Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/ELG3Bw7SvmzGsN3Cc43wCZO6-0U.roa
File: ELG3Bw7SvmzGsN3Cc43wCZO6-0U.roa (raw, json)
Hash identifier: 4+rVzSwVCNVZIyD1RVX1xR/LN+HE1M+9lA6RMJsFhuY=
Subject key identifier: 10:B1:B7:07:0E:D2:BE:6C:C6:B0:DD:C2:73:8D:F0:09:93:BA:FB:45
Certificate issuer: /CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Certificate serial: 018570797E3C5CA229619D988A1CBC52AEA8
Authority key identifier: 1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/ELG3Bw7SvmzGsN3Cc43wCZO6-0U.roa
Signing time: Mon 02 Jan 2023 03:14:48 +0000
ROA not before: Mon 02 Jan 2023 03:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197529
IP address blocks: 185.176.124.0/22 maxlen: 24
46.226.72.0/21 maxlen: 24
2a00:5a00::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:79:7e:3c:5c:a2:29:61:9d:98:8a:1c:bc:52:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ee5efbf65897160d55a52dc3a22c017876cd06c
Validity
Not Before: Jan 2 03:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10b1b7070ed2be6cc6b0ddc2738df00993bafb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5c:2d:01:18:ce:bb:77:ae:b0:1c:97:16:c7:
6a:7e:54:f1:bf:56:77:74:23:52:e9:fb:f2:43:b4:
c4:ea:b8:9b:65:1e:33:5f:57:4b:f5:fd:63:71:a3:
59:6f:39:d5:02:9b:0f:cb:c5:3e:14:1a:62:4f:df:
57:f3:63:23:de:8f:c2:1b:69:0f:53:f6:36:99:5d:
9e:68:b2:b0:df:9e:f7:2b:b7:30:51:dd:ed:24:f8:
48:8c:e3:86:1e:3f:aa:8b:5c:fe:8a:71:28:b9:5e:
e2:8b:61:54:c9:0c:c1:89:39:93:14:fc:58:a8:98:
3a:a5:2c:4a:f7:0e:0c:ea:c4:0e:d0:de:66:54:52:
22:9e:d8:99:ce:ab:c5:77:49:0a:0a:46:37:07:10:
70:d8:88:53:a1:ab:43:7a:f1:8a:f7:7b:ec:d2:64:
88:b6:f6:b3:6e:6a:72:5c:2f:77:b5:7d:6d:f5:a6:
7d:ab:b6:ff:c0:50:08:b0:a3:14:b5:88:88:e2:b2:
f8:65:8e:b3:61:f2:05:29:2f:63:ca:ca:9b:e9:28:
c2:5e:2e:65:ee:e7:c3:18:fa:0a:c4:a6:d7:b1:af:
85:37:ed:92:ab:50:12:b3:f3:22:60:a5:c2:3b:30:
7c:92:50:e4:e8:91:6c:9e:ab:f0:5f:12:6f:ff:87:
14:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:B1:B7:07:0E:D2:BE:6C:C6:B0:DD:C2:73:8D:F0:09:93:BA:FB:45
X509v3 Authority Key Identifier:
keyid:1E:E5:EF:BF:65:89:71:60:D5:5A:52:DC:3A:22:C0:17:87:6C:D0:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/ELG3Bw7SvmzGsN3Cc43wCZO6-0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/332477-c83c-4f80-b1be-7c0db7bae135/1/HuXvv2WJcWDVWlLcOiLAF4ds0Gw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.72.0/21
185.176.124.0/22
IPv6:
2a00:5a00::/32
Signature Algorithm: sha256WithRSAEncryption
22:b6:b9:19:3a:f8:b9:39:20:01:4b:fe:ce:0d:f8:82:2c:07:
b5:82:c0:dd:66:98:d4:ba:4d:b6:92:56:7a:07:d5:21:ee:8a:
61:33:c6:d3:01:f7:3d:fd:a3:c8:ea:08:49:6d:19:d1:ed:84:
eb:57:b6:e1:dd:3a:6c:25:c7:97:36:7f:45:83:bb:40:ab:92:
f0:6c:f9:1f:47:ba:ae:95:44:e2:ad:df:b8:b1:a8:68:f6:04:
06:fc:d4:4c:fe:ae:4d:22:b7:a1:a7:99:bc:77:0e:7c:fa:92:
73:40:fe:75:d3:91:8e:fd:3e:23:88:ab:91:a1:03:3a:96:70:
4b:c1:13:24:45:43:97:01:8f:e3:c0:05:2e:19:b6:a8:ce:44:
95:cd:5d:d8:9f:3e:ec:c9:08:bb:09:bb:61:23:06:72:70:f1:
94:f4:6b:c0:92:e0:49:ca:da:dd:70:39:a2:3d:6f:bf:7c:eb:
38:57:8b:a7:e9:16:38:03:8c:84:34:f7:9f:0e:ab:ab:fe:00:
07:be:b1:d9:bf:a9:ca:ca:71:e9:34:a6:34:30:ac:d6:b3:fb:
7f:c1:de:58:1f:23:7e:df:05:c2:29:13:c9:a7:b9:0b:14:b7:
c8:e9:68:9f:dc:d4:e2:86:c9:0f:ca:a1:53:7b:6e:1d:b3:4c:
41:66:13:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:05 2024 by rpki-client on console-ams.rpki-client.org