Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/rxcmNJ0uXkKBO7q4l9RiKPMFiaY.roa
File: rxcmNJ0uXkKBO7q4l9RiKPMFiaY.roa (raw, json)
Hash identifier: m7WMt7/4MqfPb9bP3NVy7dItrBdSeNjgMM4yRPUTDd4=
Subject key identifier: AF:17:26:34:9D:2E:5E:42:81:3B:BA:B8:97:D4:62:28:F3:05:89:A6
Certificate issuer: /CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Certificate serial: 018B81DF498B2EA5E7020BAFE968D4B35027
Authority key identifier: 76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/rxcmNJ0uXkKBO7q4l9RiKPMFiaY.roa
Signing time: Mon 30 Oct 2023 18:36:16 +0000
ROA not before: Mon 30 Oct 2023 18:36:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7393
IP address blocks: 178.22.29.0/24 maxlen: 24
62.106.80.0/24 maxlen: 24
91.246.57.0/24 maxlen: 24
77.72.82.0/24 maxlen: 24
84.246.83.0/24 maxlen: 24
193.163.95.0/24 maxlen: 24
46.253.136.0/24 maxlen: 24
46.31.66.0/24 maxlen: 24
5.57.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:81:df:49:8b:2e:a5:e7:02:0b:af:e9:68:d4:b3:50:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=767f3bd4bfbd3071c38cd4d7092bd3490920c3d9
Validity
Not Before: Oct 30 18:36:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af1726349d2e5e42813bbab897d46228f30589a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:52:b0:2b:34:ee:a7:2f:8c:b8:49:5d:1d:
09:93:0d:c0:57:ae:df:d6:ba:05:6d:fa:ac:7f:dc:
a9:26:7f:7b:5c:b8:59:5a:d3:e2:88:ae:e5:9b:ad:
63:ed:30:08:88:f8:a2:b3:db:c3:ff:1d:41:c4:9b:
1d:dc:6e:30:42:7a:58:f1:88:f8:0e:4a:bc:13:7f:
be:b8:17:63:76:19:85:33:99:f4:62:c0:f0:d8:7e:
93:c9:84:d9:1e:2b:90:ef:f8:1b:a9:57:e9:19:ca:
e1:48:7f:2f:b6:d3:9e:cd:ff:af:eb:aa:f7:8d:29:
90:2e:65:06:23:27:58:4a:43:98:11:96:48:42:73:
19:ad:fd:2b:c2:9c:bf:b5:37:0c:03:21:68:43:a8:
78:d5:b9:28:94:27:a6:01:7c:5e:c2:6b:6f:d8:a1:
2a:76:b0:55:69:7b:fb:9e:c2:3b:39:d1:3b:3f:4e:
52:8c:94:c4:6c:e7:73:56:ed:16:35:a0:92:7d:f3:
16:4b:40:8f:cd:2a:4b:79:56:44:b6:58:83:ea:27:
05:7f:d7:c4:68:67:0e:8f:f4:86:7d:b6:fc:9a:3b:
85:21:48:c1:82:8d:28:38:cf:63:93:92:61:90:3b:
8e:9e:e8:c2:45:6b:06:48:78:3e:a1:39:62:c5:db:
02:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:26:34:9D:2E:5E:42:81:3B:BA:B8:97:D4:62:28:F3:05:89:A6
X509v3 Authority Key Identifier:
keyid:76:7F:3B:D4:BF:BD:30:71:C3:8C:D4:D7:09:2B:D3:49:09:20:C3:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dn871L-9MHHDjNTXCSvTSQkgw9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/rxcmNJ0uXkKBO7q4l9RiKPMFiaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/ff5cc6-8f61-447b-b658-4fb559b3b9b3/1/dn871L-9MHHDjNTXCSvTSQkgw9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.213.0/24
46.31.66.0/24
46.253.136.0/24
62.106.80.0/24
77.72.82.0/24
84.246.83.0/24
91.246.57.0/24
178.22.29.0/24
193.163.95.0/24
Signature Algorithm: sha256WithRSAEncryption
42:a9:55:54:a2:0f:54:e0:e7:91:3a:51:4c:11:da:ac:11:c3:
1b:ae:56:ef:b0:a2:c6:64:a4:29:b2:47:24:1e:1a:3c:8f:46:
d4:5f:1a:82:32:73:f5:39:6e:ca:b0:53:55:9c:72:8f:c4:26:
7d:2f:d2:94:80:0c:29:39:67:09:70:27:17:8a:2f:e0:94:18:
af:95:72:7e:76:45:37:5e:2f:15:0c:ae:e0:d4:5a:6e:08:b7:
72:52:09:0b:03:3b:08:3d:51:f3:66:74:4a:2e:f6:b1:39:84:
d7:c1:f9:76:fb:c4:17:12:38:3a:82:2d:f7:8f:f6:68:6e:f1:
bc:25:41:28:2f:dc:e2:e5:2a:c2:cc:20:24:f9:e4:fc:1d:33:
f8:f3:78:56:fa:4c:6c:60:d2:f8:06:ad:92:19:30:4c:9b:d3:
aa:9d:b8:ae:6a:d6:d1:18:b1:29:14:25:d4:48:ee:b1:f1:09:
6f:d1:82:c8:b4:16:02:4e:b9:b5:17:ed:ce:58:7c:ea:2e:65:
31:ab:a4:8b:c5:63:3b:cc:5a:d4:3c:f3:95:bf:a5:00:40:ed:
73:87:84:48:ea:ea:88:d0:e0:96:be:f8:15:75:e4:4e:6a:eb:
ae:04:3d:0b:f6:d6:6f:8e:e9:9d:2f:05:e7:c6:81:a1:c4:3c:
70:1e:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 15 15:35:11 2023 by rpki-client on console-ams.rpki-client.org