Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EByKXRdQlhq8IYAZ_v2ABmuA814.roa
File: EByKXRdQlhq8IYAZ_v2ABmuA814.roa (raw, json)
Hash identifier: lDM3iSvw1UEUm6sls0X6uEkBLuXOkIJFS4kvJjVracQ=
Subject key identifier: 10:1C:8A:5D:17:50:96:1A:BC:21:80:19:FE:FD:80:06:6B:80:F3:5E
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018AD5A4942CF377F407174ABF791615A4DB
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EByKXRdQlhq8IYAZ_v2ABmuA814.roa
Signing time: Wed 27 Sep 2023 07:57:27 +0000
ROA not before: Wed 27 Sep 2023 07:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200482
IP address blocks: 212.193.28.0/24 maxlen: 24
195.133.81.0/24 maxlen: 24
212.192.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d5:a4:94:2c:f3:77:f4:07:17:4a:bf:79:16:15:a4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 27 07:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=101c8a5d1750961abc218019fefd80066b80f35e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:5d:9f:ee:58:fd:a6:55:fb:a6:2a:4b:10:ac:
37:98:92:97:61:94:a0:a0:4c:34:fd:a4:11:b7:41:
9e:1c:be:86:fa:c1:ac:2f:8b:ad:bf:bd:bf:fc:3d:
35:ec:d1:6e:58:7c:fc:4f:53:25:47:80:b6:24:dd:
08:ae:08:6c:b6:33:2d:29:62:42:d9:3e:c9:93:5c:
17:cb:87:75:29:cc:68:2f:55:f9:ac:c6:ea:93:da:
46:5f:a3:d4:01:b1:2f:3e:af:69:de:9d:e9:94:00:
f1:56:66:aa:dd:f4:30:28:3b:b8:a4:e6:79:34:f8:
e6:53:7c:b1:2b:27:5c:19:52:6e:5a:61:93:0d:2c:
64:fb:3b:f8:02:6a:27:92:29:38:9c:44:7f:e8:54:
ee:b4:2b:a3:10:cf:cc:a4:c2:29:05:8e:9f:b2:27:
69:bc:42:0c:f2:f6:4d:eb:d2:b2:91:85:c8:1f:6c:
9c:1f:ee:3e:78:a1:0d:ab:bf:9f:29:0e:0d:3f:9b:
01:9d:8a:f7:b6:0d:5f:3b:3e:5b:6c:26:4f:5f:27:
63:de:e2:fc:b2:3a:ba:bb:ac:1d:21:73:b2:cd:a9:
e5:7c:8f:30:d6:4c:b4:59:e0:fc:85:44:26:7c:38:
cf:bf:e9:e1:37:6d:4c:0d:22:29:b9:33:01:b0:94:
c2:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:1C:8A:5D:17:50:96:1A:BC:21:80:19:FE:FD:80:06:6B:80:F3:5E
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/EByKXRdQlhq8IYAZ_v2ABmuA814.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.133.81.0/24
212.192.214.0/24
212.193.28.0/24
Signature Algorithm: sha256WithRSAEncryption
82:97:35:a7:59:91:a8:49:b4:8f:a4:4e:0b:94:6f:83:ce:18:
0e:1c:67:c8:9f:24:a7:ad:80:71:74:d0:c1:e0:61:49:cd:7d:
4e:fd:dc:35:83:ec:a1:1c:62:eb:d4:f9:bd:cf:46:87:be:92:
49:35:06:3a:f9:a0:31:4d:9f:da:76:4a:2c:df:87:00:d9:ad:
1d:87:bc:69:3f:9f:46:12:4d:8e:b8:02:5a:fd:ea:db:33:1f:
08:82:24:53:65:6f:e4:34:31:b7:be:d5:2c:a3:c7:30:05:46:
73:3b:d7:5e:7f:f2:37:a1:5c:a7:82:b1:1e:44:55:39:3a:41:
de:23:9d:f2:01:e6:a6:cb:ee:d8:de:a7:6c:20:5c:48:1b:ff:
c8:15:af:24:39:a4:5b:4e:b2:f3:fe:28:30:1e:3c:b8:8d:c6:
6c:b8:5a:6e:05:3a:11:d0:1d:e4:1f:15:ae:c1:76:ae:9c:df:
86:a8:65:23:0f:06:08:94:eb:92:54:77:6a:bc:d5:ce:56:d1:
64:91:80:68:a0:6c:4c:5f:93:18:d9:2b:98:a6:c0:79:70:c6:
48:91:60:78:50:2d:8f:c4:2a:61:7c:e6:fa:33:ce:ee:a2:e9:
49:99:84:ac:0a:49:f5:80:ee:92:e3:95:26:96:e3:56:7d:c1:
28:46:34:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 9 07:53:45 2023 by rpki-client on console-ams.rpki-client.org