Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eVzaAy92e5YKLkIVZzxQbbzNpzE.roa
File: eVzaAy92e5YKLkIVZzxQbbzNpzE.roa (raw, json)
Hash identifier: v0lIiedlbvbpaVBWehMsgJrVuvHiTsA7br6Y9Lsb1Sk=
Subject key identifier: 79:5C:DA:03:2F:76:7B:96:0A:2E:42:15:67:3C:50:6D:BC:CD:A7:31
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 0187BCFD7C2612DD36C55D350330DD442B7E
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eVzaAy92e5YKLkIVZzxQbbzNpzE.roa
Signing time: Wed 26 Apr 2023 09:55:41 +0000
ROA not before: Wed 26 Apr 2023 09:55:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50738
IP address blocks: 193.233.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bc:fd:7c:26:12:dd:36:c5:5d:35:03:30:dd:44:2b:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 26 09:55:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=795cda032f767b960a2e4215673c506dbccda731
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ae:f8:1e:14:37:8c:0a:3f:64:d9:07:5e:75:
cd:14:39:17:9f:9c:dc:84:57:17:d0:e6:2a:d5:62:
d2:83:ca:b1:ad:e6:51:61:4a:38:22:fa:8b:ee:b3:
17:d3:e7:29:7f:ed:74:75:44:82:ca:15:50:da:e7:
b6:65:b5:e2:ab:65:61:f9:d2:4d:67:d9:8c:96:8a:
41:77:d1:0f:2b:25:e3:62:f6:e5:bc:00:44:b1:0f:
f9:42:11:4e:3a:e5:03:e8:05:86:b8:4d:4a:7e:f6:
05:85:05:b9:98:65:1b:05:2d:85:28:bc:5c:fc:73:
be:5f:33:eb:df:7d:36:1d:7a:89:28:94:5a:c6:2f:
50:96:92:b6:ae:2b:39:59:09:a1:1a:88:a1:ca:8a:
4f:0f:61:7e:11:24:dd:fa:ad:94:07:ce:71:c8:cb:
ef:d2:02:71:83:d5:b3:4e:bb:80:4f:52:4f:b2:46:
88:f5:7e:c1:9c:a9:e1:c6:f6:ae:1e:29:b0:4a:0c:
65:88:71:8c:77:a8:e9:12:9c:10:79:9c:fe:b3:9b:
d4:95:ab:32:c5:f5:36:5d:f3:51:c6:18:1c:33:61:
9d:0a:9a:52:2e:d3:f4:ff:b1:e1:ad:50:80:99:74:
0f:f0:99:7b:15:24:0d:7f:cc:a6:cf:01:b3:ee:48:
76:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:5C:DA:03:2F:76:7B:96:0A:2E:42:15:67:3C:50:6D:BC:CD:A7:31
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eVzaAy92e5YKLkIVZzxQbbzNpzE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.18.0/24
Signature Algorithm: sha256WithRSAEncryption
39:88:00:36:be:47:04:0f:9b:17:eb:5f:8f:75:f5:a8:5d:f6:
34:aa:5f:fc:b2:ec:95:8a:bb:16:e1:47:8c:62:ad:7d:dd:3e:
c3:2a:62:70:d3:ad:ea:76:65:31:f3:d7:86:64:f3:18:b3:ff:
02:00:5f:61:b9:bb:21:28:ce:1e:06:87:ad:90:61:99:ed:d3:
18:7d:e4:f6:07:ff:ff:6a:34:8e:41:c8:1a:2a:9e:cf:3e:a6:
64:99:a1:d6:d0:ea:55:41:16:5b:a9:68:c6:72:01:b7:73:ae:
eb:b0:92:96:da:f5:5b:8c:7e:f8:8f:82:12:4d:fb:c6:1c:7b:
46:90:21:18:f1:4a:6d:d7:8c:48:a7:26:3d:2c:1a:26:35:68:
ac:e1:56:14:de:61:44:30:18:df:93:63:4f:8c:e4:85:88:95:
4a:50:d9:b9:59:b7:93:14:29:61:2a:1e:d9:aa:28:98:6e:9a:
e7:b5:e2:8d:a0:42:51:b3:1f:1f:22:05:d6:13:ed:d0:5f:80:
aa:96:8e:80:7d:9e:07:c4:f3:67:57:f8:78:5f:da:3c:c7:b8:
ac:7a:e4:fe:8c:50:cb:b0:0a:92:a2:66:3f:54:72:04:64:02:
1d:61:b6:13:47:20:e5:20:f2:59:51:c9:55:6e:cb:60:b0:e1:
f1:c2:ae:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:31 2023 by rpki-client on console-ams.rpki-client.org