Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/e6cefwzlv3wDnwZ0XyNiacxEKZ4.roa
File: e6cefwzlv3wDnwZ0XyNiacxEKZ4.roa (raw, json)
Hash identifier: tPc59vMJlMQKoz2EMEHN2eqCesmyqXbeZFElsq9b1W8=
Subject key identifier: 7B:A7:1E:7F:0C:E5:BF:7C:03:9F:06:74:5F:23:62:69:CC:44:29:9E
Certificate issuer: /CN=046ca7b604ec08f6f54b0e748906547dd375674d
Certificate serial: 018B85E4571B669364D48E44279818C121F9
Authority key identifier: 04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/e6cefwzlv3wDnwZ0XyNiacxEKZ4.roa
Signing time: Tue 31 Oct 2023 13:20:15 +0000
ROA not before: Tue 31 Oct 2023 13:20:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206436
IP address blocks: 193.202.96.0/21 maxlen: 24
193.202.104.0/24 maxlen: 24
185.223.52.0/24 maxlen: 24
2a10:8581::/48 maxlen: 48
2a10:8581:1::/48 maxlen: 48
2a10:8580::/48 maxlen: 48
2a10:8580:1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:85:e4:57:1b:66:93:64:d4:8e:44:27:98:18:c1:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=046ca7b604ec08f6f54b0e748906547dd375674d
Validity
Not Before: Oct 31 13:20:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ba71e7f0ce5bf7c039f06745f236269cc44299e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:6d:b2:0b:0a:64:b1:9e:d6:56:72:13:90:cf:
68:0d:5a:6c:d7:db:1d:f4:fc:a8:4f:ae:64:81:82:
e4:a3:46:2c:45:73:42:aa:34:57:c2:59:f2:f8:8f:
c5:c2:22:9b:a1:46:26:a5:c6:15:9b:9b:65:49:d4:
75:48:c7:53:bd:9b:c9:2e:90:24:9f:3f:ea:79:13:
82:12:2d:8f:d7:de:5f:73:74:24:ab:22:f5:7d:c1:
19:20:c9:58:6a:cf:b9:ab:67:d2:9f:2e:30:bd:2f:
9c:f2:9a:f0:32:90:84:d9:42:2e:26:ad:f3:b6:4d:
e9:53:c5:d5:70:e9:57:0a:31:71:32:98:0d:d3:27:
e8:61:0b:b3:f4:40:a1:20:61:39:e2:b1:ac:27:9b:
3e:dc:a8:b2:19:00:5c:7e:62:8c:9c:88:84:eb:fe:
f1:8e:90:09:59:4a:5d:42:91:08:03:1d:19:bc:a1:
0a:c4:7f:03:23:9d:a6:45:67:a8:c8:3c:6f:84:15:
e9:97:0e:4a:ee:c8:4e:b5:c9:95:3b:b4:ae:2f:97:
1f:3a:87:3c:17:93:ac:ef:d5:b6:aa:cc:0f:9e:6d:
62:27:bb:3d:79:2a:de:41:75:29:9b:6f:1c:5e:b5:
30:93:b2:a9:20:0d:1e:76:47:cc:00:7b:ed:12:26:
e1:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A7:1E:7F:0C:E5:BF:7C:03:9F:06:74:5F:23:62:69:CC:44:29:9E
X509v3 Authority Key Identifier:
keyid:04:6C:A7:B6:04:EC:08:F6:F5:4B:0E:74:89:06:54:7D:D3:75:67:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BGyntgTsCPb1Sw50iQZUfdN1Z00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/e6cefwzlv3wDnwZ0XyNiacxEKZ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/392ea5-9ca8-4b0f-9388-093961d38c86/1/BGyntgTsCPb1Sw50iQZUfdN1Z00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.52.0/24
193.202.96.0-193.202.104.255
