Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bEG86xoKNkGwTotIIc8OeguyJLA.roa
File: bEG86xoKNkGwTotIIc8OeguyJLA.roa (raw, json)
Hash identifier: CXJTTMIDGMiUqT/Jf387sq9roy+f+VWg2hBKqH+iLIQ=
Subject key identifier: 6C:41:BC:EB:1A:0A:36:41:B0:4E:8B:48:21:CF:0E:7A:0B:B2:24:B0
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01890C85BA4335834923132CC2E65C0248FC
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bEG86xoKNkGwTotIIc8OeguyJLA.roa
Signing time: Fri 30 Jun 2023 13:37:17 +0000
ROA not before: Fri 30 Jun 2023 13:37:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49392
IP address blocks: 193.124.226.0/24 maxlen: 24
194.87.221.0/24 maxlen: 24
193.124.36.0/24 maxlen: 24
193.124.254.0/24 maxlen: 24
194.135.32.0/24 maxlen: 24
195.133.26.0/23 maxlen: 24
192.124.176.0/24 maxlen: 24
212.192.13.0/24 maxlen: 24
195.133.52.0/23 maxlen: 23
195.133.56.0/22 maxlen: 22
195.133.59.0/24 maxlen: 24
194.87.118.0/23 maxlen: 24
195.133.10.0/23 maxlen: 23
195.133.6.0/23 maxlen: 23
185.72.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:85:ba:43:35:83:49:23:13:2c:c2:e6:5c:02:48:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jun 30 13:37:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6c41bceb1a0a3641b04e8b4821cf0e7a0bb224b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:b8:0c:07:2e:b4:80:27:d4:84:89:cb:49:1e:
2a:5e:33:82:b2:d9:48:92:36:09:05:bc:3a:38:11:
fb:bc:b8:38:e3:77:50:57:a6:fa:4a:36:88:84:40:
02:89:36:7a:2b:49:b4:78:b2:1c:49:3c:f6:cf:14:
66:6e:7e:6c:7f:f7:40:55:29:66:a6:1f:e3:64:f9:
32:a7:ae:78:ed:d2:43:56:65:4f:ed:f1:14:64:97:
69:ff:09:3c:2c:57:57:ee:6f:20:d5:40:d0:79:93:
48:23:69:d3:48:47:82:b9:39:84:b5:a4:0f:28:f7:
da:27:1a:cb:8c:70:ee:ae:b5:49:dc:80:ab:76:f6:
af:0a:0b:b7:3a:bd:f0:41:4d:b0:bd:88:7c:1b:f8:
26:5d:5d:92:51:4f:b8:d7:b0:61:3f:ac:37:8c:f0:
3f:a6:58:85:da:84:09:52:5f:70:d8:16:eb:a2:ea:
ad:31:a0:8e:cc:f8:fc:df:6a:3c:b2:b2:8d:75:39:
92:aa:6c:1a:ed:2c:fc:64:d3:c5:10:98:24:bf:81:
32:31:0a:28:81:04:81:1f:1a:a9:42:ca:25:b5:0e:
8a:0c:d1:10:e1:f0:e8:dc:ed:6c:75:bd:78:3a:c8:
9f:da:0e:72:25:5d:ac:bb:81:84:54:88:f1:87:48:
d1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:41:BC:EB:1A:0A:36:41:B0:4E:8B:48:21:CF:0E:7A:0B:B2:24:B0
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/bEG86xoKNkGwTotIIc8OeguyJLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.72.10.0/24
192.124.176.0/24
193.124.36.0/24
193.124.226.0/24
193.124.254.0/24
194.87.118.0/23
