Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/EeEwkUuWevmD-bvrwEFaMW0G30E.roa
File: EeEwkUuWevmD-bvrwEFaMW0G30E.roa (raw, json)
Hash identifier: azOi4GQT2xNfJIGZqR7chvWJDIEJ8Yp3m+m7LQF8g/U=
Subject key identifier: 11:E1:30:91:4B:96:7A:F9:83:F9:BB:EB:C0:41:5A:31:6D:06:DF:41
Certificate issuer: /CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Certificate serial: 0189EF9A4647335ED1462A3FD7F6AFE358B2
Authority key identifier: 54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/EeEwkUuWevmD-bvrwEFaMW0G30E.roa
Signing time: Sun 13 Aug 2023 15:53:32 +0000
ROA not before: Sun 13 Aug 2023 15:53:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201684
IP address blocks: 193.203.254.0/24 maxlen: 24
185.64.24.0/24 maxlen: 24
185.64.26.0/24 maxlen: 24
185.64.27.0/24 maxlen: 24
185.64.25.0/24 maxlen: 24
2a03:11a0:1::/48 maxlen: 48
Validation: Failed, certificate revoked on Wed 20 Dec 2023 17:01:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:ef:9a:46:47:33:5e:d1:46:2a:3f:d7:f6:af:e3:58:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a31ab033cfd2dee6852fa9d8bf5a4a0e352414
Validity
Not Before: Aug 13 15:53:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11e130914b967af983f9bbebc0415a316d06df41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:79:18:14:fc:24:37:d2:3a:b1:1c:8e:aa:e1:
ad:d9:98:61:31:1f:77:bd:d7:05:23:23:0b:39:26:
36:b0:8f:0b:18:90:e3:66:62:b5:3f:8f:74:43:24:
14:7f:21:81:5c:e9:09:23:f0:48:9c:f3:63:0d:9b:
e1:c1:aa:7e:34:d2:00:1f:0e:78:3a:45:0c:4e:58:
a5:00:af:c6:83:fc:97:c5:ee:09:9f:c0:27:3e:90:
f3:f7:43:58:f0:17:ea:7f:73:f1:90:46:1a:5e:a9:
e4:df:5b:f0:88:ce:e8:e4:aa:ce:38:c1:5f:8d:27:
63:d0:b3:bf:ef:6f:f3:fb:1f:c4:3e:06:0b:0c:5d:
3f:35:0e:27:64:e6:3e:65:7a:08:90:5c:7a:d5:f2:
cc:18:dc:74:12:be:27:39:b7:0c:92:2e:30:17:ac:
16:77:4f:4c:98:ed:cc:c2:45:67:b2:4f:08:cb:58:
db:7b:69:e4:96:53:35:54:e7:6b:8c:7f:bd:24:8a:
4b:ed:97:82:8e:24:c6:43:5f:4c:f5:7b:ce:46:5d:
8c:d5:05:c8:a3:dc:42:a1:f7:c4:7b:ed:9a:c1:a4:
44:5f:1a:9f:2b:e0:e5:8e:cc:22:f7:ce:54:86:89:
3e:37:de:f3:63:5d:8d:f7:7a:cd:14:5e:55:49:8d:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:E1:30:91:4B:96:7A:F9:83:F9:BB:EB:C0:41:5A:31:6D:06:DF:41
X509v3 Authority Key Identifier:
keyid:54:A3:1A:B0:33:CF:D2:DE:E6:85:2F:A9:D8:BF:5A:4A:0E:35:24:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKMasDPP0t7mhS-p2L9aSg41JBQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/EeEwkUuWevmD-bvrwEFaMW0G30E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/080361-1bbe-4763-800b-619c26194168/1/VKMasDPP0t7mhS-p2L9aSg41JBQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.24.0/22
