Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7oTqeVmtm-Ny6osphJLXWsSAnto.roa
File: 7oTqeVmtm-Ny6osphJLXWsSAnto.roa (raw, json)
Hash identifier: VE/zsyTKKy8sZViMoxld+6P67Sk/B0LY+ZDfXNjqgeA=
Subject key identifier: EE:84:EA:79:59:AD:9B:E3:72:EA:8B:29:84:92:D7:5A:C4:80:9E:DA
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4D178918949FB4C37B6987037376D
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7oTqeVmtm-Ny6osphJLXWsSAnto.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203936
IP address blocks: 185.226.192.0/23 maxlen: 23
217.26.190.0/23 maxlen: 23
89.42.112.0/23 maxlen: 23
77.247.120.0/22 maxlen: 22
185.227.103.0/24 maxlen: 24
45.67.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d1:78:91:89:49:fb:4c:37:b6:98:70:37:37:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee84ea7959ad9be372ea8b298492d75ac4809eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:19:fe:ec:7b:b6:2a:7c:bc:44:43:d9:a9:20:
8d:05:90:5b:34:ba:d3:9e:09:0e:a0:8f:ef:a4:a3:
85:af:50:26:7b:ed:76:21:13:f2:86:a3:40:1f:18:
37:f0:b6:3a:ac:f2:5e:d6:d6:cf:46:ad:2d:d7:2a:
f8:b6:f8:30:0c:27:cb:a2:b7:07:7b:c0:ce:2c:b0:
62:d7:8e:4a:1a:f1:4c:1a:8c:c1:2f:50:2b:cf:96:
33:c9:a6:3d:69:1d:56:2b:10:54:0c:66:e6:9c:d7:
b9:59:e4:80:a7:3f:89:7c:f1:7f:b9:55:6b:36:5a:
a4:dc:be:e0:cb:d3:fa:ee:7e:51:b0:53:0f:32:fe:
f3:11:a7:b6:be:3e:9e:19:17:bd:e2:9a:84:e6:1c:
f6:55:e4:11:d0:75:60:c8:d3:da:0c:1f:a5:00:1d:
c7:1b:cf:37:63:15:dd:72:3d:c4:96:38:4f:d8:58:
34:bb:ff:51:71:9c:99:dc:6e:ff:31:e0:33:a7:33:
0d:c3:87:4e:22:98:3a:89:bf:74:90:f2:e8:11:36:
6b:88:6a:57:79:82:8d:80:a5:e9:ec:b4:94:97:d0:
39:85:ac:a0:f0:e4:0e:97:d2:e9:fb:94:75:45:63:
69:18:a5:66:b7:34:29:23:25:5f:07:96:00:e8:e9:
2b:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:84:EA:79:59:AD:9B:E3:72:EA:8B:29:84:92:D7:5A:C4:80:9E:DA
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/7oTqeVmtm-Ny6osphJLXWsSAnto.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.244.0/22
77.247.120.0/22
89.42.112.0/23
185.226.192.0/23
185.227.103.0/24
217.26.190.0/23
Signature Algorithm: sha256WithRSAEncryption
80:46:e4:3a:9d:8f:52:76:28:79:cd:c1:77:63:30:fb:fa:98:
a7:52:2b:30:d7:62:f3:be:29:f6:b4:1b:2c:ad:21:b7:aa:a6:
f6:c9:d7:5e:60:4b:ce:e4:27:1c:3f:b8:ff:b2:00:fe:74:2c:
82:bd:e9:34:57:b2:c3:de:84:25:41:0e:bc:c9:48:8e:20:3b:
ec:ae:99:8a:d4:df:e5:f4:3f:24:59:66:7d:a8:14:6e:bc:d9:
dd:54:4a:e3:65:95:91:71:8e:f9:05:90:e1:e7:2e:3c:7e:cc:
bd:b7:ec:60:a8:e0:6f:14:fd:49:16:37:e9:7d:c3:70:15:8a:
14:ea:2e:bc:9c:78:9d:fb:97:9a:1a:46:15:68:c3:41:d8:8d:
2d:61:24:50:d7:b4:61:a1:a1:ee:1e:3b:fd:9a:da:70:71:9d:
9a:e3:12:11:77:3c:c0:37:f1:c0:b8:27:f1:25:55:1d:15:63:
c4:80:14:04:a6:cf:07:e2:72:a1:db:31:4a:e1:58:cb:a1:ff:
01:22:34:1b:b7:37:6a:5e:ee:96:bb:a9:d6:ab:60:8b:61:fb:
a4:92:0d:e2:76:4e:bf:51:85:d4:c6:07:aa:33:14:b2:f8:47:
4d:42:98:63:06:37:07:df:9a:49:75:00:97:8b:44:d7:d5:43:
56:4b:93:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org