Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u94YMtDEBqrmR-W5XjGCH_aJPHA.roa
File: u94YMtDEBqrmR-W5XjGCH_aJPHA.roa (raw, json)
Hash identifier: FrkUaKCwIOeJ/g+XjChNiqGat5RQgsghBrA1qObGggs=
Subject key identifier: BB:DE:18:32:D0:C4:06:AA:E6:47:E5:B9:5E:31:82:1F:F6:89:3C:70
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01856F26E9BB223712805DEF3F15FE339B0C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u94YMtDEBqrmR-W5XjGCH_aJPHA.roa
Signing time: Sun 01 Jan 2023 21:04:59 +0000
ROA not before: Sun 01 Jan 2023 21:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56690
IP address blocks: 193.233.150.0/24 maxlen: 24
193.233.166.0/23 maxlen: 23
193.233.168.0/23 maxlen: 23
193.233.73.0/24 maxlen: 24
193.233.92.0/24 maxlen: 24
193.233.12.0/23 maxlen: 23
193.233.240.0/23 maxlen: 23
193.233.24.0/23 maxlen: 23
193.233.243.0/24 maxlen: 24
193.233.26.0/23 maxlen: 23
193.233.28.0/23 maxlen: 23
193.233.54.0/23 maxlen: 23
193.233.176.0/20 maxlen: 20
193.233.212.0/22 maxlen: 22
193.233.224.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:e9:bb:22:37:12:80:5d:ef:3f:15:fe:33:9b:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Jan 1 21:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bbde1832d0c406aae647e5b95e31821ff6893c70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:22:15:57:c7:9b:93:37:56:19:ff:e3:8c:08:
28:b5:37:8c:ab:15:73:b0:85:f8:fd:18:91:9b:c0:
71:dc:0a:f8:e2:b7:1a:f7:d9:ca:32:d4:78:e5:ba:
ee:ff:29:f8:dd:f6:be:b7:5b:09:92:63:db:1c:8d:
31:a4:7a:0d:fe:62:68:41:a4:57:93:40:c7:6a:5a:
c6:65:b6:1e:c9:83:6e:68:4c:fc:ab:33:da:1f:d2:
a3:8a:08:fa:81:84:2e:02:4f:a2:9d:df:d1:01:fe:
71:38:95:d6:f5:b1:de:c3:01:6b:a9:4a:a5:4b:ee:
af:bf:b7:82:3d:9e:18:e5:d3:db:8f:5d:e7:d1:1a:
3a:ab:db:09:53:22:d9:e2:2d:aa:02:e7:c3:da:62:
08:48:bd:a0:6e:cc:9e:5e:9e:93:60:41:18:62:29:
1a:58:94:6d:c1:00:02:10:49:8b:95:bb:5e:06:f8:
ed:38:f7:a0:0e:c1:5d:c3:1a:da:ef:7d:86:1f:0c:
16:f6:60:06:6a:0d:68:8b:59:ea:ed:da:de:e5:7d:
54:80:c4:5d:e7:9c:79:f1:db:f6:d8:7f:5b:d9:e3:
fc:d4:f9:e5:6e:bc:7c:98:4c:71:69:67:60:df:48:
ca:06:96:b2:90:ef:8d:7c:13:bc:33:a3:8f:0f:39:
a0:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:18:32:D0:C4:06:AA:E6:47:E5:B9:5E:31:82:1F:F6:89:3C:70
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/u94YMtDEBqrmR-W5XjGCH_aJPHA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.12.0/23
193.233.24.0-193.233.29.255
193.233.54.0/23
193.233.73.0/24
193.233.92.0/24
193.233.150.0/24
193.233.166.0-193.233.169.255
193.233.176.0/20
193.233.212.0/22
193.233.224.0/22
193.233.240.0/23
193.233.243.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:0b:60:60:57:f2:4e:6c:5a:3e:e6:5b:6b:a1:21:5b:00:e2:
95:16:c2:cf:e0:b3:47:b7:5c:0f:cb:1b:2f:dd:e8:11:dd:69:
40:a8:47:70:a7:86:81:ca:29:10:06:f0:40:13:4a:7c:d3:cb:
44:fd:65:e5:4f:00:df:88:f5:a3:22:91:82:dd:6e:37:a6:8d:
63:76:cf:43:f0:eb:28:20:38:cf:78:03:78:f5:4e:02:83:11:
60:d4:5b:8e:73:a8:6c:1a:90:cb:5b:c2:68:dc:b8:12:49:30:
53:85:dd:26:62:8a:02:e1:38:72:2a:2b:1e:98:44:8d:6b:17:
7c:92:2e:49:fb:c5:d6:93:ca:81:bc:66:e3:78:6f:5b:dd:8e:
8a:ca:a4:30:8e:29:55:82:fe:f4:aa:00:60:26:85:e2:68:fa:
78:30:3c:0d:72:1a:ed:6b:ab:20:0e:b9:5e:53:96:80:db:16:
f2:19:5e:4a:3e:f2:a2:9d:0b:7c:31:78:97:6a:35:82:2c:40:
ee:09:63:3e:9f:49:96:3a:74:69:20:19:6d:3f:5b:b9:33:64:
2b:ae:bd:64:73:6f:81:03:ae:90:7a:1d:0f:be:65:2c:8e:58:
c5:27:29:83:2e:aa:ea:65:10:4b:cc:61:e7:cf:82:d0:fc:30:
33:12:8b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org