193.203.254.0/24
IPv6:
2a03:11a0:1::/48
Signature Algorithm: sha256WithRSAEncryption
27:0e:e7:d4:f1:b5:a5:e3:f2:4c:e2:20:ea:7a:2e:28:88:2d:
25:23:8e:60:0b:49:49:40:c2:c0:9e:7f:59:b3:38:bb:aa:6a:
a4:9e:23:64:9d:76:b5:66:89:30:9a:5a:ac:6b:0b:79:ae:70:
13:60:2f:77:a2:52:79:b4:0e:cd:d6:98:a0:3b:ec:1c:cf:1a:
7e:b2:1f:a0:c2:7c:29:75:f9:a2:89:f1:78:37:17:ff:49:a6:
a9:04:26:cd:96:0f:b5:73:8b:fe:0d:b0:43:4d:df:e9:23:ef:
48:64:46:ef:75:87:51:d7:5f:af:1f:b4:73:a1:65:29:7d:47:
7e:43:87:17:83:d9:c5:60:a2:91:03:ec:da:c7:8c:4b:21:f1:
07:31:d1:e5:12:12:9f:cc:8c:60:80:21:9d:b5:f8:52:cc:bc:
73:b9:64:af:a8:f2:62:54:c0:88:1e:52:20:6c:29:d1:0b:9a:
99:41:0a:49:92:56:e5:2a:fd:3a:1b:02:2a:1a:b1:81:c1:61:
d9:9f:88:92:9c:f8:86:61:85:34:47:53:35:70:94:65:00:24:
40:76:26:3e:4e:85:45:2a:dd:15:0e:a2:7e:e5:cf:81:8d:66:
4c:4c:48:1f:b6:3d:92:50:e8:4a:86:65:f3:79:60:c5:15:80:
23:77:a9:de
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYnvmkZHM17RRio/1/av41iyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTMxYWIwMzNjZmQyZGVlNjg1MmZhOWQ4YmY1YTRhMGUz
NTI0MTQwHhcNMjMwODEzMTU1MzMyWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMWUxMzA5MTRiOTY3YWY5ODNmOWJiZWJjMDQxNWEzMTZkMDZkZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHkYFPwkN9I6sRyOquGt2ZhhMR93
vdcFIyMLOSY2sI8LGJDjZmK1P490QyQUfyGBXOkJI/BInPNjDZvhwap+NNIAHw54
OkUMTlilAK/Gg/yXxe4Jn8AnPpDz90NY8Bfqf3PxkEYaXqnk31vwiM7o5KrOOMFf
jSdj0LO/72/z+x/EPgYLDF0/NQ4nZOY+ZXoIkFx61fLMGNx0Er4nObcMki4wF6wW
d09MmO3MwkVnsk8Iy1jbe2nkllM1VOdrjH+9JIpL7ZeCjiTGQ19M9XvORl2M1QXI
o9xCoffEe+2awaREXxqfK+Dljswi985Uhok+N97zY12N93rNFF5VSY2yuwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFBHhMJFLlnr5g/m768BBWjFtBt9BMB8GA1UdIwQY
MBaAFFSjGrAzz9Le5oUvqdi/WkoONSQUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGIt
NjE5YzI2MTk0MTY4LzEvRWVFd2tVdVdldm1ELWJ2cndFRmFNVzBHMzBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wODAzNjEtMWJiZS00NzYzLTgwMGItNjE5YzI2MTk0MTY4
LzEvVktNYXNEUFAwdDdtaFMtcDJMOWFTZzQxSkJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQCuUAYAwQA
wcv+MA8EAgACMAkDBwAqAxGgAAEwDQYJKoZIhvcNAQELBQADggEBACcO59TxtaXj
8kziIOp6LiiILSUjjmALSUlAwsCef1mzOLuqaqSeI2SddrVmiTCaWqxrC3mucBNg
L3eiUnm0Ds3WmKA77BzPGn6yH6DCfCl1+aKJ8Xg3F/9JpqkEJs2WD7Vzi/4NsENN
3+kj70hkRu91h1HXX68ftHOhZSl9R35DhxeD2cVgopED7NrHjEsh8Qcx0eUSEp/M
jGCAIZ21+FLMvHO5ZK+o8mJUwIgeUiBsKdELmplBCkmSVuUq/TobAioasYHBYdmf
iJKc+IZhhTRHUzVwlGUAJEB2Jj5OhUUq3RUOon7lz4GNZkxMSB+2PZJQ6EqGZfN5
YMUVgCN3qd4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org