Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/7G0cyU_H_MddMEmateTTFABZqes.roa
File: 7G0cyU_H_MddMEmateTTFABZqes.roa (raw, json)
Hash identifier: YDJghx6QbwObYPCGicTT7mLCEPwRnJaLuzMcCMRpIRk=
Subject key identifier: EC:6D:1C:C9:4F:C7:FC:C7:5D:30:49:9A:B5:E4:D3:14:00:59:A9:EB
Certificate issuer: /CN=5336107179715609dca422bc07a098468c529452
Certificate serial: 01857042A8DE3F33CCBC3F3AF1F0D7E4419E
Authority key identifier: 53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/7G0cyU_H_MddMEmateTTFABZqes.roa
Signing time: Mon 02 Jan 2023 02:14:54 +0000
ROA not before: Mon 02 Jan 2023 02:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60781
IP address blocks: 46.102.240.0/21 maxlen: 21
77.81.240.0/21 maxlen: 21
2a06:cd40:300::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:42:a8:de:3f:33:cc:bc:3f:3a:f1:f0:d7:e4:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5336107179715609dca422bc07a098468c529452
Validity
Not Before: Jan 2 02:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec6d1cc94fc7fcc75d30499ab5e4d3140059a9eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2b:19:3d:87:bf:34:10:02:58:c4:f9:54:d9:
dc:c0:32:e0:cb:f0:5f:d5:5a:b8:fc:2f:82:6c:1e:
92:3a:93:42:8f:61:08:ef:14:05:9a:a9:2d:61:7d:
6f:0f:de:d2:eb:b8:6a:d5:7c:f6:56:b1:3d:8a:b3:
4c:7a:e9:c6:e2:56:d2:e0:02:73:7a:e3:07:40:6b:
56:c9:3f:e4:02:d8:a1:96:d1:1d:d9:2a:0f:6a:05:
f6:aa:99:e0:03:73:00:de:f6:43:44:d9:bd:5a:bf:
b0:dc:3c:3b:11:6e:99:f7:a1:0e:e8:cd:0e:8a:43:
f7:d3:b4:fc:58:ae:db:92:ff:4e:6f:b6:a2:56:4f:
b4:3d:c3:c0:0a:10:bf:6b:d7:5d:71:3e:98:fe:0a:
e4:0c:c5:1d:7a:c8:5e:1b:09:ce:13:95:3c:1b:e5:
a3:33:7a:ff:27:67:1b:bb:c6:a3:51:d7:15:a3:31:
59:c4:bc:d0:a5:18:4b:05:a4:cc:7b:ee:3d:a8:9e:
00:5c:29:c3:06:d1:1c:23:48:99:b6:01:bc:85:ad:
55:e2:1a:cc:59:f8:3c:ee:47:a7:aa:b2:ad:aa:6d:
b1:3e:af:7f:55:60:06:82:2b:2c:5d:c2:66:ad:24:
5b:83:55:cd:07:ea:10:f6:c0:a9:1b:3e:e0:ac:3a:
85:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:6D:1C:C9:4F:C7:FC:C7:5D:30:49:9A:B5:E4:D3:14:00:59:A9:EB
X509v3 Authority Key Identifier:
keyid:53:36:10:71:79:71:56:09:DC:A4:22:BC:07:A0:98:46:8C:52:94:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UzYQcXlxVgncpCK8B6CYRoxSlFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/7G0cyU_H_MddMEmateTTFABZqes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/81df33-7538-40d8-b81e-d18610075efc/1/UzYQcXlxVgncpCK8B6CYRoxSlFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.240.0/21
77.81.240.0/21
IPv6:
2a06:cd40:300::/48
