Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/N7EubbGf8MPrAQEjHQNWMgnGZSk.roa
File: N7EubbGf8MPrAQEjHQNWMgnGZSk.roa (raw, json)
Hash identifier: 8U0lQ2yrvZMNHXQatTP+lKZN4L9p658oqsiGge0I7uU=
Subject key identifier: 37:B1:2E:6D:B1:9F:F0:C3:EB:01:01:23:1D:03:56:32:09:C6:65:29
Certificate issuer: /CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Certificate serial: 01857228054F809280554FF97BB706D9382C
Authority key identifier: 60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/N7EubbGf8MPrAQEjHQNWMgnGZSk.roa
Signing time: Mon 02 Jan 2023 11:05:03 +0000
ROA not before: Mon 02 Jan 2023 11:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198761
IP address blocks: 185.25.228.0/22 maxlen: 24
91.243.64.0/23 maxlen: 24
91.242.223.0/24 maxlen: 24
213.5.236.0/23 maxlen: 24
2a04:3380::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:28:05:4f:80:92:80:55:4f:f9:7b:b7:06:d9:38:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=607c0e942bf80a7d57490cc7bb04285b02aeff7a
Validity
Not Before: Jan 2 11:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=37b12e6db19ff0c3eb0101231d03563209c66529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:51:b3:6c:7a:3e:80:45:81:95:ce:23:47:6d:
cf:3b:ae:a6:1b:04:31:1e:21:bd:35:2c:49:b5:61:
be:d9:a5:b9:cd:f3:7e:e2:6c:a6:0d:b8:2b:c5:ee:
78:a1:8e:bb:80:94:a2:ad:4b:73:36:9f:b4:f8:79:
53:76:c8:9d:dd:f4:22:95:98:85:54:9d:16:24:05:
d9:e3:10:46:05:3a:7b:61:3d:49:f1:72:1b:37:62:
c2:7b:37:dd:a8:ec:a6:e3:8b:1a:a8:a6:3d:8a:c1:
90:4f:27:7c:f0:8d:c9:54:19:ee:da:e5:e5:ea:db:
0d:f6:55:2c:2d:18:f4:b3:bc:1e:b4:9d:f7:2d:d1:
ed:75:53:6f:b6:d4:ac:b7:71:ed:23:ec:0e:16:dc:
6d:a6:39:25:ea:12:84:c7:ac:2e:64:1f:af:90:77:
14:d8:d8:62:c4:cb:a8:be:fd:f8:b1:b3:c7:3a:ef:
b0:47:31:4b:ee:1a:1d:da:ac:8a:e8:d4:97:b2:27:
f6:74:90:84:c7:06:4f:f9:ea:2b:49:86:a1:81:83:
26:a6:ff:cc:4f:03:9e:36:94:21:15:db:47:3b:3b:
ca:c7:c1:d5:32:f1:09:1e:9a:a9:dc:8a:fe:2f:10:
6e:a6:62:2c:ab:b0:99:4e:ce:dc:b8:1c:02:20:81:
4f:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B1:2E:6D:B1:9F:F0:C3:EB:01:01:23:1D:03:56:32:09:C6:65:29
X509v3 Authority Key Identifier:
keyid:60:7C:0E:94:2B:F8:0A:7D:57:49:0C:C7:BB:04:28:5B:02:AE:FF:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/N7EubbGf8MPrAQEjHQNWMgnGZSk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/df1512-3fa4-40fc-8dca-6437acd8a3cf/1/YHwOlCv4Cn1XSQzHuwQoWwKu_3o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.242.223.0/24
91.243.64.0/23
185.25.228.0/22
213.5.236.0/23
IPv6:
2a04:3380::/29
Signature Algorithm: sha256WithRSAEncryption
6e:0c:21:a5:ca:54:b6:94:31:8e:14:fd:66:0f:27:66:a0:1b:
8c:84:3e:56:8f:bd:e2:23:34:47:86:55:de:35:71:a2:e5:30:
9d:a2:41:e6:61:6f:58:f8:37:49:1f:51:07:eb:53:c1:d1:15:
3a:ea:31:cc:1a:2a:41:f0:10:c9:6a:78:a9:6f:85:b3:89:66:
3b:65:53:1f:9f:c6:f3:c1:41:36:87:64:4d:a3:85:6e:69:94:
64:0d:2c:c2:52:ad:b9:bf:12:2f:ca:cf:fd:5f:ff:7c:7a:2a:
e3:8d:73:e1:fb:a1:39:19:73:cf:e8:19:8a:48:82:43:6b:06:
ee:14:a4:de:a5:77:34:87:4c:6b:4a:ee:8a:97:8c:00:6b:df:
f1:a3:90:ec:10:e2:80:2b:89:26:3d:e1:65:70:9b:cc:a8:02:
7c:e9:27:46:44:be:8b:f7:38:34:64:64:6d:1d:bc:7b:cc:d3:
72:c9:ed:69:41:f0:92:86:f6:76:ef:dd:ad:3b:ad:9b:db:bb:
84:c5:47:65:8a:b7:8e:16:01:a0:d8:a4:c5:dd:ef:9c:03:5c:
a1:67:63:db:82:47:e4:e7:71:fe:10:5f:21:69:79:26:4f:83:
d0:f8:f0:c6:b9:90:df:d0:ce:8f:e2:a7:74:ad:52:00:f1:47:
56:7f:9c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:31 2024 by rpki-client on console-fra.rpki-client.org