Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8ev_0rmPfpHQVJ2f2QOJ95uHBA.roa
File: i8ev_0rmPfpHQVJ2f2QOJ95uHBA.roa (raw, json)
Hash identifier: gknmAm4LytFT0HZnE5wag3R584AmljIxYwYAvLetpAc=
Subject key identifier: 8B:C7:AF:FF:4A:E6:3D:FA:47:41:52:76:7F:64:0E:27:DE:6E:1C:10
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 01856CE624E795E0DD6FC87A89B13298013F
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8ev_0rmPfpHQVJ2f2QOJ95uHBA.roa
Signing time: Sun 01 Jan 2023 10:35:00 +0000
ROA not before: Sun 01 Jan 2023 10:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204035
IP address blocks: 46.243.76.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
77.83.32.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:e6:24:e7:95:e0:dd:6f:c8:7a:89:b1:32:98:01:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 1 10:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8bc7afff4ae63dfa474152767f640e27de6e1c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:ea:9b:c1:a9:a2:53:35:3c:e3:0e:9b:4c:7f:
09:95:86:4c:8e:8b:e4:75:8f:a8:83:7d:2f:c4:c5:
8e:47:c0:2c:f4:be:22:df:31:62:d5:71:a0:5f:96:
ae:cc:a6:4f:a8:e2:09:07:a6:b9:53:9d:05:2b:52:
5c:e9:d8:40:57:d3:e4:47:25:42:78:95:4e:d4:37:
fd:b6:8f:cd:5d:a2:ca:12:fd:39:30:e7:6b:b5:a3:
3f:4c:14:76:a0:63:16:1d:a8:72:32:f1:9a:eb:6a:
c3:7f:69:36:0c:91:88:fe:39:3d:94:1a:c6:9a:b9:
28:4a:a0:7b:a1:55:15:72:ec:3c:a3:c8:90:a1:5f:
93:99:5d:2e:e1:c4:a7:e3:1e:ba:0c:2d:4a:01:da:
a7:b1:e4:4b:21:82:92:8a:9e:c0:0a:30:f3:58:c5:
b5:a3:1c:04:45:45:b2:e6:f1:f7:2c:7e:b5:9f:2a:
73:29:d1:17:60:80:b0:83:de:ba:8a:c8:2b:15:f5:
4e:bc:43:dc:b2:34:b4:3e:a0:86:d5:d1:9b:2a:a5:
4e:04:45:59:50:40:bc:12:6f:f5:69:bd:65:3d:d8:
9f:99:b0:05:1a:eb:23:aa:a2:97:1f:16:7c:41:29:
a0:4d:b1:16:8c:d6:fc:46:7f:70:10:4a:68:3e:31:
16:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C7:AF:FF:4A:E6:3D:FA:47:41:52:76:7F:64:0E:27:DE:6E:1C:10
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/i8ev_0rmPfpHQVJ2f2QOJ95uHBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
77.83.32.0/22
193.42.60.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:e5:84:ef:31:20:74:f2:06:7b:ff:aa:77:23:bb:e1:af:35:
d1:d9:50:3a:b7:fe:63:9d:02:b5:49:a0:0a:5f:5e:ed:86:7b:
22:23:94:6d:02:11:bd:45:ba:f3:ff:8d:98:9a:c0:5a:db:03:
b5:b3:f1:b4:b1:69:31:dd:41:20:c6:0e:8f:7d:e8:67:d8:2b:
b6:c9:e5:a8:79:3a:8d:8d:4b:2a:17:12:1c:28:52:48:c9:0b:
5a:98:ad:cf:b1:20:6e:e1:ee:5c:6d:83:ce:1e:6a:d3:50:d7:
bb:a5:90:5e:9c:09:15:c7:a1:5f:5d:19:fb:72:12:96:d9:33:
cc:23:d3:1b:b4:4e:0e:fd:0c:53:05:fa:d9:a1:48:27:0e:70:
44:c5:66:56:85:25:45:c5:95:7a:7d:3e:4f:68:fa:fd:bd:12:
f4:6e:ed:62:ab:f1:80:d2:5b:21:72:2f:6c:eb:a7:fb:40:9e:
8a:66:74:d3:ba:28:6c:48:3d:77:d0:95:68:7a:73:71:14:8e:
5d:58:cb:b1:9d:7d:57:67:b0:62:b4:db:91:34:f3:73:d4:a7:
73:09:2a:32:0e:1f:22:46:aa:cc:12:51:0b:3f:70:37:60:28:
c4:1c:1f:f2:0b:26:b0:67:e2:c2:aa:98:2a:5b:af:af:7b:4f:
24:00:80:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:19 2023 by rpki-client on console-ams.rpki-client.org