Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Eb-WUMwSEpuDGGs_wGesq8des74.roa
File: Eb-WUMwSEpuDGGs_wGesq8des74.roa (raw, json)
Hash identifier: OaMduJ3ZvUFMyie4ISNBx/LEvXI8IsRtb5LKKuaIX1s=
Subject key identifier: 11:BF:96:50:CC:12:12:9B:83:18:6B:3F:C0:67:AC:AB:C7:5E:B3:BE
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01860C93CBCF91E85C001BC024DFDAB4CE4C
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Eb-WUMwSEpuDGGs_wGesq8des74.roa
Signing time: Wed 01 Feb 2023 10:44:17 +0000
ROA not before: Wed 01 Feb 2023 10:44:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206152
IP address blocks: 193.233.163.0/24 maxlen: 24
193.233.162.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:31:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:0c:93:cb:cf:91:e8:5c:00:1b:c0:24:df:da:b4:ce:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Feb 1 10:44:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11bf9650cc12129b83186b3fc067acabc75eb3be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:6c:1b:e4:74:a7:03:ba:ad:4e:01:44:ce:4b:
a8:5e:e5:10:b3:f2:5f:71:bf:43:36:69:94:3c:6d:
46:c3:94:4c:ed:65:e1:7a:1d:17:e6:48:db:39:3a:
27:72:ac:05:2e:76:be:61:9d:ca:21:ed:7f:1f:c3:
28:18:cb:88:de:3e:ae:27:2d:6c:42:8a:8b:cc:3d:
3a:1e:59:9d:1d:29:08:c4:81:1c:4d:c2:0f:4e:d1:
b1:61:aa:44:53:b2:89:6e:b3:5d:01:91:8a:28:ff:
34:4a:fa:5d:80:3c:dc:35:03:12:36:f2:7d:96:c0:
4e:49:09:ff:d0:0e:37:f6:0b:85:cf:1b:e3:cc:bb:
be:8c:99:a1:35:0f:f0:8d:87:36:7c:94:5d:b4:72:
e7:a5:c3:19:1b:38:97:cd:23:a5:90:27:d4:6d:7d:
ec:2d:36:25:3c:23:88:70:53:ac:f6:81:f5:c2:b2:
3c:a2:28:e9:23:3d:4b:7b:37:e8:a0:d8:00:e3:c9:
8c:01:cf:2c:5d:fd:07:ba:c2:9c:3d:50:33:57:b0:
6f:7a:39:46:66:f4:8a:76:57:eb:2e:8a:fb:d1:f6:
a8:80:96:78:7f:18:e8:d9:53:85:83:c1:99:dd:3a:
a2:49:75:07:52:ab:9a:31:7a:38:a3:16:18:99:b2:
fd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:BF:96:50:CC:12:12:9B:83:18:6B:3F:C0:67:AC:AB:C7:5E:B3:BE
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/Eb-WUMwSEpuDGGs_wGesq8des74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.162.0/23
Signature Algorithm: sha256WithRSAEncryption
82:e7:0b:48:42:b8:15:4e:5e:f7:25:14:b3:fb:19:21:6a:99:
8a:bb:a8:d1:9e:d6:b4:fb:d0:43:ab:bf:0d:fd:bb:b7:9c:7a:
01:d3:72:fc:a0:b8:33:9c:24:ba:a6:74:68:b1:89:16:45:0d:
58:91:aa:2f:f6:04:8c:1e:1c:b5:86:e1:d0:4b:df:18:34:36:
0b:5c:e5:b3:7b:40:4d:ba:5e:34:59:48:61:74:f9:1c:22:c1:
13:0d:69:a2:ce:6c:c0:9e:2a:80:06:20:fd:bb:27:a6:c5:63:
f0:43:25:56:7e:ca:d0:f4:f9:22:30:19:f4:94:69:f5:a7:41:
f9:a1:a8:71:a2:bd:df:4a:b9:6e:20:5e:2f:2b:4e:31:4b:e5:
18:3a:27:72:e8:c3:76:09:cb:0c:da:18:fa:70:5b:a1:fa:2e:
59:dc:3e:cb:31:b4:b1:8f:3d:e7:97:f7:ee:25:dc:02:0f:0d:
8a:e0:47:af:5d:c2:d0:09:00:01:08:92:9a:14:5f:c7:16:9d:
d3:f8:95:9d:c0:6c:62:f3:41:ce:74:4a:10:78:0a:ab:d1:62:
51:21:e3:0c:40:9e:ea:30:a9:db:1b:5f:57:09:0f:6f:fd:7e:
88:5e:6f:31:5b:e7:66:0d:d3:d9:12:01:3e:50:ea:e1:76:c1:
80:98:2b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:39 2024 by rpki-client on console-fra.rpki-client.org