Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/EIVT9Vx157SXpMEMUCKAthuh06k.roa
File: EIVT9Vx157SXpMEMUCKAthuh06k.roa (raw, json)
Hash identifier: 4LkYs3Qazz24mfTDlQHqzTI36zk7A1MUr0IYzNUPicw=
Subject key identifier: 10:85:53:F5:5C:75:E7:B4:97:A4:C1:0C:50:22:80:B6:1B:A1:D3:A9
Certificate issuer: /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial: 018A2675F838235A94BC3DC78087E817F117
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/EIVT9Vx157SXpMEMUCKAthuh06k.roa
Signing time: Thu 24 Aug 2023 07:32:59 +0000
ROA not before: Thu 24 Aug 2023 07:32:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205020
IP address blocks: 193.186.199.0/24 maxlen: 24
193.186.197.0/24 maxlen: 24
193.186.198.0/24 maxlen: 24
193.186.198.0/23 maxlen: 23
193.186.196.0/24 maxlen: 24
193.186.196.0/23 maxlen: 23
193.186.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:26:75:f8:38:23:5a:94:bc:3d:c7:80:87:e8:17:f1:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
Validity
Not Before: Aug 24 07:32:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=108553f55c75e7b497a4c10c502280b61ba1d3a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:af:e4:ff:c4:25:5b:83:a5:88:74:fc:b4:f2:
a2:cb:4b:66:9e:f9:b5:29:9e:58:a3:8f:84:b1:c2:
24:3f:34:1e:5a:e2:de:64:08:cb:5d:e3:e9:92:1f:
7c:be:4a:cc:7e:c9:15:d3:80:03:46:4f:60:b5:4c:
23:b3:55:af:3e:4e:cb:f4:cd:95:44:de:4e:17:8d:
13:1b:96:ec:a8:da:e4:19:cf:e3:cc:19:88:bd:a8:
d8:a0:4f:2a:61:b1:1c:b2:0d:3c:96:ca:65:30:93:
9c:e7:48:35:31:ec:9e:e7:af:02:5b:01:e1:19:0a:
09:33:41:7f:93:5a:e2:de:a3:dc:3d:12:44:c1:e6:
7d:27:b7:b0:c3:b2:70:b1:a2:dd:87:5a:4f:c3:50:
1a:fd:b1:1d:4d:c5:62:f1:c4:a9:62:c8:ae:d4:c7:
5a:51:d7:1a:80:32:b3:26:8e:b2:46:92:d4:df:0b:
8a:a6:1d:58:54:f4:2b:ea:a1:ac:14:6e:01:39:16:
2a:48:b9:06:55:79:b7:a9:a7:1a:91:e1:a7:e3:8b:
bc:fd:53:56:63:6c:92:7e:40:0c:f7:51:b0:21:f6:
e9:69:cc:e2:2c:e5:5a:3b:04:3e:8c:d5:9e:47:d7:
f3:3e:2e:3a:8b:4a:c6:94:42:68:3e:0c:62:7e:d4:
eb:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:85:53:F5:5C:75:E7:B4:97:A4:C1:0C:50:22:80:B6:1B:A1:D3:A9
X509v3 Authority Key Identifier:
keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/EIVT9Vx157SXpMEMUCKAthuh06k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.186.196.0/22
Signature Algorithm: sha256WithRSAEncryption
a5:a1:fc:8d:c8:c5:18:12:81:ef:42:ed:80:93:77:b7:1b:e2:
