Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EFZGp6uzUMGrN0n48pudFejsCYQ.roa
File: EFZGp6uzUMGrN0n48pudFejsCYQ.roa (raw, json)
Hash identifier: q/Z02vBpGBGnR41GgKRr1OyljrOW3INHNjlR/CoboAw=
Subject key identifier: 10:56:46:A7:AB:B3:50:C1:AB:37:49:F8:F2:9B:9D:15:E8:EC:09:84
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 018AD73BFBC93F4FC5A5FBC1DE6A6872BD45
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EFZGp6uzUMGrN0n48pudFejsCYQ.roa
Signing time: Wed 27 Sep 2023 15:22:27 +0000
ROA not before: Wed 27 Sep 2023 15:22:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 77.233.128.0/19 maxlen: 19
83.107.192.0/18 maxlen: 18
62.56.0.0/17 maxlen: 17
80.176.0.0/15 maxlen: 15
83.104.0.0/14 maxlen: 14
83.107.128.0/18 maxlen: 18
212.225.0.0/17 maxlen: 17
62.49.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:d7:3b:fb:c9:3f:4f:c5:a5:fb:c1:de:6a:68:72:bd:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Sep 27 15:22:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=105646a7abb350c1ab3749f8f29b9d15e8ec0984
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:2e:83:02:21:61:04:96:ad:21:e3:53:47:c1:
d0:ef:d2:8a:e6:d8:d1:ad:6b:cf:0b:ab:02:11:53:
3a:d5:1c:92:2f:f1:62:de:e3:8e:62:62:ae:ba:3f:
99:64:7e:61:bf:7a:10:f3:86:c6:eb:0b:ac:ec:dd:
c3:53:ce:e5:60:c2:56:bb:a6:58:3d:7f:98:fb:74:
49:dc:cf:56:a1:e3:cc:cc:5d:a2:68:49:d2:f4:bd:
5f:3b:09:df:98:68:12:dd:91:c7:51:bf:53:ad:6b:
ef:d3:83:ee:87:3e:ca:77:f1:50:00:c2:43:97:b8:
99:f4:b3:1b:60:01:7f:38:02:24:1f:49:0c:7e:1f:
41:71:9a:98:bf:e4:17:9a:2d:80:17:3a:1c:38:e7:
c3:1b:bd:cd:70:0c:4b:68:2e:3c:72:1a:62:5d:80:
08:40:32:dc:ac:0c:cd:1a:9b:25:47:46:22:81:80:
85:7f:e2:88:58:30:a0:62:fd:78:62:d7:39:ce:29:
a0:c7:0a:db:ed:6e:e8:a1:2f:bd:fd:75:0d:0b:cc:
62:f4:f8:99:3a:73:bf:d5:76:c6:e2:b4:e2:62:1f:
2b:c4:62:87:ce:78:df:63:fd:87:39:9f:59:f4:61:
50:3a:04:fe:02:2e:8e:50:8d:5c:ba:3f:6f:f0:b7:
9f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:56:46:A7:AB:B3:50:C1:AB:37:49:F8:F2:9B:9D:15:E8:EC:09:84
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EFZGp6uzUMGrN0n48pudFejsCYQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
77.233.128.0/19
80.176.0.0/15
83.104.0.0/14
212.225.0.0/17
Signature Algorithm: sha256WithRSAEncryption
a8:d5:d9:07:08:03:88:f8:cd:e1:cd:74:0b:c0:d6:b5:14:da:
c7:4b:b9:1c:31:a1:c4:82:1a:e0:90:71:60:65:c1:6c:dd:bc:
52:3c:ba:ca:e8:e6:33:b2:1c:eb:df:71:51:7a:18:db:14:4f:
7c:b1:f0:47:6a:4e:46:fb:07:80:83:ec:5b:a2:87:e9:37:03:
4a:be:b3:7c:11:9a:98:c9:ef:c0:a3:00:5b:d9:61:5a:b9:61:
fc:b8:ac:c0:ea:f1:d9:b3:8d:82:44:94:5d:22:ad:eb:bf:ec:
6d:bd:62:1e:58:27:7d:23:6f:e3:c6:db:83:58:a6:b9:47:40:
16:7c:9b:c2:00:48:07:f9:71:3b:ce:38:8a:57:2d:8b:3f:02:
2d:d2:fa:57:76:67:f0:15:02:85:c8:26:db:5e:ed:61:51:a6:
2d:b9:0a:38:14:9f:1b:b0:53:1f:12:d6:38:20:32:dd:c9:69:
8a:93:11:c4:cb:a6:49:2b:c8:10:63:9e:69:41:d0:04:78:8f:
77:a7:46:cf:02:de:96:29:a4:98:5f:b7:c9:29:9c:ee:95:9f:
10:56:2d:ae:23:21:24:d7:73:90:0d:f1:35:3b:cb:3c:c3:ca:
a9:d7:f8:8d:e5:d6:7c:ee:a4:58:c6:dd:fd:ec:f3:ca:84:af:
d6:7e:3a:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 16:30:03 2023 by rpki-client on console-ams.rpki-client.org