Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/okEbcg_FZj_0hl-NAPIzOpgToq0.roa
File: okEbcg_FZj_0hl-NAPIzOpgToq0.roa (raw, json)
Hash identifier: WH2uUoKhO0wibfAumVkvNHEarjHuAExJJG/7JimvbyI=
Subject key identifier: A2:41:1B:72:0F:C5:66:3F:F4:86:5F:8D:00:F2:33:3A:98:13:A2:AD
Certificate issuer: /CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Certificate serial: 0185728C80665E8F61F9F8C516B8BB1A629E
Authority key identifier: 72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/okEbcg_FZj_0hl-NAPIzOpgToq0.roa
Signing time: Mon 02 Jan 2023 12:54:48 +0000
ROA not before: Mon 02 Jan 2023 12:54:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20766
IP address blocks: 185.57.124.0/22 maxlen: 22
80.67.160.0/19 maxlen: 19
80.67.182.0/24 maxlen: 24
193.23.30.0/24 maxlen: 24
45.94.16.0/22 maxlen: 22
2a0f:6780::/29 maxlen: 29
2a04:9ac2::/32 maxlen: 32
2001:910::/32 maxlen: 32
2001:913:4000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:8c:80:66:5e:8f:61:f9:f8:c5:16:b8:bb:1a:62:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72ed2fbb7213fbf32ad4c087f8b0b22cecef4fea
Validity
Not Before: Jan 2 12:54:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a2411b720fc5663ff4865f8d00f2333a9813a2ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:26:62:75:a8:a7:70:e9:5c:42:8a:85:b6:a3:
50:52:07:65:27:8c:85:12:3a:a4:50:f9:f4:83:cf:
af:94:59:26:3d:f0:e1:13:49:2f:2c:9c:87:38:91:
f8:00:1b:29:01:e6:30:ed:0f:af:01:98:f6:68:ab:
4d:58:a5:f5:dd:26:01:cf:a5:25:82:ba:a8:40:43:
34:35:74:71:99:33:4a:92:6a:e6:78:a7:5d:b2:ce:
2c:25:91:6e:cb:dc:fe:1f:4f:43:59:81:81:72:4e:
4e:7f:e1:2a:1a:ef:3c:6a:a7:f6:d7:11:29:39:f3:
4a:03:61:c6:f4:3b:ea:84:c4:21:86:3e:dd:ae:c6:
e9:19:79:98:b3:f7:15:a7:1e:d4:75:51:9b:59:d4:
ce:cb:97:1e:18:69:78:8e:0e:11:d8:b7:36:34:b2:
63:74:61:81:ea:e8:f9:47:31:3f:e7:c7:b8:53:bd:
93:49:1b:5c:e2:99:f8:79:32:bf:d2:53:20:f3:4e:
34:31:42:f6:66:2d:aa:93:d2:c8:b4:db:fd:30:bd:
04:e5:e8:de:d2:d1:ab:35:3e:26:c8:78:1a:e1:0d:
f8:a5:16:a1:fb:20:82:d2:60:2b:fa:2e:f2:69:a5:
02:c6:af:00:ab:7d:45:ab:7d:d7:86:f3:1a:4e:9c:
56:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:41:1B:72:0F:C5:66:3F:F4:86:5F:8D:00:F2:33:3A:98:13:A2:AD
X509v3 Authority Key Identifier:
keyid:72:ED:2F:BB:72:13:FB:F3:2A:D4:C0:87:F8:B0:B2:2C:EC:EF:4F:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/okEbcg_FZj_0hl-NAPIzOpgToq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/e5a892-23f5-49fa-b6a9-a65233b3e975/1/cu0vu3IT-_Mq1MCH-LCyLOzvT-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.16.0/22
80.67.160.0/19
185.57.124.0/22
193.23.30.0/24
IPv6:
2001:910::/32
2001:913:4000::/36
2a04:9ac2::/32
2a0f:6780::/29
Signature Algorithm: sha256WithRSAEncryption
86:9d:71:ca:ff:17:f5:ee:01:53:45:75:fd:6d:38:e0:a5:14:
0d:ba:29:29:b9:c9:86:3c:df:99:4f:68:38:06:79:fe:a2:41:
be:98:53:b2:a4:8b:02:c3:68:eb:82:24:72:a3:63:ea:34:27:
23:47:10:5f:9a:55:09:57:a9:97:b4:0d:48:f2:ce:3f:ee:bf:
d1:ae:a0:e0:78:4c:f8:3a:ef:c4:e7:ec:9a:1c:0d:fd:63:59:
01:54:77:cd:64:b4:ab:7c:14:b2:b4:59:07:0d:4d:91:18:20:
39:a6:00:20:2c:14:7d:9b:1a:3e:17:c1:55:ba:27:ce:8c:69:
60:23:5d:c8:b0:72:61:6b:e1:43:33:85:de:69:3d:49:2a:bd:
36:4a:1f:2d:bc:b1:21:5b:0b:33:06:19:b9:c2:f4:7b:97:c5:
30:4b:13:78:23:ef:b9:09:0c:9b:90:46:0c:10:f5:d4:0c:45:
46:59:d9:83:74:55:73:6b:89:9e:9b:60:1b:96:00:d0:10:8a:
72:34:8a:3e:ea:af:14:c2:77:d3:3b:d1:89:ea:67:41:f4:58:
b1:7e:2f:63:60:f6:72:c2:e0:e4:37:a3:c5:97:c5:17:8d:6f:
72:64:59:ed:ac:31:de:4b:ba:2f:d4:fe:f8:81:f5:33:2c:ad:
c8:5e:02:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:50:37 2023 by rpki-client on console-ams.rpki-client.org