Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5FEcEzvsauen1lqpDxqA2Sya0ZU.roa
File: 5FEcEzvsauen1lqpDxqA2Sya0ZU.roa (raw, json)
Hash identifier: dVRMIMtxl/t+/qbMuEj1sre1GUCx0wn42FOaltqK4tM=
Subject key identifier: E4:51:1C:13:3B:EC:6A:E7:A7:D6:5A:A9:0F:1A:80:D9:2C:9A:D1:95
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 018570398FA5C1AC5A73EDBD257934B27090
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5FEcEzvsauen1lqpDxqA2Sya0ZU.roa
Signing time: Mon 02 Jan 2023 02:04:58 +0000
ROA not before: Mon 02 Jan 2023 02:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44889
IP address blocks: 212.16.64.0/19 maxlen: 24
46.38.140.0/24 maxlen: 24
46.38.150.0/24 maxlen: 24
212.16.72.0/24 maxlen: 25
212.80.0.0/19 maxlen: 24
212.80.2.0/24 maxlen: 24
212.80.20.0/23 maxlen: 23
46.38.129.0/24 maxlen: 24
46.38.131.0/24 maxlen: 24
2a00:7d80::/29 maxlen: 64
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:8f:a5:c1:ac:5a:73:ed:bd:25:79:34:b2:70:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jan 2 02:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e4511c133bec6ae7a7d65aa90f1a80d92c9ad195
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:d4:b6:89:67:63:2a:98:3f:d1:88:48:f7:57:
a4:d9:fe:d4:6f:6f:a6:99:ad:09:7f:26:16:76:13:
70:1c:3d:a5:dd:08:bd:a5:ec:1b:82:74:46:fd:46:
86:e2:7f:f4:76:de:4c:40:70:2c:9e:49:f9:4b:b6:
3a:2d:56:98:d9:d9:bd:3e:d1:8d:f3:c4:d5:aa:aa:
92:5a:8b:0b:3c:0e:8f:ab:32:ca:31:03:44:13:e3:
b2:ea:e9:de:cf:b6:bd:4b:f1:5e:e5:32:fd:dc:07:
25:bc:0a:2f:2e:17:07:59:f9:b3:cf:3b:e5:ad:bd:
e5:f9:6f:4c:81:ac:61:76:ca:6a:c8:e7:87:6f:15:
8c:92:55:06:39:d0:90:0e:1b:d3:3a:f9:1b:85:db:
67:93:9b:fc:1b:20:88:72:cb:50:71:62:18:f1:7b:
0f:1d:ad:86:b8:1a:78:ff:0a:2a:d9:b5:d4:3b:b8:
a4:13:ba:f6:cd:11:c3:91:87:b4:e1:73:72:01:88:
9e:f3:ab:8f:a8:da:86:96:65:6c:b9:dd:1f:9b:ed:
23:c0:87:e1:00:e4:d6:b1:d9:73:df:58:9a:87:fc:
e3:6a:09:bc:74:34:9d:74:e2:1e:91:8c:0d:b1:c6:
38:ca:d2:c1:67:2a:56:ca:4e:80:d4:ae:d7:3f:cf:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:51:1C:13:3B:EC:6A:E7:A7:D6:5A:A9:0F:1A:80:D9:2C:9A:D1:95
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/5FEcEzvsauen1lqpDxqA2Sya0ZU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.38.129.0/24
46.38.131.0/24
46.38.140.0/24
46.38.150.0/24
212.16.64.0/19
212.80.0.0/19
IPv6:
2a00:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
0c:6c:b5:ce:88:81:e2:56:41:0c:db:46:41:ec:97:27:50:bd:
53:35:0c:54:ba:5f:1d:96:ff:e6:49:65:37:1f:a7:0d:bb:7f:
2c:fe:0f:4f:5e:e5:c0:f9:6d:be:dc:5c:30:9e:de:49:a2:b6:
13:44:19:48:66:38:f6:6d:8b:f4:55:1c:f1:b3:4c:11:57:c8:
1f:c0:01:ba:4a:11:5a:7a:0a:29:bb:e0:5a:ee:d0:8a:32:08:
7d:1a:8b:f5:30:f6:ee:cf:69:61:00:cc:e2:3d:2b:ac:bf:83:
73:74:47:6d:bf:0c:bb:36:41:65:55:71:ce:8d:de:1d:b1:52:
da:9b:70:23:50:20:ac:96:b1:fe:a1:0c:cf:eb:6c:b4:dc:b7:
b8:f3:10:6d:73:d5:e6:cc:27:6c:cf:ad:af:ce:8a:0c:3e:87:
0d:36:d0:d8:1d:4e:81:59:00:c6:f2:49:c5:9a:cb:1b:a6:2d:
e4:ca:e7:23:c9:b6:be:28:7e:05:f7:5e:dc:fd:9d:06:86:a9:
bd:b1:32:6a:06:1a:be:91:6b:14:63:c0:1c:cb:5a:d9:dc:d2:
e4:64:b7:f7:1f:95:61:3a:9f:1a:89:a9:10:fc:94:54:5c:e3:
35:67:b5:45:0b:2f:5f:6a:da:66:95:fe:8d:df:46:7e:33:1f:
10:6c:bd:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 16 09:54:54 2023 by rpki-client on console-fra.rpki-client.org