Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/e5dUIsc1gXTW2ofVo77IY7gP5Mc.roa
File: e5dUIsc1gXTW2ofVo77IY7gP5Mc.roa (raw, json)
Hash identifier: 8UByNg7e8DpmnuZnkhV9Pi+OehlvrjGbqgsEp6czsnA=
Subject key identifier: 7B:97:54:22:C7:35:81:74:D6:DA:87:D5:A3:BE:C8:63:B8:0F:E4:C7
Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Certificate serial: 01856B8A0E41DB341951EAFBAB357BDF3CCB
Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/e5dUIsc1gXTW2ofVo77IY7gP5Mc.roa
Signing time: Sun 01 Jan 2023 04:14:47 +0000
ROA not before: Sun 01 Jan 2023 04:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34056
IP address blocks: 109.108.64.0/19 maxlen: 19
46.229.48.0/22 maxlen: 22
92.244.96.0/19 maxlen: 19
2a00:1688::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:0e:41:db:34:19:51:ea:fb:ab:35:7b:df:3c:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6
Validity
Not Before: Jan 1 04:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b975422c7358174d6da87d5a3bec863b80fe4c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:92:8a:54:e2:8b:f5:ef:a0:f8:fc:61:5f:3a:
89:8d:6f:e6:5b:25:8e:13:12:5d:35:11:a3:16:25:
bf:5e:dd:64:d1:9e:a6:71:4e:ab:6d:7b:d4:6f:a0:
dd:84:b4:6f:15:06:1a:d0:45:12:61:a8:27:83:5f:
3a:55:c1:7a:d4:aa:da:6f:c1:5e:5c:2e:89:99:29:
d0:2d:c1:d9:86:56:48:94:a0:68:5d:63:47:17:1e:
71:27:99:31:7b:92:5c:1e:f8:9c:de:7e:d0:15:a5:
3c:ed:6f:67:f3:79:4b:7c:e9:4b:c2:c5:04:27:d8:
07:73:1e:9b:ce:7c:52:04:78:44:44:12:a4:d8:71:
13:07:78:43:aa:46:5d:5a:ac:40:9a:ef:35:21:67:
6f:03:8d:7c:fc:82:c9:e8:1e:c5:86:de:7e:a7:58:
bb:fb:5f:ba:0f:43:8e:70:a1:d6:7c:d8:73:0a:70:
d7:5b:98:73:71:ce:ae:7f:dc:ba:37:ac:6a:9c:01:
f9:d5:8e:7a:34:0f:1d:b8:30:cd:6a:5b:24:7f:a6:
a9:59:57:dd:a5:f9:9f:e6:f3:71:bd:04:2c:54:99:
4f:d4:dc:98:da:4d:6a:6a:7e:1f:77:c7:31:28:25:
06:75:90:9e:36:7a:31:af:8b:79:3a:40:b8:87:79:
76:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:97:54:22:C7:35:81:74:D6:DA:87:D5:A3:BE:C8:63:B8:0F:E4:C7
X509v3 Authority Key Identifier:
keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/e5dUIsc1gXTW2ofVo77IY7gP5Mc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.48.0/22
92.244.96.0/19
109.108.64.0/19
IPv6:
2a00:1688::/48
Signature Algorithm: sha256WithRSAEncryption
9d:fe:7e:ae:e5:0e:54:e5:ac:ca:fc:e3:99:58:fc:df:b9:11:
03:f5:fe:ad:a2:66:ab:d3:4f:ff:c1:d5:64:5f:f8:3d:e9:78:
2d:d1:50:e7:45:14:d9:bc:58:90:7c:e5:73:1f:02:7e:91:a9:
f6:14:41:6c:1c:23:a2:7e:6b:0f:bc:a2:78:bd:67:a5:aa:0a:
df:ed:62:fc:85:44:f8:b5:33:89:87:6c:5d:d1:4a:66:83:60:
83:0d:8a:63:eb:5f:d8:55:fc:b8:c6:be:ec:44:fd:59:b3:4b:
3c:7f:38:f1:2b:9a:c1:11:68:aa:b0:77:bc:6a:ae:c9:80:a8:
06:61:4c:e3:7f:88:50:db:31:91:07:29:00:01:3b:da:fd:6b:
5b:62:17:00:2e:1f:cd:fc:3d:6b:46:a7:4c:7d:c6:30:42:1f:
ac:86:9a:2c:9e:ae:d8:68:40:8a:5e:af:45:c9:5e:7c:59:8f:
61:d8:7e:14:fd:e4:58:52:fc:c5:30:23:e1:4b:8d:0b:72:da:
84:be:2d:85:39:64:17:97:db:5d:3f:fc:ab:60:44:1e:f6:23:
27:8f:20:51:fc:a9:63:da:f0:36:31:d3:97:52:d5:bc:0d:2a:
9f:57:84:93:55:ad:e5:84:91:84:10:6e:b0:bc:f7:76:a9:a8:
aa:10:d0:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:17 2024 by rpki-client on console-fra.rpki-client.org