Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iHlRFgE5sCFCQh0JbBW2TjEehj8.roa
File: iHlRFgE5sCFCQh0JbBW2TjEehj8.roa (raw, json)
Hash identifier: xexYgjsuLA8DqdOX68oB5rSw+uonm4OD930KKvEVPFQ=
Subject key identifier: 88:79:51:16:01:39:B0:21:42:42:1D:09:6C:15:B6:4E:31:1E:86:3F
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018828EF09FFDFBAC233634475453F53AB3D
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iHlRFgE5sCFCQh0JbBW2TjEehj8.roa
Signing time: Wed 17 May 2023 08:58:54 +0000
ROA not before: Wed 17 May 2023 08:58:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 193.233.150.0/24 maxlen: 24
193.233.166.0/23 maxlen: 23
193.233.168.0/23 maxlen: 23
193.233.73.0/24 maxlen: 24
193.233.92.0/22 maxlen: 22
193.233.12.0/23 maxlen: 23
193.233.24.0/23 maxlen: 23
193.233.240.0/22 maxlen: 22
193.233.26.0/23 maxlen: 23
193.233.28.0/23 maxlen: 23
193.233.54.0/23 maxlen: 23
193.233.176.0/20 maxlen: 20
193.233.212.0/22 maxlen: 22
193.233.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:ef:09:ff:df:ba:c2:33:63:44:75:45:3f:53:ab:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: May 17 08:58:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=887951160139b02142421d096c15b64e311e863f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:65:3f:fc:70:81:3b:45:be:15:43:f9:87:a9:
37:43:74:54:d9:4e:98:60:48:a4:7f:76:ab:d3:e4:
a7:28:1e:fc:f1:25:0b:18:f1:26:f9:6e:8e:32:f6:
ee:ff:be:c4:b9:94:d5:33:76:a2:6b:b4:53:f6:06:
95:60:89:5d:95:8f:54:20:8f:97:c0:ba:cd:41:c8:
d6:b0:d0:31:25:df:18:0c:b1:55:fe:a8:c8:9c:da:
23:2d:19:e7:4b:9b:b5:0b:13:17:dc:64:42:54:85:
8c:bb:95:88:14:dd:67:a5:c3:f9:ce:1b:57:d9:79:
6b:05:96:5c:43:e9:5c:17:c4:a0:e5:a2:ed:54:aa:
68:83:1b:50:2d:4e:9f:af:84:a0:6d:cb:cb:28:15:
3f:ff:ef:dc:52:19:53:19:c4:2f:60:46:cf:e1:b4:
69:82:c4:44:f8:e0:0b:6d:2d:30:ea:a9:84:49:71:
10:ca:de:20:89:0d:58:b8:f9:53:64:4f:c9:2a:a2:
b7:9a:e0:3a:b2:1e:c5:79:2b:b1:a4:9d:0d:50:c3:
b0:d3:e9:5c:c5:52:1f:09:91:2c:cd:64:de:da:f1:
e4:a8:6f:0d:62:f5:4a:cb:57:20:5b:0b:f3:6c:34:
d8:d0:ff:2a:da:ef:bf:6d:56:8b:f3:1c:f0:51:67:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:79:51:16:01:39:B0:21:42:42:1D:09:6C:15:B6:4E:31:1E:86:3F
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/iHlRFgE5sCFCQh0JbBW2TjEehj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.12.0/23
193.233.24.0-193.233.29.255
193.233.54.0/23
193.233.73.0/24
193.233.92.0/22
193.233.150.0/24
193.233.166.0-193.233.169.255
193.233.176.0/20
193.233.212.0/22
193.233.224.0/22
193.233.240.0/22
Signature Algorithm: sha256WithRSAEncryption
50:40:44:29:39:6b:43:3b:2d:f2:bc:1c:ca:9e:36:52:3d:29:
1d:28:98:43:1f:33:a4:e6:9a:2b:cb:ff:bd:2d:a4:75:24:2b:
36:6d:72:ec:ea:06:1e:67:68:22:e3:29:28:98:d1:5c:e8:3d:
b7:75:72:50:33:8b:b1:a1:b0:c0:a7:46:3b:ce:7e:14:9e:99:
ba:e7:92:3b:89:57:ed:e1:a7:52:66:1f:fa:59:03:84:88:37:
81:ab:47:ba:0d:c0:32:c5:b9:15:44:4f:19:0c:cc:65:a2:f4:
cc:b1:a2:a4:47:93:51:ad:de:02:f6:1c:8e:38:75:14:1a:ca:
d8:b1:35:61:40:2a:11:6c:88:de:4b:26:fe:32:37:08:6c:be:
71:42:e8:b1:e8:d9:46:a7:4c:83:80:52:90:06:81:bc:e0:58:
95:8d:93:fb:72:9b:bf:a7:b1:a4:cd:ee:5a:83:1b:fc:2f:5a:
df:d7:69:b9:de:71:35:92:10:3c:d0:35:87:e0:2d:f2:bd:50:
c2:27:4a:21:e9:db:5c:af:7b:99:b1:eb:d8:c6:63:3b:34:9b:
4e:cf:05:1e:d7:61:e5:13:0c:29:9a:b2:5e:05:19:81:a5:72:
22:b3:6d:41:ab:4a:5b:f1:5b:6a:ed:d9:e9:89:81:fe:b7:42:
a8:88:44:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:22:05 2024 by rpki-client on console-fra.rpki-client.org