Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eQnt6GaeBMGyhOyPafw737VVpR8.roa
File: eQnt6GaeBMGyhOyPafw737VVpR8.roa (raw, json)
Hash identifier: krFGNCQekre2KJuDj1C0E3PuXDrz4XeMbyL1F9D/mLM=
Subject key identifier: 79:09:ED:E8:66:9E:04:C1:B2:84:EC:8F:69:FC:3B:DF:B5:55:A5:1F
Certificate issuer: /CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Certificate serial: 01856C53F2E14401D41EB1F9CC927CD44087
Authority key identifier: AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eQnt6GaeBMGyhOyPafw737VVpR8.roa
Signing time: Sun 01 Jan 2023 07:55:19 +0000
ROA not before: Sun 01 Jan 2023 07:55:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29286
IP address blocks: 77.222.136.0/24 maxlen: 24
194.146.197.0/24 maxlen: 24
188.0.66.0/24 maxlen: 24
93.183.215.0/24 maxlen: 24
88.81.248.0/24 maxlen: 24
93.183.229.0/24 maxlen: 24
93.183.228.0/24 maxlen: 24
46.164.152.0/23 maxlen: 23
193.108.50.0/24 maxlen: 24
193.108.51.0/24 maxlen: 24
93.183.197.0/24 maxlen: 24
195.69.176.0/24 maxlen: 24
80.91.171.0/24 maxlen: 24
80.91.182.0/24 maxlen: 24
46.164.160.0/22 maxlen: 22
91.204.95.0/24 maxlen: 24
185.8.41.0/24 maxlen: 24
185.8.40.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jul 2023 21:55:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:f2:e1:44:01:d4:1e:b1:f9:cc:92:7c:d4:40:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abc8dbe52083ad335c9f1fde6016ec8b49293140
Validity
Not Before: Jan 1 07:55:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7909ede8669e04c1b284ec8f69fc3bdfb555a51f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3c:5c:b1:9f:02:bf:dc:77:44:b1:cf:5c:18:
e0:78:b3:62:cb:f1:57:e8:67:d7:64:29:ce:3a:f0:
69:b7:f7:8d:41:02:c1:b1:12:af:f3:55:1d:d7:e2:
8c:b8:b9:e1:68:e3:36:1d:18:9d:db:51:fc:b9:f3:
1a:80:42:4a:4a:c9:27:66:da:f4:6a:86:24:07:3e:
a7:c6:a7:b7:d3:31:c1:5f:90:9c:40:a7:8f:cf:0c:
82:fa:f3:55:ff:b0:ea:28:9c:1d:d7:70:1b:cf:00:
96:c0:ba:e3:9d:8d:e5:3b:d4:31:54:e5:b8:53:56:
94:8d:de:4c:d9:ee:a0:48:46:48:5d:31:a2:dd:11:
e2:8d:74:8d:5b:33:78:7d:79:d6:cf:0f:b7:fb:bb:
4d:64:03:06:06:68:c0:6b:76:e1:ea:00:97:69:8f:
31:1e:87:79:40:96:75:53:e8:2e:bd:9e:88:69:62:
81:32:dc:32:e5:75:72:98:3a:40:af:91:fc:20:68:
06:62:66:38:30:d5:f6:0f:7d:e3:af:a1:cc:1b:c6:
36:65:6a:84:93:93:bb:3e:15:1c:b9:25:7f:f0:8c:
56:dd:0c:c6:29:6d:04:56:43:d1:6c:bc:5f:86:7c:
f8:fb:fd:03:18:f1:3d:ac:ad:39:73:1f:d9:58:2d:
59:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:09:ED:E8:66:9E:04:C1:B2:84:EC:8F:69:FC:3B:DF:B5:55:A5:1F
X509v3 Authority Key Identifier:
keyid:AB:C8:DB:E5:20:83:AD:33:5C:9F:1F:DE:60:16:EC:8B:49:29:31:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q8jb5SCDrTNcnx_eYBbsi0kpMUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/eQnt6GaeBMGyhOyPafw737VVpR8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ce6ccb-25cf-4917-b3cd-3056af9a335e/1/q8jb5SCDrTNcnx_eYBbsi0kpMUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.164.152.0/23
46.164.160.0/22
77.222.136.0/24
80.91.171.0/24
80.91.182.0/24
88.81.248.0/24
91.204.95.0/24
93.183.197.0/24
93.183.215.0/24
93.183.228.0/23
185.8.40.0/23
188.0.66.0/24
193.108.50.0/23
194.146.197.0/24
195.69.176.0/24
Signature Algorithm: sha256WithRSAEncryption
55:df:84:ff:31:97:d0:c3:d4:56:26:af:b3:0f:1f:32:03:98:
9f:b3:94:83:76:1b:bc:ad:36:0b:0e:19:5c:b2:a8:cc:fc:a3:
db:c5:5c:c8:69:42:41:89:5e:45:18:bc:3d:64:3f:e4:65:2c:
78:63:5d:97:36:2b:72:63:81:60:4d:56:c1:1b:24:b2:a4:7e:
b1:9d:d8:d7:2d:9b:4b:4a:6c:05:45:97:1c:64:f4:60:bd:37:
a4:65:3a:cb:9f:dc:30:d0:47:f3:6a:61:f5:47:ca:36:28:99:
c7:2b:9b:45:6d:eb:60:15:9a:1f:d9:c2:02:c6:cc:94:6a:31:
22:23:44:dd:82:1d:e2:01:2e:59:15:9c:50:15:77:df:e5:b6:
09:3f:5a:04:af:9d:20:31:d5:62:90:52:0f:d4:a3:27:fe:da:
0f:6c:2e:2d:65:1b:35:50:1d:21:30:b8:9c:e9:b8:16:e1:db:
4b:f0:f2:42:f1:18:29:07:79:bf:64:2e:b0:57:23:bf:9f:6b:
bd:45:e4:ee:0f:16:d1:c3:10:e8:6e:50:a6:cb:98:a2:03:d3:
fb:15:9d:bf:e0:8b:46:2d:b7:84:7f:10:7b:93:8f:06:39:fb:
6a:41:51:5b:dd:d3:03:f2:80:d3:da:29:9b:8e:e1:fc:78:d2:
72:5d:37:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:04 2024 by rpki-client on console-ams.rpki-client.org