Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/EGWj6j2byBhFs1TV5kyBNLaO_NQ.roa
File: EGWj6j2byBhFs1TV5kyBNLaO_NQ.roa (raw, json)
Hash identifier: jovtYzE/3hHCkTcBBcfFmDo2voQ6tr7HOpSh7/igtck=
Subject key identifier: 10:65:A3:EA:3D:9B:C8:18:45:B3:54:D5:E6:4C:81:34:B6:8E:FC:D4
Certificate issuer: /CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Certificate serial: 01887621E23CFB1CA74ECC4BDD6F2DAB035E
Authority key identifier: 67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/EGWj6j2byBhFs1TV5kyBNLaO_NQ.roa
Signing time: Thu 01 Jun 2023 08:45:12 +0000
ROA not before: Thu 01 Jun 2023 08:45:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54994
IP address blocks: 163.171.64.0/24 maxlen: 24
163.171.67.0/24 maxlen: 24
163.171.70.0/24 maxlen: 24
163.171.71.0/24 maxlen: 24
163.171.84.0/24 maxlen: 24
163.171.85.0/24 maxlen: 24
163.171.87.0/24 maxlen: 24
163.171.166.0/24 maxlen: 24
93.188.135.0/24 maxlen: 24
163.171.177.0/24 maxlen: 24
163.171.182.0/24 maxlen: 24
163.171.188.0/24 maxlen: 24
148.253.228.0/24 maxlen: 24
163.171.94.0/24 maxlen: 24
163.171.97.0/24 maxlen: 24
163.171.98.0/24 maxlen: 24
148.253.231.0/24 maxlen: 24
148.253.232.0/24 maxlen: 24
148.253.233.0/24 maxlen: 24
163.171.101.0/24 maxlen: 24
163.171.102.0/24 maxlen: 24
163.171.103.0/24 maxlen: 24
163.171.104.0/24 maxlen: 24
148.253.237.0/24 maxlen: 24
148.253.234.0/24 maxlen: 24
148.253.235.0/24 maxlen: 24
148.253.246.0/24 maxlen: 24
163.171.207.0/24 maxlen: 24
163.171.222.0/24 maxlen: 24
163.171.224.0/24 maxlen: 24
163.171.231.0/24 maxlen: 24
163.171.252.0/24 maxlen: 24
148.253.34.0/24 maxlen: 24
2a01:53c0:ffc6::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 12 Jun 2023 03:42:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:76:21:e2:3c:fb:1c:a7:4e:cc:4b:dd:6f:2d:ab:03:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67b5b02dc401666ee045ab90cc88817fe09d706a
Validity
Not Before: Jun 1 08:45:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1065a3ea3d9bc81845b354d5e64c8134b68efcd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:6f:75:06:6d:07:2f:7a:82:25:b6:db:69:25:
2d:6e:23:72:76:af:cf:d9:23:b6:e9:51:37:3a:58:
57:c8:93:8a:db:fe:17:ca:3b:e8:01:e3:78:00:e6:
c7:b3:f6:c5:9e:bc:33:c0:bf:8c:33:70:9a:b5:66:
07:f6:78:04:95:98:30:8a:98:e1:87:01:b6:26:15:
6e:ca:b0:45:90:0c:c7:95:a6:22:1b:d0:e7:2d:8e:
d3:a6:c0:41:c8:18:df:5e:2b:f2:40:41:de:86:65:
e6:40:28:92:4f:cd:11:81:09:ce:46:c5:ff:dd:e6:
db:ed:8d:ed:6a:bb:ad:be:74:7c:2f:cf:a4:cd:06:
2e:75:02:a1:0c:8f:0c:7b:97:c1:b0:f2:87:ae:57:
d0:a7:f4:25:bf:74:4c:47:88:d8:e7:7c:5b:6b:0c:
3d:55:82:8d:fd:d0:b6:bb:62:67:14:56:ba:a5:be:
e9:a8:96:2c:93:82:1b:a7:9b:2f:ad:1d:f2:96:1c:
1b:8a:fa:db:27:68:5d:25:2f:83:48:ed:7d:11:62:
f5:a1:fc:42:8b:cc:06:c2:9b:28:1d:32:29:1b:08:
29:e7:ef:57:4b:0e:10:a7:71:0b:7b:a9:a8:3c:89:
bc:9e:50:85:d4:84:cd:4e:36:57:bf:c2:b7:79:c1:
7c:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:65:A3:EA:3D:9B:C8:18:45:B3:54:D5:E6:4C:81:34:B6:8E:FC:D4
X509v3 Authority Key Identifier:
keyid:67:B5:B0:2D:C4:01:66:6E:E0:45:AB:90:CC:88:81:7F:E0:9D:70:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z7WwLcQBZm7gRauQzIiBf-CdcGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/EGWj6j2byBhFs1TV5kyBNLaO_NQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/64a3de-812a-4ace-814d-b5d888adfd37/1/Z7WwLcQBZm7gRauQzIiBf-CdcGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.188.135.0/24
148.253.34.0/24
148.253.228.0/24
148.253.231.0-148.253.235.255
148.253.237.0/24
148.253.246.0/24
163.171.64.0/24
163.171.67.0/24
163.171.70.0/23
163.171.84.0/23
163.171.87.0/24
163.171.94.0/24
163.171.97.0-163.171.98.255
163.171.101.0-163.171.104.255
163.171.166.0/24
163.171.177.0/24
163.171.182.0/24
163.171.188.0/24
163.171.207.0/24
163.171.222.0/24
163.171.224.0/24
163.171.231.0/24
163.171.252.0/24
IPv6:
2a01:53c0:ffc6::/48
Signature Algorithm: sha256WithRSAEncryption
5c:3b:1b:3d:81:05:a5:a1:58:c3:07:f3:6a:a9:14:fd:3c:c0:
6e:b8:7c:62:c0:a6:97:09:c7:fa:cf:10:7c:5e:29:ad:1d:e5:
08:59:e5:9a:37:d6:1a:df:0d:a7:d3:ac:7f:f7:c9:47:ef:5d:
a9:e6:b2:90:fe:5b:b2:a7:89:a9:6f:dd:77:59:97:38:4d:59:
b1:c2:c6:71:bb:b5:75:ca:71:c0:f2:f2:25:07:ce:8d:0b:33:
aa:a9:c3:f5:e5:aa:84:d1:da:86:1d:a2:2f:45:65:5e:f4:83:
55:c3:e5:b2:db:33:4f:60:40:2d:10:f7:8e:7b:2f:4f:9a:1a:
89:bd:46:19:58:79:1e:9d:e5:1f:55:9c:59:57:e3:88:7a:57:
87:13:26:61:bd:05:76:26:11:bc:d2:42:ca:e9:fe:4a:43:ee:
e8:16:f5:2a:3d:1b:2d:d4:b7:d3:4b:f4:a7:22:36:d0:97:6c:
92:a6:f4:af:97:2a:1d:63:ba:9c:62:0a:40:11:fa:d5:d2:ce:
39:8d:13:bb:f3:e6:c0:8d:f5:4c:a0:ca:90:aa:ca:0e:2f:e3:
f2:dd:09:5e:24:10:17:a3:1a:76:41:e6:d2:8a:69:f2:59:cf:
d7:83:83:77:fb:3d:93:63:3f:13:b1:3e:2b:6b:91:a3:aa:4f:
02:51:8c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:27 2024 by rpki-client on console-ams.rpki-client.org