Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hJ6xdmykycRcKIhLkwi04rfnW-8.roa
File: hJ6xdmykycRcKIhLkwi04rfnW-8.roa (raw, json)
Hash identifier: M1U8GL/D/UeRiL7ES3IelrVZVLOf7r3mxVFNachwhOA=
Subject key identifier: 84:9E:B1:76:6C:A4:C9:C4:5C:28:88:4B:93:08:B4:E2:B7:E7:5B:EF
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018CF8940B8E308605902F0F9A6FB5EA9405
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hJ6xdmykycRcKIhLkwi04rfnW-8.roa
Signing time: Thu 11 Jan 2024 12:51:41 +0000
ROA not before: Thu 11 Jan 2024 12:51:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34665
IP address blocks: 193.233.16.0/24 maxlen: 24
147.45.65.0/24 maxlen: 24
193.233.234.0/24 maxlen: 24
147.45.192.0/24 maxlen: 24
193.233.61.0/24 maxlen: 24
193.233.171.0/24 maxlen: 24
193.233.175.0/24 maxlen: 24
193.233.85.0/24 maxlen: 24
193.233.197.0/24 maxlen: 24
147.45.34.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 21 Jan 2024 10:39:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f8:94:0b:8e:30:86:05:90:2f:0f:9a:6f:b5:ea:94:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 11 12:51:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=849eb1766ca4c9c45c28884b9308b4e2b7e75bef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:43:8f:4d:27:82:59:e1:f8:24:a6:bf:cb:b7:
36:fe:33:41:a6:0e:77:7a:a5:21:4d:8d:5b:48:75:
8a:06:a4:b9:f3:00:a7:08:15:00:23:89:2d:a3:c4:
45:ea:11:88:67:a5:db:93:f2:52:1e:58:ad:4f:f4:
41:95:12:91:23:51:18:b9:f3:70:f2:2e:d8:a4:f3:
d3:b7:7c:b4:fd:ed:8a:39:65:4d:12:2e:86:3c:21:
4a:f5:af:e8:0f:ca:d4:a8:dc:0a:9e:48:e2:36:c8:
b1:03:f7:50:82:20:7d:78:2f:a3:86:78:21:95:d2:
1a:b6:c8:77:2b:88:9a:22:3e:f4:a7:9a:7b:07:46:
c6:91:d2:47:a1:c7:0a:bf:39:1f:bd:d0:52:c8:de:
48:ff:46:48:9b:5c:b5:ca:4c:0c:f1:65:b6:c7:e9:
85:2e:27:48:66:d1:b9:54:a8:84:0e:12:81:45:8f:
04:5a:08:c4:2c:ca:50:dc:1f:7f:d2:4b:ab:d3:ee:
6d:32:9f:52:8c:7a:96:75:d9:85:62:65:83:6a:c9:
f3:da:a2:6a:48:0e:ba:37:01:c8:6b:d6:b8:1b:ff:
d9:31:84:62:74:c4:c2:78:65:9d:bd:1e:92:03:12:
de:e6:b7:e4:ef:80:14:6d:ba:ed:eb:dd:ff:a8:21:
12:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9E:B1:76:6C:A4:C9:C4:5C:28:88:4B:93:08:B4:E2:B7:E7:5B:EF
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/hJ6xdmykycRcKIhLkwi04rfnW-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.34.0/24
147.45.65.0/24
147.45.192.0/24
193.233.16.0/24
193.233.61.0/24
193.233.85.0/24
193.233.171.0/24
193.233.175.0/24
193.233.197.0/24
193.233.234.0/24
Signature Algorithm: sha256WithRSAEncryption
20:70:8b:ab:b8:01:6f:fb:b3:b5:7d:d2:1f:b7:5e:9b:88:5f:
c6:43:cb:e1:9b:e9:ce:be:3e:e8:0e:3f:a7:23:da:68:b7:1e:
91:7e:a9:8f:6a:76:38:b8:16:14:c4:17:11:3b:4f:ad:1e:e7:
3d:38:6b:93:2f:fa:52:9f:7e:18:95:87:20:d4:b5:9a:9d:6e:
8f:41:4d:0b:36:97:7e:73:1f:25:11:eb:95:81:96:c0:74:6c:
72:82:b5:de:06:53:e1:a9:a7:31:66:f4:43:1e:b3:61:99:13:
91:16:a5:45:a8:a3:7d:da:f4:1a:70:8f:5a:c0:f9:c9:89:30:
14:40:80:7c:33:f2:fc:b0:47:cd:89:70:69:1f:77:69:e1:56:
51:46:93:7a:18:a2:e0:a0:34:a3:9a:ce:51:5e:c3:03:bf:dd:
7c:11:f6:66:12:cc:46:50:cd:d0:b9:f0:cf:5f:6a:10:48:60:
78:6e:a1:ca:43:c2:b5:85:f1:5d:3a:63:2c:bd:6a:a2:e3:e6:
6f:0c:67:ea:ba:4e:db:b6:8c:18:29:d7:2c:51:ed:44:0c:31:
49:f3:b2:5b:99:f3:ef:ca:fa:f6:59:76:0c:cf:b5:8b:0c:4e:
c6:08:61:1a:c1:7b:38:5b:d3:d8:97:a0:2f:ca:a8:48:a4:3c:
59:83:94:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jan 21 12:00:31 2024 by rpki-client on console-ams.rpki-client.org