Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ERPfKfwT1LUiEJLu6IOdUVqjpD0.roa
File: ERPfKfwT1LUiEJLu6IOdUVqjpD0.roa (raw, json)
Hash identifier: fjgsTuUG/+pS94akUrGvwlAvMeD6YQDPlPuOM1Eov1k=
Subject key identifier: 11:13:DF:29:FC:13:D4:B5:22:10:92:EE:E8:83:9D:51:5A:A3:A4:3D
Certificate issuer: /CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Certificate serial: 0189008B500BD5F96CC8D1C3CF4576530990
Authority key identifier: D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ERPfKfwT1LUiEJLu6IOdUVqjpD0.roa
Signing time: Wed 28 Jun 2023 05:47:57 +0000
ROA not before: Wed 28 Jun 2023 05:47:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25467
IP address blocks: 92.243.65.0/24 maxlen: 24
46.183.185.0/24 maxlen: 24
46.183.184.0/24 maxlen: 24
2a03:f80:385::/48 maxlen: 48
2a03:f80:389::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:00:8b:50:0b:d5:f9:6c:c8:d1:c3:cf:45:76:53:09:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d217b472c841c1d68550a24f1936d29cc6c28f6a
Validity
Not Before: Jun 28 05:47:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1113df29fc13d4b5221092eee8839d515aa3a43d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:95:d9:b5:e4:92:97:42:fa:06:a4:3e:6b:
8b:6c:b5:51:7c:df:39:fd:eb:b8:ff:e8:84:c0:40:
6e:d3:b9:f3:7f:25:f2:4f:4d:cf:0d:f8:a0:49:6d:
62:60:92:9e:3e:a2:73:fc:b5:95:4f:38:d9:9f:2f:
f0:e1:15:78:f6:e6:d9:1e:ff:29:4f:31:d3:8a:a2:
60:e7:5e:02:3f:65:5a:61:76:e9:23:2f:eb:61:04:
17:81:59:76:20:cf:34:79:f0:2d:35:04:1c:93:d5:
88:46:ae:50:f8:fc:62:d7:1d:41:26:7e:9c:30:91:
00:14:e6:09:69:67:93:21:a6:10:3b:91:16:e9:1d:
6c:d9:82:4e:8f:ce:d0:53:fe:29:ac:81:a7:14:61:
57:6a:3c:23:96:96:95:1d:1c:42:d1:88:43:9a:8d:
40:a2:df:7b:a6:f2:65:d6:ed:92:ed:9a:65:fe:c8:
3c:27:57:02:75:40:f7:8b:b8:70:4d:d0:92:0b:37:
92:e3:01:e3:3d:3b:54:92:fc:5c:30:99:2d:d1:67:
4b:6f:ed:42:47:30:3c:fb:62:2c:1f:d0:35:a6:eb:
bb:22:d4:86:1a:ef:43:d5:de:46:8b:5a:d8:66:d1:
e8:3f:cd:87:c9:b0:1a:78:93:5b:36:cb:2d:eb:cf:
e5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:13:DF:29:FC:13:D4:B5:22:10:92:EE:E8:83:9D:51:5A:A3:A4:3D
X509v3 Authority Key Identifier:
keyid:D2:17:B4:72:C8:41:C1:D6:85:50:A2:4F:19:36:D2:9C:C6:C2:8F:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0he0cshBwdaFUKJPGTbSnMbCj2o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/ERPfKfwT1LUiEJLu6IOdUVqjpD0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/290e44-b479-46cf-ab4b-b38e2677b3dc/1/0he0cshBwdaFUKJPGTbSnMbCj2o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.183.184.0/23
92.243.65.0/24
IPv6:
2a03:f80:385::/48
2a03:f80:389::/48
Signature Algorithm: sha256WithRSAEncryption
8b:68:e5:9d:86:e5:27:61:f3:b1:f1:fb:57:21:37:46:b8:5c:
46:72:7e:25:70:37:7e:78:ad:c8:cf:a7:91:99:5f:38:57:e9:
c2:74:d7:9b:57:33:cd:bf:8e:03:4d:c5:cc:60:75:bd:60:54:
ce:c3:98:81:f8:81:a4:5e:cf:89:26:79:42:e6:89:9b:a7:2b:
11:d2:5f:44:e4:e1:a0:d0:ff:c8:9a:58:f4:58:04:d3:66:a5:
2d:0b:88:95:df:fb:06:66:1e:34:96:01:76:d7:56:13:04:d3:
ab:f7:8c:62:19:d1:cf:37:09:49:86:d9:7f:26:60:bf:07:33:
54:57:e9:72:32:17:e7:0c:1e:fe:1b:40:71:fe:87:e5:4b:b6:
da:8a:1d:e2:68:de:e1:8e:7e:70:6e:19:33:93:31:50:72:12:
8c:10:7f:6b:c1:72:e6:66:43:27:80:94:8f:93:35:20:93:c5:
6f:86:c0:1b:69:90:fb:6c:cd:b5:37:27:e6:d3:6f:21:2f:11:
10:e6:8b:2e:a2:e2:b0:23:4c:8e:62:7b:65:95:85:e1:3b:c6:
85:a3:41:c1:53:f5:ec:7c:d8:31:c9:c7:09:48:57:22:05:65:
f3:12:4a:b9:6f:22:3e:59:01:29:fd:57:d6:de:df:9b:c9:bb:
ae:58:39:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:37:03 2024 by rpki-client on console-fra.rpki-client.org