Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EWYErXgr-BAYbSMBiaE_eOBmqwY.roa
File: EWYErXgr-BAYbSMBiaE_eOBmqwY.roa (raw, json)
Hash identifier: ZGMZEFgvUOtrP8wXeYlpB4Q5ZCvA7IAPFQnNWpa79/Q=
Subject key identifier: 11:66:04:AD:78:2B:F8:10:18:6D:23:01:89:A1:3F:78:E0:66:AB:06
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0186A31D43EE750D1899A7B15DB20D1381F1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EWYErXgr-BAYbSMBiaE_eOBmqwY.roa
Signing time: Thu 02 Mar 2023 16:17:29 +0000
ROA not before: Thu 02 Mar 2023 16:17:29 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 93.115.254.0/24 maxlen: 24
188.241.248.0/24 maxlen: 24
188.241.159.0/24 maxlen: 24
193.23.131.0/24 maxlen: 24
213.232.92.0/24 maxlen: 24
89.34.126.0/24 maxlen: 24
188.240.224.0/24 maxlen: 24
185.238.8.0/24 maxlen: 24
185.238.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:a3:1d:43:ee:75:0d:18:99:a7:b1:5d:b2:0d:13:81:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 2 16:17:29 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=116604ad782bf810186d230189a13f78e066ab06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:09:82:8a:5e:7d:d5:10:72:ef:9c:1e:fb:
a3:f9:ec:58:09:b9:af:fe:96:5b:80:98:97:c4:58:
c5:d8:8c:f4:69:af:1d:89:4e:ce:af:ee:d7:04:33:
3f:58:ca:2f:ff:ab:6a:d5:bc:ff:17:74:dd:e9:cb:
ec:2d:0f:7c:12:3b:be:4e:71:5e:a0:0e:5e:c1:53:
3f:30:e0:83:3b:37:3d:05:72:07:08:18:cc:9e:63:
56:b4:98:75:79:23:e7:22:9f:c3:ed:51:3e:3e:17:
00:89:f0:db:21:d2:4e:52:ec:9d:5a:58:90:03:c8:
08:cd:1f:f3:cc:5f:42:74:1b:b4:c8:60:a4:e0:61:
04:9a:a3:01:0a:d8:28:2e:95:9f:b1:ac:50:d2:a8:
2d:36:ec:38:06:30:7d:62:26:50:3f:c8:71:a3:fe:
2d:d2:e6:e2:2a:54:75:0b:87:b8:63:e4:66:f7:c6:
32:3a:88:35:8c:bc:79:e5:0e:c7:a4:16:db:0e:69:
bf:b5:89:67:f2:04:8e:d9:31:f3:fb:87:f0:81:76:
41:fc:cd:a6:e2:ad:5d:97:8a:63:e9:64:15:c2:b8:
a9:cb:d3:0c:bf:42:fe:59:c4:88:ed:7a:e0:24:5c:
51:0f:6f:9b:1d:f8:ee:31:6b:1c:ba:db:ea:60:03:
32:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:66:04:AD:78:2B:F8:10:18:6D:23:01:89:A1:3F:78:E0:66:AB:06
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EWYErXgr-BAYbSMBiaE_eOBmqwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.126.0/24
93.115.254.0/24
185.238.8.0/24
185.238.11.0/24
188.240.224.0/24
188.241.159.0/24
188.241.248.0/24
193.23.131.0/24
213.232.92.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:d9:37:01:0f:6b:6d:68:6e:14:1d:e9:a5:5f:6f:95:95:4b:
52:e3:2d:02:dc:14:c7:95:8f:85:c5:23:f9:c8:b9:a5:87:83:
22:7b:88:f9:fe:0c:9a:9f:92:9c:6c:13:d7:42:72:31:28:7f:
68:3e:7e:90:75:62:c7:81:c2:6d:52:88:25:ba:d9:89:f5:e4:
bd:3d:fb:87:20:fb:1f:0a:96:96:e9:9a:40:49:c3:6f:d5:f6:
07:f3:4b:2c:25:18:c9:87:73:de:03:e0:fa:56:93:f4:30:b4:
f2:a4:f2:51:81:d6:47:e1:3d:e0:69:4b:31:38:10:be:a8:6a:
ac:3e:e1:09:53:6c:54:c1:34:8f:b9:bb:1b:c0:c4:b8:70:4d:
69:95:b6:58:16:1b:97:e8:d0:34:90:ea:f0:12:57:02:6b:97:
d3:c3:1c:fc:fa:80:33:c7:ff:55:7f:dd:e6:1d:b9:58:8e:95:
14:c1:76:3d:cb:89:33:a0:fe:f5:72:de:18:4b:0e:d1:c3:df:
c3:48:da:e4:a2:07:a7:42:08:c9:d9:52:c9:ca:66:bb:ab:80:
dd:bc:ce:26:bc:9b:91:10:71:27:6c:09:8c:a2:e8:50:0d:74:
b5:99:ba:f5:0c:9d:eb:75:00:8b:66:d6:46:a8:3b:17:a0:9d:
19:18:c1:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org