Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/7yhF0F57fjyM6ylug09un17Puuw.roa
File: 7yhF0F57fjyM6ylug09un17Puuw.roa (raw, json)
Hash identifier: 3rdwAVYxZi+gUrCex8o2UAB1IbEMsDqPQ4iJCl4Q1RQ=
Subject key identifier: EF:28:45:D0:5E:7B:7E:3C:8C:EB:29:6E:83:4F:6E:9F:5E:CF:BA:EC
Certificate issuer: /CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Certificate serial: 01856CCB033E4934594E8A7229910BC5BE5C
Authority key identifier: D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/7yhF0F57fjyM6ylug09un17Puuw.roa
Signing time: Sun 01 Jan 2023 10:05:21 +0000
ROA not before: Sun 01 Jan 2023 10:05:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39125
IP address blocks: 46.254.94.0/23 maxlen: 24
80.251.112.0/20 maxlen: 20
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:03:3e:49:34:59:4e:8a:72:29:91:0b:c5:be:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d504e641e55a48aee0141e2c0d26227102caa6d4
Validity
Not Before: Jan 1 10:05:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef2845d05e7b7e3c8ceb296e834f6e9f5ecfbaec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c8:bf:49:c0:3e:ae:d1:97:cd:cc:a1:7d:50:
21:4f:3f:84:d9:af:0a:36:c5:24:b0:5c:54:75:20:
ac:3f:ca:87:3a:a8:23:a7:83:b2:06:95:9d:c7:6e:
6e:aa:9c:8d:bb:9e:23:5d:04:03:bc:ce:71:6a:e4:
00:f9:40:6c:64:0d:21:3c:71:38:96:eb:fd:26:ed:
f9:51:c2:19:0a:47:e8:d4:6d:1c:50:d6:a0:a9:a6:
1b:b7:94:12:6d:dd:cb:0d:f8:a6:58:d5:d5:5d:c2:
c7:52:7b:80:cd:cb:7f:5f:4b:31:e8:86:e9:7c:a7:
dc:29:05:99:82:1d:3b:2a:11:af:eb:08:58:bc:5a:
6f:26:27:99:70:b0:75:07:53:e7:85:ce:92:c2:40:
35:6f:47:a2:34:34:43:53:3d:bc:8a:24:71:d2:26:
92:0d:c1:70:1e:51:6b:af:84:98:c0:56:80:68:a8:
b1:b2:c0:ea:ae:50:44:da:ed:73:86:ed:3e:60:07:
af:34:53:49:fb:46:82:23:ce:da:82:01:dd:ff:4a:
15:96:27:21:f9:a5:c8:d6:3f:3a:d5:1d:86:b4:15:
5d:1b:77:71:54:a8:3e:bb:90:88:f0:35:28:3e:6e:
46:b8:1e:60:91:2d:7d:07:c0:71:2d:d6:1c:15:78:
ae:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:28:45:D0:5E:7B:7E:3C:8C:EB:29:6E:83:4F:6E:9F:5E:CF:BA:EC
X509v3 Authority Key Identifier:
keyid:D5:04:E6:41:E5:5A:48:AE:E0:14:1E:2C:0D:26:22:71:02:CA:A6:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1QTmQeVaSK7gFB4sDSYicQLKptQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/7yhF0F57fjyM6ylug09un17Puuw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f01f35-2cca-4e5a-828a-6bffcb7c0f0a/1/1QTmQeVaSK7gFB4sDSYicQLKptQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.94.0/23
80.251.112.0/20
Signature Algorithm: sha256WithRSAEncryption
16:3b:8d:48:47:79:bc:92:19:72:1e:f1:22:b6:51:4e:d7:51:
ed:21:b7:f8:0c:bf:f4:4c:e3:1d:43:c2:e2:df:93:1b:ad:a3:
90:fe:46:ba:ea:f8:46:67:06:f5:48:7d:01:7f:55:f9:ab:8e:
48:3b:4e:63:16:e0:f2:c8:4a:fa:14:d7:50:67:65:58:5e:63:
5b:0a:11:76:4e:56:da:dc:22:de:fe:fe:87:eb:98:5b:08:8d:
25:4f:f7:8f:89:c6:c4:08:e4:be:93:11:6e:fd:db:37:43:41:
97:e4:28:e2:c6:63:b0:4d:fa:84:66:ae:58:a2:9f:69:97:5c:
d2:e9:4b:e0:2c:b8:78:c7:18:6a:b0:13:03:26:41:3c:98:45:
12:63:77:95:af:77:22:97:be:2b:37:e3:c3:93:f7:72:de:c1:
88:a0:cf:36:c8:ba:c8:fb:ce:ea:a0:35:78:b6:45:02:c7:b5:
67:23:a5:1c:1f:0c:49:4b:bb:5d:24:7d:25:0b:71:ec:12:15:
ed:a6:a5:fc:76:c4:58:a0:c9:0e:db:e2:33:0f:50:d0:f3:a3:
a7:aa:4a:8a:fe:72:ad:d6:4b:45:ed:2c:b8:d6:50:f3:d0:41:
89:97:9f:02:fc:97:48:79:6f:32:50:c9:79:e6:21:e6:6b:29:
d1:95:2c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:05 2024 by rpki-client on console-fra.rpki-client.org