Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yKzZ0AFJ-B3OAKCR4StUtKIzN-Y.roa
File: yKzZ0AFJ-B3OAKCR4StUtKIzN-Y.roa (raw, json)
Hash identifier: 2USf0Bu+3P9OGMy5E8aVreRWe2JJpmCTqLvdbGlguMI=
Subject key identifier: C8:AC:D9:D0:01:49:F8:1D:CE:00:A0:91:E1:2B:54:B4:A2:33:37:E6
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018D648C5B40336A98FDE7C4274D2936AD55
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yKzZ0AFJ-B3OAKCR4StUtKIzN-Y.roa
Signing time: Thu 01 Feb 2024 12:02:16 +0000
ROA not before: Thu 01 Feb 2024 12:02:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210644
IP address blocks: 147.45.40.0/22 maxlen: 32
147.45.68.0/22 maxlen: 32
147.45.72.0/21 maxlen: 21
193.233.133.0/24 maxlen: 24
193.233.232.0/24 maxlen: 24
193.233.233.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 18:36:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:64:8c:5b:40:33:6a:98:fd:e7:c4:27:4d:29:36:ad:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 1 12:02:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=c8acd9d00149f81dce00a091e12b54b4a23337e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a9:7a:ed:e8:ea:74:af:69:46:3b:3d:a3:86:
9a:3b:04:b7:e4:85:4b:9e:02:d6:44:fe:93:1b:94:
69:c1:4b:57:17:fb:07:99:28:22:5f:19:7b:68:ae:
98:54:09:85:6f:a8:5b:a2:78:74:e8:61:d8:65:3d:
55:2c:ca:12:bb:35:c5:ea:c4:55:d0:b0:92:ba:a9:
d5:62:ca:e4:18:27:bb:d8:bd:63:fc:56:08:70:e7:
bb:84:dd:44:2e:f2:d3:56:2d:6d:a5:32:ed:b3:4d:
41:38:d0:ca:64:12:d9:ed:1a:58:1d:9e:63:32:c6:
40:f5:73:1a:57:54:bf:88:94:16:12:14:67:3e:61:
d6:97:17:c9:be:c7:2e:cf:65:b7:8e:3e:84:2a:de:
24:17:a0:cd:fc:ae:80:95:4b:44:1c:d0:f0:e2:fd:
c7:b5:c7:34:20:1b:51:d4:f7:84:60:c5:81:12:c2:
69:a9:d7:ba:ea:93:fb:64:3c:b6:c6:e4:ff:10:e7:
c9:4a:de:d9:7e:a6:ee:cb:fe:6c:07:06:0e:b5:93:
66:87:bb:b4:9d:56:56:12:ca:90:ec:67:ef:93:8a:
e8:2e:3e:2d:0d:d5:4a:8c:04:32:45:6c:8e:62:31:
c4:09:58:72:e5:22:8d:fb:5b:4e:e6:03:bb:d2:92:
30:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:AC:D9:D0:01:49:F8:1D:CE:00:A0:91:E1:2B:54:B4:A2:33:37:E6
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/yKzZ0AFJ-B3OAKCR4StUtKIzN-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.45.40.0/22
147.45.68.0-147.45.79.255
193.233.133.0/24
193.233.232.0/23
Signature Algorithm: sha256WithRSAEncryption
82:c8:73:35:e6:4f:1b:89:01:a1:15:74:af:ec:39:ee:e1:9b:
ed:1f:4e:0f:47:aa:32:03:e8:f0:db:8c:a7:1c:82:a5:60:b0:
ca:ed:d5:fb:9d:a7:e1:dc:83:02:dc:d2:2d:4e:00:84:b8:e4:
ca:34:8d:5a:a8:e3:a7:24:fd:5f:79:9d:71:8b:46:3f:14:5d:
ed:99:cb:bc:c1:5d:a8:06:28:b9:64:7e:b6:4b:19:62:1f:60:
97:1e:ac:19:6a:44:52:95:09:97:67:84:a2:2e:50:3b:09:85:
31:4d:6d:c5:60:11:52:e3:94:55:8f:7d:52:07:4d:c4:3c:02:
80:5a:24:3e:07:4f:82:a4:ed:70:e5:33:73:36:30:ec:2a:c0:
82:8b:56:a4:84:33:ce:40:93:32:cc:cb:24:2f:59:60:be:da:
af:c0:a9:33:9d:af:f8:6e:0a:8b:0b:a8:23:d6:2e:af:17:a2:
34:3c:ff:46:01:93:25:15:68:4e:6c:dc:3a:0e:0e:73:4f:41:
bc:2e:60:67:89:77:6d:ad:7b:33:b1:81:24:3c:8e:1a:de:76:
4b:a4:d2:2f:24:2e:61:24:bb:0e:a8:58:10:73:8d:75:84:45:
98:76:be:0c:44:82:69:ba:38:fe:b6:c1:d8:be:93:56:9a:ea:
40:65:be:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 5 22:57:46 2024 by rpki-client on console-fra.rpki-client.org