Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EuglSfuFOYUGZQPHewfFsG7PPIY.roa
File: EuglSfuFOYUGZQPHewfFsG7PPIY.roa (raw, json)
Hash identifier: bp6IZDAjOpKfbEg3QnBO/D+fz8q8h9d+erCOsBYbfy8=
Subject key identifier: 12:E8:25:49:FB:85:39:85:06:65:03:C7:7B:07:C5:B0:6E:CF:3C:86
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 0187BB71F89763A475967A7BB6E0FD960BE5
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EuglSfuFOYUGZQPHewfFsG7PPIY.roa
Signing time: Wed 26 Apr 2023 02:43:41 +0000
ROA not before: Wed 26 Apr 2023 02:43:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6079
IP address blocks: 155.193.16.0/20 maxlen: 20
155.193.128.0/17 maxlen: 17
155.193.56.0/21 maxlen: 21
192.46.184.0/22 maxlen: 22
192.46.184.0/21 maxlen: 21
192.46.188.0/24 maxlen: 24
192.46.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:bb:71:f8:97:63:a4:75:96:7a:7b:b6:e0:fd:96:0b:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Apr 26 02:43:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12e82549fb853985066503c77b07c5b06ecf3c86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:18:45:e5:aa:f4:a0:49:dc:2d:b0:18:40:8d:
64:85:e7:fa:6b:69:fd:a9:c6:af:db:0b:72:28:fb:
cb:e5:31:03:d9:03:e0:fd:68:60:f1:7b:d9:72:5b:
bb:99:60:21:e8:4b:41:52:f2:3f:bd:c0:7f:db:2e:
84:92:06:aa:57:c8:f7:0f:16:a8:f0:92:aa:11:3b:
ae:50:85:71:55:8c:7c:05:96:d4:4a:09:fb:38:4d:
48:f0:92:f6:04:d3:a5:95:db:7b:86:c5:01:e9:80:
d2:9b:aa:de:01:83:ea:4a:de:d8:95:93:16:95:d9:
53:51:ca:a7:48:1a:29:11:76:a3:b6:cf:29:8f:25:
15:c3:da:a0:9f:c0:f6:d1:91:cf:3f:46:e5:86:e9:
5e:54:e8:99:6b:96:2a:83:34:5e:b3:a0:46:0e:5f:
ff:72:b9:94:06:d6:f1:b7:09:f2:43:94:bc:81:71:
21:1c:e0:65:70:c5:84:d0:61:82:00:3c:05:a4:b4:
aa:72:7f:0d:aa:5a:e2:91:ad:c7:a3:8b:be:4b:92:
3e:3b:98:e8:4a:c0:d0:3b:c3:2e:e1:e4:da:d3:5b:
6a:c3:d1:da:ff:0e:ea:6c:bd:0d:98:2c:60:0c:c9:
7d:96:9f:cf:bd:75:cf:70:c6:8e:06:95:cd:be:f3:
fe:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:E8:25:49:FB:85:39:85:06:65:03:C7:7B:07:C5:B0:6E:CF:3C:86
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/EuglSfuFOYUGZQPHewfFsG7PPIY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.193.16.0/20
155.193.56.0/21
155.193.128.0/17
192.46.184.0/21
192.46.200.0/22
Signature Algorithm: sha256WithRSAEncryption
77:aa:31:4a:38:30:54:2e:6c:c5:db:6d:08:e3:55:fd:df:31:
31:3e:7a:9b:c4:f2:b2:37:db:3f:e3:13:0f:40:5b:33:25:f2:
f3:32:2f:d8:6b:fd:ad:c5:97:81:19:89:be:e7:fb:fd:99:b0:
7c:30:e4:3a:3c:b5:aa:4a:86:25:27:cf:0b:cc:df:b0:c9:a8:
95:6b:36:6f:20:6a:9e:19:5b:8f:16:d9:bf:d3:b5:2f:00:49:
37:0a:fd:0b:e7:0b:e9:df:d1:05:14:8f:b9:e4:71:2c:40:bc:
87:40:b2:4f:dc:a6:4c:cb:6e:a9:db:6d:e9:61:f8:70:08:ac:
dd:f0:d4:f6:7e:00:53:d3:6a:41:0c:04:36:1b:a6:9f:fc:27:
3e:17:83:e8:bb:05:bc:d6:48:57:ac:99:cd:9e:2e:88:5a:02:
2e:7e:a5:62:18:7c:e3:8d:12:5d:85:32:b7:82:0e:ed:d1:18:
98:43:78:a6:95:63:6e:ce:70:02:54:e4:93:fe:c0:0c:71:23:
da:8d:84:c3:c2:4e:c8:8d:af:00:d9:95:a7:10:a0:77:e2:09:
3f:bf:39:0e:7f:da:61:50:96:5f:ec:c8:a8:e0:ce:09:a8:d1:
0b:f2:21:f7:c1:1b:4f:2c:83:fc:03:a3:7c:2c:d5:34:74:94:
6c:a1:26:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:01:40 2023 by rpki-client on console-ams.rpki-client.org