Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/y24qE0dBoTFF5gOuoWQtHoIzfiM.roa
File: y24qE0dBoTFF5gOuoWQtHoIzfiM.roa (raw, json)
Hash identifier: IGplsLZmwiIUuTnxgsAXStIrfoXkQWEf2bR0ZIYiaRQ=
Subject key identifier: CB:6E:2A:13:47:41:A1:31:45:E6:03:AE:A1:64:2D:1E:82:33:7E:23
Certificate issuer: /CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Certificate serial: 01856F0B6DBD840BEC592D98ED9A9D352DDE
Authority key identifier: E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/y24qE0dBoTFF5gOuoWQtHoIzfiM.roa
Signing time: Sun 01 Jan 2023 20:34:58 +0000
ROA not before: Sun 01 Jan 2023 20:34:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15451
IP address blocks: 46.182.144.0/21 maxlen: 21
193.27.48.0/21 maxlen: 21
79.140.48.0/20 maxlen: 21
91.190.200.0/21 maxlen: 21
185.26.76.0/22 maxlen: 22
80.94.128.0/20 maxlen: 20
2a00:e50::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:0b:6d:bd:84:0b:ec:59:2d:98:ed:9a:9d:35:2d:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e737c9a442a8b4a4c912f11bc2b6d3cf100adf42
Validity
Not Before: Jan 1 20:34:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb6e2a134741a13145e603aea1642d1e82337e23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:76:d9:bc:b3:17:a0:dd:73:a6:fb:f2:2f:22:
80:e0:ea:08:b9:18:53:f7:91:10:ab:19:78:84:b8:
10:6a:84:f8:50:e5:e0:ac:9d:6f:e1:2e:ee:82:09:
a6:da:c8:0d:2a:a8:ca:71:a9:1b:87:1e:4b:d9:20:
ed:fa:20:72:58:a4:ed:e5:d2:c3:75:ef:83:08:88:
aa:f0:76:e7:d2:5b:ed:08:e8:37:74:bf:fb:9c:9c:
67:c5:5e:d6:7d:a9:7e:0d:60:c3:41:63:e9:b6:2d:
2c:8e:c8:14:82:42:3a:2a:94:39:00:19:2f:67:ab:
8c:ab:fe:66:b9:10:54:04:70:44:cc:3b:ea:03:e1:
18:c6:ca:f4:17:d6:1a:8d:36:50:c7:d0:81:0e:d6:
55:33:a1:db:e3:0c:c1:8c:c4:b0:67:c5:36:17:20:
16:f6:d5:d0:c5:e1:09:a6:22:8d:92:2f:00:99:de:
ca:fd:3d:32:c4:ee:ff:48:50:b9:b5:74:13:ed:15:
90:16:c4:dd:6b:d2:bc:84:fc:43:e8:62:0a:68:e3:
a2:d5:49:c4:46:d1:46:2c:c2:9a:af:06:46:69:2b:
29:85:4b:1c:05:42:d0:14:73:44:50:61:4b:5b:14:
18:f2:63:ec:a9:71:67:a4:ba:bc:26:cc:69:f8:08:
73:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6E:2A:13:47:41:A1:31:45:E6:03:AE:A1:64:2D:1E:82:33:7E:23
X509v3 Authority Key Identifier:
keyid:E7:37:C9:A4:42:A8:B4:A4:C9:12:F1:1B:C2:B6:D3:CF:10:0A:DF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5zfJpEKotKTJEvEbwrbTzxAK30I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/y24qE0dBoTFF5gOuoWQtHoIzfiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/17667e-0219-421e-8412-31f60373a092/1/5zfJpEKotKTJEvEbwrbTzxAK30I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.144.0/21
79.140.48.0/20
80.94.128.0/20
91.190.200.0/21
185.26.76.0/22
193.27.48.0/21
IPv6:
2a00:e50::/29
Signature Algorithm: sha256WithRSAEncryption
84:06:0e:75:82:29:e1:4c:c0:5a:e4:e4:f7:f1:29:a1:47:e8:
f7:96:89:76:d4:ce:bf:c3:4d:d3:e5:d7:c6:35:ca:5a:a6:ad:
fc:63:2d:9f:21:25:59:3b:e4:d6:d3:ca:a1:2e:6e:ef:d1:75:
92:4c:9b:4f:98:85:bf:45:00:31:83:40:aa:0e:78:8a:83:27:
ef:72:63:ad:fb:53:1b:af:75:7b:fa:b9:21:d1:ec:ff:60:2f:
ab:75:c1:2b:11:65:20:bd:50:ef:78:0c:d2:34:df:8b:ea:ba:
d0:88:d0:00:99:e8:c8:51:62:7a:51:96:0f:bd:e9:ca:01:d1:
60:b3:4a:b4:40:8d:dd:06:de:d7:bf:98:c0:19:57:d5:36:f7:
97:c9:4d:45:51:3f:0b:85:84:f0:41:d2:d9:10:ad:29:2c:78:
eb:bc:e2:71:b7:9e:16:90:22:b7:a0:bf:4b:66:eb:15:ed:55:
5b:af:a0:04:4b:72:97:25:65:b6:9f:24:74:9d:7e:bc:63:4e:
fa:b3:c9:3a:03:9a:48:95:0b:12:9a:3c:4f:22:e6:38:27:2a:
73:91:3d:11:6e:dc:06:a3:5e:da:db:ea:99:b9:26:40:60:ec:
2f:5a:87:24:aa:7b:81:50:d1:6b:55:3a:db:08:ab:10:fb:2b:
c0:d4:56:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:34:17 2024 by rpki-client on console-ams.rpki-client.org