Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/7hE_Pqq_KD4da73gVYqrEj6XMds.roa
File: 7hE_Pqq_KD4da73gVYqrEj6XMds.roa (raw, json)
Hash identifier: i+8fwSbsGs5Q+YV0Bh+NSXlTkCXvqpSa2p8Vl2Azd9A=
Subject key identifier: EE:11:3F:3E:AA:BF:28:3E:1D:6B:BD:E0:55:8A:AB:12:3E:97:31:DB
Certificate issuer: /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial: 01856D13ACC993C4D0DB4C7BC84497E9A5DE
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/7hE_Pqq_KD4da73gVYqrEj6XMds.roa
Signing time: Sun 01 Jan 2023 11:24:44 +0000
ROA not before: Sun 01 Jan 2023 11:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41698
IP address blocks: 95.128.208.0/21 maxlen: 21
193.227.124.0/24 maxlen: 24
194.62.220.0/24 maxlen: 24
2a02:608::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:13:ac:c9:93:c4:d0:db:4c:7b:c8:44:97:e9:a5:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Validity
Not Before: Jan 1 11:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee113f3eaabf283e1d6bbde0558aab123e9731db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:23:52:57:d1:6d:32:9f:45:03:e4:78:be:7f:
7e:6a:ac:68:42:c7:29:3b:33:34:46:32:2b:3e:d4:
78:19:71:b0:43:9a:d4:66:09:30:2a:d5:0a:14:a7:
b6:63:0b:bb:a3:25:1f:ce:8d:24:e5:92:47:6e:80:
6f:46:68:77:ad:f1:f3:45:b6:74:34:e2:cd:22:d1:
b2:20:ac:a5:9b:7c:64:f9:59:1e:56:fb:59:a9:34:
0b:92:6f:43:b0:57:75:b9:77:2f:ab:32:80:ea:39:
e7:56:8f:08:c2:7b:c3:be:ce:30:9c:ef:08:e3:8d:
99:6c:69:98:aa:dd:8d:31:15:0d:2f:d6:f3:06:ac:
d6:c0:d2:b0:45:a4:77:66:7a:27:d9:9a:c8:ee:d5:
1d:cd:d0:73:cb:0c:f9:e7:42:78:63:58:fd:5f:c4:
dc:97:d5:fd:b3:ae:34:37:d5:52:16:5b:62:49:5a:
a8:58:60:1a:7f:60:e1:9b:9e:c9:11:ef:b7:c0:11:
4b:49:f2:a4:e0:a9:90:e4:e4:e3:09:32:0d:11:cc:
95:2e:6d:d0:b4:6d:9c:5a:ef:a7:6b:a6:7e:1b:a7:
2d:c7:3f:81:f3:3e:9b:fc:c9:a2:c6:e0:ce:9d:18:
2b:71:8e:d8:34:a8:6f:51:d5:95:c4:09:5f:c8:a8:
e4:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:11:3F:3E:AA:BF:28:3E:1D:6B:BD:E0:55:8A:AB:12:3E:97:31:DB
X509v3 Authority Key Identifier:
keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/7hE_Pqq_KD4da73gVYqrEj6XMds.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.128.208.0/21
193.227.124.0/24
194.62.220.0/24
IPv6:
2a02:608::/32
Signature Algorithm: sha256WithRSAEncryption
af:1e:bd:2c:e9:cf:84:44:3c:9a:7b:8e:16:ea:5c:08:93:48:
05:86:7b:e0:38:13:b2:1b:40:de:cc:93:b4:b5:3c:01:a1:c9:
b7:13:a4:d1:f6:1d:b6:9d:b6:06:14:14:f8:55:67:27:48:4e:
6f:04:9d:b1:7d:0b:ad:86:d6:e5:9a:c2:11:2c:ed:ed:d7:85:
7f:32:db:2c:08:f5:cf:b0:54:08:61:93:e7:bf:e1:4c:96:e1:
3d:e5:58:66:9d:dd:b3:33:8f:6b:88:70:f0:ee:c7:aa:b9:58:
f6:0c:a6:4e:b1:42:75:b2:7c:01:ac:5f:2d:3e:50:21:29:3a:
eb:c6:23:55:fe:8c:0a:4f:83:a3:7c:15:7f:9d:c7:b8:f7:07:
86:e5:e3:69:0b:7e:37:6c:07:b2:8e:cb:ec:7b:05:55:1c:f5:
c8:6e:64:05:9c:71:7c:c9:51:54:46:ca:bf:01:01:02:48:3e:
c9:c1:87:30:0c:d4:cd:73:54:4c:90:73:ce:a7:27:84:54:ce:
9d:b9:26:03:b0:a6:7b:10:78:a6:45:ad:67:1b:b5:2c:6d:e6:
56:1e:17:46:62:84:b5:7c:a4:bc:5e:cc:9f:75:60:bc:90:2d:
c6:69:d8:e4:aa:3f:0d:10:9a:1f:65:8c:24:ab:7b:2c:94:69:
30:e7:77:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:16 2024 by rpki-client on console-fra.rpki-client.org