Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eigqXxi6CO4MDi-MXGLge02w6jk.roa
File: eigqXxi6CO4MDi-MXGLge02w6jk.roa (raw, json)
Hash identifier: tWtSZuWK6VG0VO3oSQQIHnqDtSpIgs8dlZeHxPXUpeU=
Subject key identifier: 7A:28:2A:5F:18:BA:08:EE:0C:0E:2F:8C:5C:62:E0:7B:4D:B0:EA:39
Certificate issuer: /CN=86d648bdba965461b1e8c11b9dd436c61382873c
Certificate serial: 018752B9B56E43FCF88D34058B9DE5B01351
Authority key identifier: 86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eigqXxi6CO4MDi-MXGLge02w6jk.roa
Signing time: Wed 05 Apr 2023 18:41:54 +0000
ROA not before: Wed 05 Apr 2023 18:41:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199868
IP address blocks: 193.233.164.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:52:b9:b5:6e:43:fc:f8:8d:34:05:8b:9d:e5:b0:13:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86d648bdba965461b1e8c11b9dd436c61382873c
Validity
Not Before: Apr 5 18:41:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a282a5f18ba08ee0c0e2f8c5c62e07b4db0ea39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:c8:a4:ea:f4:d8:1c:df:69:ee:44:14:35:bf:
59:93:00:be:ff:7c:0a:6f:50:ec:65:af:21:b8:20:
93:05:a3:fe:5d:2e:9f:52:cc:28:5d:c8:79:f6:1b:
a5:dd:7b:a9:a7:f0:68:f3:9a:1c:a3:e2:b9:3e:ff:
5b:02:b9:94:de:c6:52:e4:dd:bd:7d:84:a2:63:ce:
eb:ae:4d:56:d4:ac:bd:80:97:2e:24:67:fe:81:a8:
4a:83:81:49:33:80:d4:0d:e8:ea:c3:96:0c:c4:c5:
e1:6d:3a:7d:f3:3a:58:4b:7a:9c:b1:2d:bd:cd:77:
0b:8c:1f:fc:57:6d:64:d3:f9:d8:95:3f:f7:3d:f2:
5e:a0:68:f8:80:a8:97:11:d9:ad:9e:c2:4f:ae:86:
4d:fb:d4:70:26:ae:63:cb:e7:59:c6:11:cc:53:5f:
e8:6e:f4:a1:59:6d:b3:56:01:8b:4f:68:28:2e:07:
6b:c6:cf:4c:57:6a:5c:83:60:a2:87:4a:cd:bc:79:
7b:d6:99:c8:59:85:78:cc:e2:1d:9b:ca:4e:52:39:
09:dd:52:30:0c:92:56:95:a6:f0:5d:66:08:53:db:
cb:f9:f1:64:95:7f:18:c5:f3:00:aa:90:68:a7:28:
16:30:c0:4a:00:c5:a2:08:f7:9c:ec:86:9f:4c:95:
85:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:28:2A:5F:18:BA:08:EE:0C:0E:2F:8C:5C:62:E0:7B:4D:B0:EA:39
X509v3 Authority Key Identifier:
keyid:86:D6:48:BD:BA:96:54:61:B1:E8:C1:1B:9D:D4:36:C6:13:82:87:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/htZIvbqWVGGx6MEbndQ2xhOChzw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/eigqXxi6CO4MDi-MXGLge02w6jk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/ac58ea-c459-48ca-b82b-4dec4dafee49/1/htZIvbqWVGGx6MEbndQ2xhOChzw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.233.164.0/24
Signature Algorithm: sha256WithRSAEncryption
52:82:d5:a6:8f:b4:b7:c8:3f:72:11:ae:fb:4a:1e:32:fd:37:
71:a1:a4:f1:3f:69:e5:ff:53:ae:23:12:1c:fa:c7:92:b3:da:
6f:98:ea:22:44:de:fc:e6:de:39:68:98:3a:3c:9c:e2:66:db:
8f:2b:82:bf:65:dd:2d:fd:d5:d6:a7:f1:fb:df:0c:a5:0f:b2:
95:38:ae:ea:2f:56:9e:14:21:5b:0f:c9:42:0f:19:f6:d9:13:
6a:8b:6e:d2:20:fc:b4:a3:24:09:82:1c:f2:9c:26:9c:31:aa:
c1:54:8f:f8:19:4d:24:f7:0b:d1:39:26:53:ce:4c:d0:ce:15:
4c:4c:50:6f:fe:ee:72:71:ad:af:c1:ea:20:4b:01:08:ed:e3:
3f:2f:63:a6:ee:2e:bc:31:ec:9b:30:56:ab:85:d3:bd:8b:9a:
cc:40:8e:9b:5e:c8:f1:15:9f:d6:eb:36:3d:26:a7:6d:fc:30:
53:d8:1d:c0:6a:03:92:61:b9:8e:a4:86:50:48:07:68:d8:e5:
d8:e5:6d:cf:48:6c:14:53:68:6c:b5:26:1c:ab:29:cb:50:0b:
b4:34:74:58:48:d6:86:e6:f3:a6:a5:f5:ff:3e:cd:67:1c:6e:
8a:66:d4:ab:d3:52:98:39:f3:da:16:a6:5b:2c:98:96:6d:d2:
07:ff:b1:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 7 12:09:01 2023 by rpki-client on console-ams.rpki-client.org