IBAQA6Y5S74dtLMdajawZdAhiizqZq
hVuLm2v//wKQjrs4Qd+gbNCDI6j5DR5b3mAFU+7ZJjaik/hlWIzjEbT2wBqjxzuJ
EDa+2YhPbnrNwVc+KJmA4Vf6XCMxYjVEYOGQAyR0+KEAxk5SorATHtKF44vtwGZI
TO4tuNJVl8pLQcjjxdTGWUKfU2P8kawp9C0Y3NKeJfFmBzKKUi+fnNLi+fME/9ym
/9LhdwDkZxSsyuOCX+AVzuuOccgwIrMdBiKorBYcKrDUWzsMc1WOZeKXoRv4oIJd
6E9EXo66S5nybwZlXmjLqHsBaEtPz8NqvaqohSUUuFay3AvVNnWe5QxC8cu+
-----END CERTIFICATE-----
Generated at Wed Jan 31 14:55:32 2024 by rpki-client on console-ams.rpki-client.org