IPv6:
2a10:8580::/47
2a10:8581::/47
Signature Algorithm: sha256WithRSAEncryption
70:48:c7:a4:03:b0:a5:4c:59:3d:a4:0a:c3:55:b6:bf:41:40:
09:8c:27:ec:de:ae:67:21:e8:4f:0d:6a:d2:4c:2e:46:a4:28:
84:cc:d8:b4:7d:1d:1e:db:05:62:f5:92:6f:4a:2a:a0:82:01:
29:57:f1:fc:31:4e:fb:32:c9:15:61:86:ef:61:59:f8:41:f8:
61:b8:25:47:a8:94:eb:20:2b:6d:18:91:9c:51:4f:4d:3c:d7:
ec:43:34:17:90:0c:8a:68:fb:c9:b1:d8:84:5a:ee:90:6e:32:
2c:7a:f4:24:00:5e:5f:ed:48:9f:b6:81:02:1c:ff:05:05:6a:
0a:fd:70:83:d8:10:a2:55:e9:c7:b3:d7:b5:bf:1b:ae:47:39:
ed:74:62:5c:f2:32:61:c9:d3:09:37:c6:9a:d0:00:00:2b:58:
34:57:fc:e2:b2:22:7b:97:f0:99:e1:6e:8b:78:72:e4:29:ae:
65:71:35:d4:bc:f4:fc:c1:bd:cf:f9:ef:17:2e:2a:ee:8f:76:
60:5d:79:d5:b0:85:61:81:66:56:6c:c5:e8:13:e1:a6:27:4f:
a2:05:77:18:af:47:9e:23:c1:1f:47:dd:6e:fe:76:b9:64:59:
50:63:41:1c:0c:a6:dd:ca:76:9c:c5:61:35:89:23:fa:fe:34:
f6:c3:7e:ed
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgISAYuF5FcbZpNk1I5EJ5gYwSH5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA0NmNhN2I2MDRlYzA4ZjZmNTRiMGU3NDg5MDY1NDdkZDM3
NTY3NGQwHhcNMjMxMDMxMTMyMDE1WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3YmE3MWU3ZjBjZTViZjdjMDM5ZjA2NzQ1ZjIzNjI2OWNjNDQyOTllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsG2yCwpksZ7WVnITkM9oDVps19sd
9PyoT65kgYLko0YsRXNCqjRXwlny+I/FwiKboUYmpcYVm5tlSdR1SMdTvZvJLpAk
nz/qeROCEi2P195fc3QkqyL1fcEZIMlYas+5q2fSny4wvS+c8prwMpCE2UIuJq3z
tk3pU8XVcOlXCjFxMpgN0yfoYQuz9EChIGE54rGsJ5s+3KiyGQBcfmKMnIiE6/7x
jpAJWUpdQpEIAx0ZvKEKxH8DI52mRWeoyDxvhBXplw5K7shOtcmVO7SuL5cfOoc8
F5Os79W2qswPnm1iJ7s9eSreQXUpm28cXrUwk7KpIA0edkfMAHvtEibhDwIDAQAB
o4ICMTCCAi0wHQYDVR0OBBYEFHunHn8M5b98A58GdF8jYmnMRCmeMB8GA1UdIwQY
MBaAFARsp7YE7Aj29UsOdIkGVH3TdWdNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgt
MDkzOTYxZDM4Yzg2LzEvZTZjZWZ3emx2M3dEbndaMFh5TmlhY3hFS1o0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8zOTJlYTUtOWNhOC00YjBmLTkzODgtMDkzOTYxZDM4Yzg2
LzEvQkd5bnRnVHNDUGIxU3c1MGlRWlVmZE4xWjAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEcGCCsGAQUFBwEHAQH/BDgwNjAaBAIAATAUAwQAud80MAwD
BAXBymADBADBymgwGAQCAAIwEgMHASoQhYAAAAMHASoQhYEAADANBgkqhkiG9w0B
AQsFAAOCAQEAcEjHpAOwpUxZPaQKw1W2v0FACYwn7N6uZyHoTw1q0kwuRqQohMzY
tH0dHtsFYvWSb0oqoIIBKVfx/DFO+zLJFWGG72FZ+EH4YbglR6iU6yArbRiRnFFP
TTzX7EM0F5AMimj7ybHYhFrukG4yLHr0JABeX+1In7aBAhz/BQVqCv1wg9gQolXp
x7PXtb8brkc57XRiXPIyYcnTCTfGmtAAACtYNFf84rIie5fwmeFui3hy5CmuZXE1
1Lz0/MG9z/nvFy4q7o92YF151bCFYYFmVmzF6BPhpidPogV3GK9HniPBH0fdbv52
uWRZUGNBHAym3cp2nMVhNYkj+v409sN+7Q==
-----END CERTIFICATE-----
Generated at Tue Jan 2 04:09:33 2024 by rpki-client on console-ams.rpki-client.org