Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S5IH5uzxRLmUk5dv8IBF2_EFUjw.roa
File: S5IH5uzxRLmUk5dv8IBF2_EFUjw.roa (raw, json)
Hash identifier: zFNboOz4Gf7rV6LpTNEI8Eh/SaSX0Crks429mITmwMA=
Subject key identifier: 4B:92:07:E6:EC:F1:44:B9:94:93:97:6F:F0:80:45:DB:F1:05:52:3C
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018AEF23DE95393DC15BC9A71E0A87C9DB7D
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S5IH5uzxRLmUk5dv8IBF2_EFUjw.roa
Signing time: Mon 02 Oct 2023 06:46:59 +0000
ROA not before: Mon 02 Oct 2023 06:46:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 178.22.29.0/24 maxlen: 24
77.72.82.0/24 maxlen: 24
84.246.83.0/24 maxlen: 24
193.163.95.0/24 maxlen: 24
46.253.136.0/24 maxlen: 24
46.31.66.0/24 maxlen: 24
5.57.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:23:de:95:39:3d:c1:5b:c9:a7:1e:0a:87:c9:db:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 2 06:46:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4b9207e6ecf144b99493976ff08045dbf105523c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:2f:05:ab:bc:42:a5:93:e4:d7:ce:a6:84:d1:
17:cd:59:b8:16:e1:6b:63:fc:6e:f2:08:6a:b2:73:
ba:63:9f:b7:94:42:3d:a4:df:3b:39:28:b6:66:2d:
46:fb:fa:00:00:ff:21:90:7e:ba:00:52:c1:e6:4c:
bd:c5:34:d0:1f:7d:a0:ee:c8:cb:ef:fd:f0:82:65:
b8:e9:53:94:6b:ec:12:9a:41:f6:55:2b:68:6b:12:
2a:31:02:4b:a4:99:8d:96:2d:2f:b4:f0:eb:32:80:
6d:fc:b7:05:e7:eb:f8:30:e2:6a:5a:2c:74:af:ed:
a3:41:09:73:54:db:c4:0d:53:ef:2e:1d:85:56:26:
d5:6e:d1:3e:78:79:16:fd:c5:ce:4d:64:e7:09:64:
a0:6a:92:5b:9d:86:c9:71:62:59:d3:dc:5e:ad:b6:
f9:e3:d6:fe:cc:54:36:bc:e7:ff:43:5b:8c:a9:e1:
84:a3:b1:e5:ac:4c:a3:71:40:1a:87:cb:a2:8c:78:
1a:fc:2d:fe:08:94:51:0e:8f:1f:c0:6d:e0:04:62:
24:af:ca:a8:ba:d4:7f:91:fc:41:60:7e:0b:98:a1:
c3:fd:fc:4a:18:86:f3:59:85:d6:ca:69:e9:a3:10:
8c:e2:4e:6a:6d:65:9b:e8:5d:64:fc:e1:f3:ee:5f:
1e:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:92:07:E6:EC:F1:44:B9:94:93:97:6F:F0:80:45:DB:F1:05:52:3C
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/S5IH5uzxRLmUk5dv8IBF2_EFUjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.213.0/24
46.31.66.0/24
46.253.136.0/24
77.72.82.0/24
84.246.83.0/24
178.22.29.0/24
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4e:d2:4f:60:5c:d0:5f:ff:01:11:ef:08:e5:7d:df:cf:08:
b3:de:cf:3a:9a:a3:1d:98:6b:00:9e:30:b9:e1:cb:88:bd:33:
99:e5:fa:06:b4:9c:a6:ba:58:9c:8c:a4:ee:66:f3:8d:79:12:
c6:d8:1a:72:4f:b4:bc:c4:ad:c7:5c:9b:4a:f4:e6:61:c5:73:
99:fe:34:8e:f7:cd:77:80:7e:47:00:c9:0c:b3:84:14:8b:39:
25:88:f9:01:87:2f:21:79:ef:e4:10:3b:0b:f7:ab:54:f0:19:
8d:a9:64:b8:cd:cc:f7:33:bf:5d:50:74:4d:5d:cd:2e:a3:b3:
5b:47:e1:46:b9:a9:c0:5f:14:68:3b:6d:4f:93:b6:fe:de:5a:
4f:22:df:c1:4f:3f:07:16:65:41:6b:db:f5:b5:16:c3:8a:02:
5f:b7:38:e2:fa:f3:36:9d:9f:2a:ec:60:03:a0:50:b3:88:b1:
43:2f:58:48:b0:19:65:ad:27:fd:26:12:d9:1e:78:bd:9f:e0:
f8:3b:d3:ba:4a:57:3e:0b:64:92:52:06:9f:64:6d:f5:c8:1e:
cd:b5:71:e9:57:2c:4e:5e:db:f3:16:af:5e:67:37:b4:06:9a:
74:c9:a1:88:db:76:df:05:70:f9:93:47:75:d6:36:4d:df:f8:
97:1b:89:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 30 19:03:36 2023 by rpki-client on console-fra.rpki-client.org