1d:e1:b2:3b:5e:66:2d:68:d3:be:1e:74:8d:79:32:8c:14:ef:
fe:f3:d5:91:fc:d5:21:c8:b6:63:87:12:ac:ba:2b:25:bf:cb:
0e:9e:67:63:7c:fc:e0:b4:b1:77:05:d1:b0:c7:1e:9d:7b:1d:
ba:fb:b7:18:29:68:de:c5:1d:2b:f2:fa:9e:93:65:72:38:e2:
a3:7f:a8:aa:d6:96:3d:a0:c6:02:bb:3e:7e:0b:c0:a9:24:65:
66:3b:cb:49:3b:1c:1d:3f:bb:41:36:51:27:34:1f:36:ed:1d:
54:d6:63:1f:3f:1c:c5:23:1f:4b:3e:9b:cf:4e:6e:69:15:d1:
c3:8c:d0:0f:b7:f3:c4:16:a7:1e:42:19:d5:b7:ef:4a:f0:cc:
44:83:49:b9:f5:cf:c2:98:21:ef:6e:4b:7a:10:92:2d:a3:7d:
d3:44:3b:4a:80:2a:7d:40:cc:ed:94:5f:21:4e:5b:f3:4d:bd:
85:c7:d8:86:27:b8:31:d1:1c:5f:00:30:3f:c3:6e:1e:1c:d2:
cf:6c:db:0a:9e:58:3a:12:91:52:35:18:a2:17:94:e8:51:7f:
4f:3c:50:e5:98:db:ea:36:47:16:e8:7e:fb:f9:16:07:15:18:
f0:91:4b:e0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYomdfg4I1qUvD3HgIfoF/EXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYjEyY2U2YTkxMDMwZTI3ZDVhYmFkMTQ2ZGYyN2JjMjg4
MDY1MmIwHhcNMjMwODI0MDczMjU5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxMDg1NTNmNTVjNzVlN2I0OTdhNGMxMGM1MDIyODBiNjFiYTFkM2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6/k/8QlW4OliHT8tPKiy0tmnvm1
KZ5Yo4+EscIkPzQeWuLeZAjLXePpkh98vkrMfskV04ADRk9gtUwjs1WvPk7L9M2V
RN5OF40TG5bsqNrkGc/jzBmIvajYoE8qYbEcsg08lsplMJOc50g1Meye568CWwHh
GQoJM0F/k1ri3qPcPRJEweZ9J7eww7JwsaLdh1pPw1Aa/bEdTcVi8cSpYsiu1Mda
UdcagDKzJo6yRpLU3wuKph1YVPQr6qGsFG4BORYqSLkGVXm3qacakeGn44u8/VNW
Y2ySfkAM91GwIfbpacziLOVaOwQ+jNWeR9fzPi46i0rGlEJoPgxiftTrLwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBCFU/Vcdee0l6TBDFAigLYbodOpMB8GA1UdIwQY
MBaAFL6xLOapEDDifVq60UbfJ7wogGUrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMt
YTdhZGU0MzRkNDUxLzEvRUlWVDlWeDE1N1NYcE1FTVVDS0F0aHVoMDZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC83NDk0MGEtZDlmYS00NTUyLWJlNWMtYTdhZGU0MzRkNDUx
LzEvdnJFczVxa1FNT0o5V3JyUlJ0OG52Q2lBWlNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwbrEMA0G
CSqGSIb3DQEBCwUAA4IBAQClofyNyMUYEoHvQu2Ak3e3G+Id4bI7XmYtaNO+HnSN
eTKMFO/+89WR/NUhyLZjhxKsuislv8sOnmdjfPzgtLF3BdGwxx6dex26+7cYKWje
xR0r8vqek2VyOOKjf6iq1pY9oMYCuz5+C8CpJGVmO8tJOxwdP7tBNlEnNB827R1U
1mMfPxzFIx9LPpvPTm5pFdHDjNAPt/PEFqceQhnVt+9K8MxEg0m59c/CmCHvbkt6
EJIto33TRDtKgCp9QMztlF8hTlvzTb2Fx9iGJ7gx0RxfADA/w24eHNLPbNsKnlg6
EpFSNRiiF5ToUX9PPFDlmNvqNkcW6H77+RYHFRjwkUvg
-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:27 2024 by rpki-client on console-ams.rpki-client.org