Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EmeOgDX8igc-4a1WSujq44pmR-0.roa
File: EmeOgDX8igc-4a1WSujq44pmR-0.roa (raw, json)
Hash identifier: pQuYhEkDTnjvZujAtU3KZlIa8e3wwE+hMBtLsHcbnUQ=
Subject key identifier: 12:67:8E:80:35:FC:8A:07:3E:E1:AD:56:4A:E8:EA:E3:8A:66:47:ED
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0188EC28CCAFC2A0D7C9E7D633F5C721DA13
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EmeOgDX8igc-4a1WSujq44pmR-0.roa
Signing time: Sat 24 Jun 2023 06:47:56 +0000
ROA not before: Sat 24 Jun 2023 06:47:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 37.221.92.0/24 maxlen: 24
185.117.3.0/24 maxlen: 24
45.13.227.0/24 maxlen: 24
45.151.56.0/24 maxlen: 24
45.131.111.0/24 maxlen: 24
45.131.108.0/24 maxlen: 24
5.253.246.0/24 maxlen: 24
92.118.207.0/24 maxlen: 24
45.142.104.0/24 maxlen: 24
45.137.203.0/24 maxlen: 24
45.142.107.0/24 maxlen: 24
45.84.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:ec:28:cc:af:c2:a0:d7:c9:e7:d6:33:f5:c7:21:da:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jun 24 06:47:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=12678e8035fc8a073ee1ad564ae8eae38a6647ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:f9:ea:e7:ac:2d:66:2d:3f:3e:2f:f8:93:12:
4e:65:37:31:55:39:1b:3f:46:a0:6a:9e:35:19:b5:
aa:41:8d:e7:9b:fd:70:9a:43:26:27:38:1f:59:2c:
8c:1e:3c:98:12:a2:32:12:fa:40:55:b9:2f:0b:a9:
e6:5f:e3:37:5f:6f:4e:2b:98:bf:fd:a3:72:08:9b:
d4:39:47:a8:e4:02:a6:1e:b4:89:a8:38:35:1f:b8:
8f:c2:d7:d1:be:3a:2f:7b:91:e5:76:4c:8b:3f:0c:
e5:dd:9f:00:f8:97:9e:5c:5c:41:0c:28:fc:7e:5a:
91:8d:7f:9b:29:f9:02:c6:fd:54:0c:4b:80:05:5b:
de:1e:dc:36:96:8c:18:03:ec:f4:0f:96:d4:a7:55:
a1:8e:0d:19:d2:61:b1:fc:de:4e:5c:cf:9b:dd:11:
40:ce:98:4b:fb:4c:df:85:39:50:99:d4:8e:56:4c:
17:2e:93:dd:84:8e:0e:eb:ac:96:39:0f:03:58:20:
21:f7:8c:cc:d4:14:1c:3d:d0:ee:8e:5e:85:39:91:
97:fa:a6:98:6f:ef:ff:56:2a:2c:d0:4e:b7:ca:b6:
7b:bb:34:19:0b:a6:fe:4e:45:e7:17:ff:0a:64:30:
f8:00:06:32:84:ce:f3:12:e6:b0:8a:06:e4:4b:bc:
76:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:67:8E:80:35:FC:8A:07:3E:E1:AD:56:4A:E8:EA:E3:8A:66:47:ED
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/EmeOgDX8igc-4a1WSujq44pmR-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.246.0/24
37.221.92.0/24
45.13.227.0/24
45.84.196.0/24
45.131.108.0/24
45.131.111.0/24
45.137.203.0/24
45.142.104.0/24
45.142.107.0/24
45.151.56.0/24
92.118.207.0/24
185.117.3.0/24
Signature Algorithm: sha256WithRSAEncryption
46:67:78:48:d4:ee:dd:7c:0f:0e:c4:40:f3:1c:57:ac:dd:e3:
48:10:71:d4:68:6f:dd:98:d0:f5:4d:6d:e1:55:bf:f3:10:11:
0b:a4:b4:d5:07:1e:2f:b8:ad:81:65:42:d2:77:58:b4:d5:29:
81:6e:54:44:cd:19:b0:17:ce:f6:de:42:4b:6a:d7:cd:56:8e:
c4:cd:e9:80:0d:73:3b:7c:0c:67:00:84:62:2a:bb:02:57:c2:
5e:da:03:8f:12:76:51:3a:c4:f8:0a:5a:58:0b:04:95:55:44:
f4:e3:99:83:69:c4:05:8f:cf:c6:29:e6:d1:51:8e:b9:7e:8d:
45:09:64:76:5d:af:8c:bb:01:b0:3f:de:cc:93:89:d8:a7:b2:
9e:07:f2:58:26:e3:2f:ed:24:b2:79:b7:4e:14:5f:33:58:04:
fe:a7:8a:1a:00:b9:a2:77:75:59:1f:0a:6b:d4:87:27:9b:85:
60:ed:0c:0c:ea:5f:6a:f3:df:c4:6b:87:36:94:17:81:c5:c1:
40:67:ab:be:ef:09:67:40:ab:ad:1e:9a:7a:16:e7:d2:88:a7:
65:68:14:c1:45:5a:2e:e1:cb:a2:ad:43:4d:53:ea:8e:79:2b:
1d:4b:58:ff:f7:26:44:26:8a:7c:1b:bc:57:51:69:29:36:55:
a4:d0:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 24 07:22:38 2023 by rpki-client on console-ams.rpki-client.org