Signature Algorithm: sha256WithRSAEncryption
28:77:b8:5f:c6:68:10:b1:fa:a7:3a:34:e1:00:5e:ed:62:2d:
84:39:25:66:8f:6d:11:27:84:22:ea:4c:96:1e:79:a7:cd:4b:
aa:59:05:25:6e:52:e6:e9:8f:ab:8e:38:5a:ab:d5:4a:56:07:
70:81:39:36:10:d4:2a:3d:b3:ad:0b:5c:36:4a:5f:78:57:fc:
9a:99:2f:03:b1:a9:ff:3a:cf:58:ee:e5:98:4d:a6:e0:59:e1:
00:d2:41:a4:a4:86:08:fa:e7:b7:c6:1a:72:c9:4a:de:ea:e8:
0e:11:21:4f:44:a8:63:88:24:7f:8f:fb:5e:c5:97:c7:f9:65:
9f:62:59:a3:48:77:1b:b4:18:2a:3f:96:63:6b:79:9d:36:8c:
c9:1e:da:a7:d2:9e:7d:16:9e:21:60:9e:89:b4:8e:1d:14:dd:
f5:86:df:f7:23:2a:ae:45:76:0a:72:f6:43:e2:9c:42:06:05:
92:88:c3:31:6d:30:f2:b5:b9:00:19:3d:ae:44:85:16:44:46:
a3:36:f4:44:41:92:0a:8b:22:37:c4:10:c3:cb:99:cc:16:7a:
2b:74:d2:f9:08:cc:72:c0:f2:e6:83:0a:60:dd:02:5e:df:eb:
cf:12:75:08:6c:45:60:47:5b:42:71:18:22:4d:80:f1:7c:2f:
ab:3f:1a:4b
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAYVwQqjePzPMvD868fDX5EGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzMzYxMDcxNzk3MTU2MDlkY2E0MjJiYzA3YTA5ODQ2OGM1
Mjk0NTIwHhcNMjMwMTAyMDIxNDU0WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhlYzZkMWNjOTRmYzdmY2M3NWQzMDQ5OWFiNWU0ZDMxNDAwNTlhOWViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApisZPYe/NBACWMT5VNncwDLgy/Bf
1Vq4/C+CbB6SOpNCj2EI7xQFmqktYX1vD97S67hq1Xz2VrE9irNMeunG4lbS4AJz
euMHQGtWyT/kAtihltEd2SoPagX2qpngA3MA3vZDRNm9Wr+w3Dw7EW6Z96EO6M0O
ikP307T8WK7bkv9Ob7aiVk+0PcPAChC/a9ddcT6Y/grkDMUdesheGwnOE5U8G+Wj
M3r/J2cbu8ajUdcVozFZxLzQpRhLBaTMe+49qJ4AXCnDBtEcI0iZtgG8ha1V4hrM
Wfg87kenqrKtqm2xPq9/VWAGgissXcJmrSRbg1XNB+oQ9sCpGz7grDqFVQIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFOxtHMlPx/zHXTBJmrXk0xQAWanrMB8GA1UdIwQY
MBaAFFM2EHF5cVYJ3KQivAegmEaMUpRSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUt
ZDE4NjEwMDc1ZWZjLzEvN0cwY3lVX0hfTWRkTUVtYXRlVFRGQUJacWVzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS84MWRmMzMtNzUzOC00MGQ4LWI4MWUtZDE4NjEwMDc1ZWZj
LzEvVXpZUWNYbHhWZ25jcENLOEI2Q1lSb3hTbEZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQDLmbwAwQD
TVHwMA8EAgACMAkDBwAqBs1AAwAwDQYJKoZIhvcNAQELBQADggEBACh3uF/GaBCx
+qc6NOEAXu1iLYQ5JWaPbREnhCLqTJYeeafNS6pZBSVuUubpj6uOOFqr1UpWB3CB
OTYQ1Co9s60LXDZKX3hX/JqZLwOxqf86z1ju5ZhNpuBZ4QDSQaSkhgj657fGGnLJ
St7q6A4RIU9EqGOIJH+P+17Fl8f5ZZ9iWaNIdxu0GCo/lmNreZ02jMke2qfSnn0W
niFgnom0jh0U3fWG3/cjKq5Fdgpy9kPinEIGBZKIwzFtMPK1uQAZPa5EhRZERqM2
9ERBkgqLIjfEEMPLmcwWeit00vkIzHLA8uaDCmDdAl7f688SdQhsRWBHW0JxGCJN
gPF8L6s/Gks=
-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:27 2024 by rpki-client on console-ams.rpki-client.org