194.87.221.0/24
194.135.32.0/24
195.133.6.0/23
195.133.10.0/23
195.133.26.0/23
195.133.52.0/23
195.133.56.0/22
212.192.13.0/24
Signature Algorithm: sha256WithRSAEncryption
54:7e:a0:d1:b5:8e:22:ae:84:06:f7:e1:a9:11:4f:b7:65:62:
c6:f1:a5:26:73:df:7d:46:a1:85:2f:6b:44:b2:69:4e:f7:aa:
29:93:53:85:d6:df:d2:6d:d8:e2:c1:bb:1f:c2:32:1f:8f:e3:
16:8d:a7:c0:dd:58:96:46:55:ba:02:2e:9b:40:1d:ab:5c:a5:
6b:5f:3f:e7:56:51:fa:67:9a:3b:0c:9f:f2:24:e7:2f:c0:72:
13:0c:44:72:1e:b7:b5:4c:b4:41:55:a8:cf:66:1c:d8:dc:86:
47:58:f6:34:98:95:70:ed:bc:c0:7a:ac:83:c7:ed:c3:92:fe:
0c:ce:bf:d8:f5:7a:5b:51:53:27:eb:0e:20:71:40:f8:12:39:
a0:78:03:7e:26:ba:aa:00:f3:c0:18:a6:83:af:54:cb:b7:84:
0d:7c:d0:66:87:bb:b6:5f:a6:7c:48:ef:ba:b5:fc:a5:2d:4e:
7f:36:c1:a2:24:84:0b:c2:36:57:5d:78:a5:32:90:a8:12:c4:
7f:2d:91:7a:12:96:22:6a:3e:55:db:ab:41:55:16:30:c2:58:
e2:96:a1:35:a9:3b:c7:e3:d0:e2:ff:a4:73:bf:a0:f1:f0:d6:
0d:3f:ed:19:ed:1d:b9:fc:31:bd:8f:14:ae:9b:13:d8:1d:5d:
27:00:0c:3f
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAYkMhbpDNYNJIxMswuZcAkj8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjMwNjMwMTMzNzE3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg2YzQxYmNlYjFhMGEzNjQxYjA0ZThiNDgyMWNmMGU3YTBiYjIyNGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAirgMBy60gCfUhInLSR4qXjOCstlI
kjYJBbw6OBH7vLg443dQV6b6SjaIhEACiTZ6K0m0eLIcSTz2zxRmbn5sf/dAVSlm
ph/jZPkyp6547dJDVmVP7fEUZJdp/wk8LFdX7m8g1UDQeZNII2nTSEeCuTmEtaQP
KPfaJxrLjHDurrVJ3ICrdvavCgu3Or3wQU2wvYh8G/gmXV2SUU+417BhP6w3jPA/
pliF2oQJUl9w2BbrouqtMaCOzPj832o8srKNdTmSqmwa7Sz8ZNPFEJgkv4EyMQoo
gQSBHxqpQsoltQ6KDNEQ4fDo3O1sdb14Osif2g5yJV2su4GEVIjxh0jRaQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFGxBvOsaCjZBsE6LSCHPDnoLsiSwMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvYkVHODZ4b0tOa0d3VG90SUljOE9lZ3V5SkxBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAATBUAwQAuUgKAwQA
wHywAwQAwXwkAwQAwXziAwQAwXz+AwQBwld2AwQAwlfdAwQAwocgAwQBw4UGAwQB
w4UKAwQBw4UaAwQBw4U0AwQCw4U4AwQA1MANMA0GCSqGSIb3DQEBCwUAA4IBAQBU
fqDRtY4iroQG9+GpEU+3ZWLG8aUmc999RqGFL2tEsmlO96opk1OF1t/Sbdjiwbsf
wjIfj+MWjafA3ViWRlW6Ai6bQB2rXKVrXz/nVlH6Z5o7DJ/yJOcvwHITDERyHre1
TLRBVajPZhzY3IZHWPY0mJVw7bzAeqyDx+3Dkv4Mzr/Y9XpbUVMn6w4gcUD4Ejmg
eAN+JrqqAPPAGKaDr1TLt4QNfNBmh7u2X6Z8SO+6tfylLU5/NsGiJIQLwjZXXXil
MpCoEsR/LZF6EpYiaj5V26tBVRYwwljilqE1qTvH49Di/6Rzv6Dx8NYNP+0Z7R25
/DG9jxSumxPYHV0nAAw/
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:01 2023 by rpki-client on console-ams.rpki-client.org