Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EgSgrDA1hW_QRNNC36PLfVCFd7o.roa
File: EgSgrDA1hW_QRNNC36PLfVCFd7o.roa (raw, json)
Hash identifier: 6GwQHrMqxZsqv9ksSoy9TybmCjJmj6mUMgQY9CQDpew=
Subject key identifier: 12:04:A0:AC:30:35:85:6F:D0:44:D3:42:DF:A3:CB:7D:50:85:77:BA
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 01877A5D36920AA5C65CC8C2FE6ED8CFA6A0
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EgSgrDA1hW_QRNNC36PLfVCFd7o.roa
Signing time: Thu 13 Apr 2023 11:25:41 +0000
ROA not before: Thu 13 Apr 2023 11:25:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207967
IP address blocks: 193.233.124.0/23 maxlen: 23
193.233.126.0/23 maxlen: 23
193.233.18.0/24 maxlen: 24
193.233.112.0/22 maxlen: 22
193.233.108.0/22 maxlen: 22
193.233.116.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7a:5d:36:92:0a:a5:c6:5c:c8:c2:fe:6e:d8:cf:a6:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 13 11:25:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1204a0ac3035856fd044d342dfa3cb7d508577ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a5:8e:42:e2:d1:ef:25:02:33:14:7e:11:e7:
53:fc:12:d3:9b:ef:66:43:e5:fb:ca:57:48:0d:d5:
e2:cb:1f:90:a3:59:fc:a1:92:e6:42:91:c3:24:67:
97:15:8c:ba:cc:22:87:8d:6b:82:37:8c:2d:bb:5d:
56:48:8a:ca:55:f2:3f:ff:40:57:61:87:7e:68:6b:
d0:3f:63:9d:76:f8:92:61:a1:ea:8e:51:0b:41:82:
2b:a0:c1:f0:33:ce:f8:78:d2:d2:72:1b:a9:3f:2b:
ec:ba:82:8c:7a:07:ed:4e:64:6a:3b:29:1d:0b:25:
54:f8:7c:73:65:33:b2:79:05:a4:2d:c4:50:5b:d1:
78:a2:94:4a:bc:b0:fd:87:8e:6f:28:9a:94:53:77:
32:07:4e:95:e8:97:4f:55:fd:e4:06:10:71:fa:55:
9b:e9:da:ec:bd:bd:73:2d:37:8e:5a:9d:0f:ee:a4:
c4:77:30:6f:2c:63:64:73:12:1c:79:6c:a4:f8:26:
39:06:1f:c2:f9:20:32:1e:14:b0:4d:aa:6e:9a:e8:
98:6f:3e:34:42:01:63:65:72:a6:72:3f:f4:dc:63:
f0:ad:3e:31:16:11:a0:7d:ed:73:97:74:3d:ea:af:
9e:4b:02:e7:fa:d2:23:f6:ed:d3:de:55:e0:27:a6:
e3:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:04:A0:AC:30:35:85:6F:D0:44:D3:42:DF:A3:CB:7D:50:85:77:BA
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/EgSgrDA1hW_QRNNC36PLfVCFd7o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.18.0/24
193.233.108.0-193.233.119.255
193.233.124.0/22
Signature Algorithm: sha256WithRSAEncryption
6c:28:23:74:1c:67:4d:d4:9e:81:d3:59:c7:d0:c5:5a:71:f1:
6a:cc:3f:e2:85:d7:89:f4:89:9c:35:fd:ec:98:17:06:76:89:
7d:ad:09:79:6f:e5:46:68:bb:d8:74:7e:3a:0b:c4:c2:2e:9a:
74:f4:66:c2:60:dc:fa:55:ea:3e:de:45:34:3c:bc:fc:28:8f:
db:b3:7f:62:3e:c1:db:40:b4:ae:d9:87:b5:7a:a4:81:9c:22:
69:e5:e0:f6:7c:8a:27:51:e9:f8:2b:0d:87:a3:dc:9a:ea:56:
b0:4c:1f:86:4e:e7:49:2c:c9:3c:2f:6e:b0:79:fb:2d:ed:c6:
e8:d9:56:d5:c7:0a:3f:69:8a:cc:42:8b:2f:a6:4f:cd:80:36:
26:15:10:d3:8e:f8:65:ea:fb:1c:5f:a6:43:4c:a6:a1:3d:9e:
c0:dc:75:d2:d3:03:2f:55:ca:22:53:fc:00:5a:d0:da:80:83:
26:0e:7b:a6:ca:fd:59:89:f0:d9:83:00:21:3c:5b:a9:83:38:
ba:a2:db:d6:b2:95:a4:ad:fc:d8:a2:bb:82:4f:a7:a0:da:2f:
ee:37:af:59:66:ae:58:68:fa:45:3f:73:f5:54:b5:e6:1b:6e:
62:a0:26:91:7d:e2:ca:eb:7f:21:8e:db:87:be:98:58:46:35:
61:e0:41:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:30 2023 by rpki-client on console-ams.rpki-client.org