Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/iXFBJKoBsVNTo1eLBk2ZSloAP4c.roa
File: iXFBJKoBsVNTo1eLBk2ZSloAP4c.roa (raw, json)
Hash identifier: OLcClMnM8N5Rn6syCpZE55oNT1g55acBwTOfAyI4cps=
Subject key identifier: 89:71:41:24:AA:01:B1:53:53:A3:57:8B:06:4D:99:4A:5A:00:3F:87
Certificate issuer: /CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Certificate serial: 0185701528C1410492E283E774231F03C17E
Authority key identifier: EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/iXFBJKoBsVNTo1eLBk2ZSloAP4c.roa
Signing time: Mon 02 Jan 2023 01:25:12 +0000
ROA not before: Mon 02 Jan 2023 01:25:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44558
IP address blocks: 46.106.192.0/24 maxlen: 24
46.106.196.0/24 maxlen: 24
46.106.193.0/24 maxlen: 24
46.106.197.0/24 maxlen: 24
46.106.194.0/24 maxlen: 24
46.106.198.0/24 maxlen: 24
46.106.195.0/24 maxlen: 24
46.106.199.0/24 maxlen: 24
46.106.200.0/24 maxlen: 24
46.106.201.0/24 maxlen: 24
46.106.203.0/24 maxlen: 24
46.106.202.0/24 maxlen: 24
46.106.209.0/24 maxlen: 24
46.106.213.0/24 maxlen: 24
46.106.208.0/24 maxlen: 24
46.106.212.0/24 maxlen: 24
46.106.211.0/24 maxlen: 24
46.106.210.0/24 maxlen: 24
46.106.217.0/24 maxlen: 24
46.106.216.0/24 maxlen: 24
46.106.215.0/24 maxlen: 24
46.106.219.0/24 maxlen: 24
46.106.214.0/24 maxlen: 24
46.106.218.0/24 maxlen: 24
46.106.221.0/24 maxlen: 24
46.106.220.0/24 maxlen: 24
46.106.223.0/24 maxlen: 24
46.106.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:28:c1:41:04:92:e2:83:e7:74:23:1f:03:c1:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee4381ce03baa625019980f378fe41bb2b6621b9
Validity
Not Before: Jan 2 01:25:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=89714124aa01b15353a3578b064d994a5a003f87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:7b:f3:87:0e:93:cc:98:c1:0a:29:8e:81:
46:88:f3:9c:bb:e4:24:4a:99:3d:07:90:9a:67:36:
a9:ca:cc:26:18:21:33:aa:9b:47:b7:d3:15:3b:e6:
e7:5e:47:fd:79:4f:9f:d6:7b:80:b9:a0:4e:b9:03:
4c:b2:be:b9:ba:4b:18:93:e5:e0:7d:5d:00:89:42:
6c:c1:5b:10:d6:a0:ea:7f:c1:da:19:7b:c7:4b:8f:
6a:6a:18:4b:53:23:9a:a2:74:99:a9:31:db:23:aa:
68:10:99:d2:68:54:41:dc:0d:fa:a1:3a:14:13:7e:
0a:34:07:51:e7:00:f5:f4:74:4c:5a:b1:46:fd:57:
68:12:9f:2b:a0:cd:d5:75:d3:ee:66:1d:44:d3:d8:
13:15:8b:3e:5e:0f:6f:57:5d:7c:b9:3c:fc:86:35:
60:95:e8:96:9f:f5:0a:40:d2:cc:07:28:fc:c8:4d:
03:d4:33:35:b9:1b:0b:92:dc:91:b8:49:cb:44:4f:
5d:c3:55:05:20:cc:17:bf:c8:52:a5:bd:45:39:a0:
3c:0c:5b:d0:60:60:05:e7:ab:02:9d:f0:bd:c1:0c:
b7:22:c8:97:85:f6:3c:a0:5c:86:f0:63:ea:8c:59:
56:bc:3b:84:4e:41:0f:6d:b2:35:00:28:81:15:b6:
39:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:71:41:24:AA:01:B1:53:53:A3:57:8B:06:4D:99:4A:5A:00:3F:87
X509v3 Authority Key Identifier:
keyid:EE:43:81:CE:03:BA:A6:25:01:99:80:F3:78:FE:41:BB:2B:66:21:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7kOBzgO6piUBmYDzeP5BuytmIbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/iXFBJKoBsVNTo1eLBk2ZSloAP4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5ea12b-51c6-4195-aeb6-c1addd7debaa/1/7kOBzgO6piUBmYDzeP5BuytmIbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.106.192.0-46.106.203.255
46.106.208.0/20
Signature Algorithm: sha256WithRSAEncryption
90:d7:8a:b7:43:b7:31:f1:a8:e4:77:a6:b8:3b:b4:bc:33:cf:
fb:6d:ac:a8:8d:b6:c4:95:d1:07:8f:20:0a:1a:b3:47:7d:2c:
6e:fa:2a:e9:0b:73:20:6d:92:3a:4a:40:52:9e:85:85:9c:62:
96:c4:8e:64:1a:79:f4:e7:5f:09:5b:71:48:b6:f4:be:b8:90:
84:71:d3:8c:01:29:f6:4d:1e:db:20:d8:b5:0c:43:80:e7:19:
8e:13:b9:b3:db:46:64:ec:8f:3f:f6:e8:6c:fe:ab:61:b2:4c:
c7:a5:d2:a1:f0:5e:90:68:99:0a:e2:e3:31:fe:ca:94:35:b6:
07:2b:98:fa:53:3d:ec:52:aa:ed:56:23:4d:9e:02:f6:7c:9f:
81:20:ec:49:f4:41:d4:2a:21:33:60:63:00:6d:ed:82:85:4a:
1b:bf:22:03:e7:68:21:35:2f:f0:db:c0:0d:3f:d1:02:cb:17:
65:02:dd:97:91:d6:db:2f:79:64:07:6d:c8:71:05:75:93:da:
07:d5:68:fd:ad:77:f3:92:11:ef:6a:59:c8:36:4c:05:03:d6:
ba:ed:ff:3c:0b:a9:ac:5e:26:f0:6a:16:27:b9:7d:cd:60:9d:
05:2f:db:e3:e7:20:42:bc:52:da:6a:4e:bd:6d:65:5f:94:18:
71:a6:a6:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:35 2024 by rpki-client on console-fra.rpki-client.org