Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/u3oWmZhqR8rq9o7lfqC1S--zeeo.roa
File: u3oWmZhqR8rq9o7lfqC1S--zeeo.roa (raw, json)
Hash identifier: ZjleStH/AbLORG34N2cXifi/bJvrzLbanftJ+6w125M=
Subject key identifier: BB:7A:16:99:98:6A:47:CA:EA:F6:8E:E5:7E:A0:B5:4B:EF:B3:79:EA
Certificate issuer: /CN=edb926f8c603aab79cb46a883bf632564a3faabf
Certificate serial: 01856DDD5D245CBB10F430E6C1E806337CAA
Authority key identifier: ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/u3oWmZhqR8rq9o7lfqC1S--zeeo.roa
Signing time: Sun 01 Jan 2023 15:05:01 +0000
ROA not before: Sun 01 Jan 2023 15:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 52011
IP address blocks: 103.81.142.0/24 maxlen: 24
31.132.57.0/24 maxlen: 24
31.132.56.0/24 maxlen: 24
89.46.84.0/23 maxlen: 23
89.46.87.0/24 maxlen: 24
2a03:b000:b00::/40 maxlen: 40
2a00:16d8:52::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:5d:24:5c:bb:10:f4:30:e6:c1:e8:06:33:7c:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edb926f8c603aab79cb46a883bf632564a3faabf
Validity
Not Before: Jan 1 15:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bb7a1699986a47caeaf68ee57ea0b54befb379ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:85:b3:04:91:ad:e9:5e:ca:18:81:f7:a6:6d:
a4:87:19:12:79:c4:d1:e6:69:31:8a:0a:db:39:14:
24:cb:6a:69:ed:dc:37:54:61:92:80:14:6f:a3:a0:
b7:b5:5b:39:73:e6:05:0f:07:30:24:88:c9:30:62:
1d:af:15:ef:0c:a1:d5:01:a4:57:4a:21:76:3d:52:
e3:82:05:05:df:c2:27:95:f1:3e:e7:ff:e0:d6:a6:
ad:d8:4a:29:75:c5:67:ee:08:4a:de:84:05:1a:ad:
e0:1b:ad:85:b6:3e:37:77:ef:28:00:61:fc:c8:02:
1d:3a:62:fd:e3:88:e4:e0:52:29:8b:06:23:25:1e:
db:00:08:8b:32:84:ec:bb:cc:46:42:53:01:90:da:
8d:24:b8:c6:67:a2:cb:28:0a:66:46:d7:83:f4:fb:
83:bf:c7:8a:de:90:87:c4:5d:5a:31:d0:ba:1d:b2:
d9:bb:73:ce:15:c9:54:e7:c5:d2:4b:7d:39:88:de:
a6:15:99:7a:b6:17:a5:0f:8e:b3:9d:b7:f6:59:24:
d3:02:d9:ec:73:7c:4a:f0:86:49:f2:ac:55:f0:59:
eb:d3:81:6d:de:ed:8e:30:22:97:a9:14:3b:f6:a2:
c8:1e:3d:09:86:24:86:ac:33:10:47:3d:78:b8:6a:
2a:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:7A:16:99:98:6A:47:CA:EA:F6:8E:E5:7E:A0:B5:4B:EF:B3:79:EA
X509v3 Authority Key Identifier:
keyid:ED:B9:26:F8:C6:03:AA:B7:9C:B4:6A:88:3B:F6:32:56:4A:3F:AA:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bkm-MYDqrectGqIO_YyVko_qr8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/u3oWmZhqR8rq9o7lfqC1S--zeeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/56c934-cf14-4a4f-ae7c-3bd1978bf2f6/1/7bkm-MYDqrectGqIO_YyVko_qr8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.132.56.0/23
89.46.84.0/23
89.46.87.0/24
103.81.142.0/24
IPv6:
2a00:16d8:52::/48
2a03:b000:b00::/40
Signature Algorithm: sha256WithRSAEncryption
60:4b:85:7e:60:25:ae:2d:55:9a:e4:8b:45:46:b5:84:19:c0:
12:1a:fb:98:f2:2c:68:d5:df:de:10:55:72:2b:6a:96:22:95:
24:c7:6b:84:1a:21:f5:f7:90:dd:94:31:dd:96:ae:5f:b6:1c:
2a:99:9f:09:0f:c9:70:75:e2:4e:dc:e5:d5:44:9c:34:69:cd:
f7:db:99:23:e9:f8:ff:56:a7:8a:30:06:c3:83:87:a6:9b:db:
b0:dd:05:3d:5c:d6:d2:5e:b1:ac:c1:91:8d:b4:9d:70:e6:3e:
18:16:1e:93:67:07:6f:50:33:e0:d3:95:b2:27:af:b8:80:91:
b0:a7:dc:f1:d0:b4:0e:6d:60:cc:9f:4b:60:48:d2:ec:d6:45:
2a:57:7e:fd:29:97:0b:16:ab:4e:66:1e:e2:23:e8:48:02:bd:
02:db:de:9f:65:33:84:49:f5:8d:a5:3b:4c:6d:c1:6b:0a:ae:
e5:bf:74:2e:71:75:b3:66:8d:77:0c:2d:69:a8:2b:bd:ac:76:
ad:ba:ec:de:5a:e4:03:34:5f:36:fe:70:f1:41:a7:79:11:9a:
a0:cb:18:6d:2f:a5:b8:26:d7:df:ac:d3:2b:af:44:c6:b7:d9:
73:9b:9d:94:af:3e:7c:d2:61:ad:ad:8a:15:2a:33:75:8b:d0:
90:31:70:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:56:30 2024 by rpki-client on console-fra.rpki-client.org