Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EpPe-sRzVzQc7sMVR72j7mq8FP4.roa
File: EpPe-sRzVzQc7sMVR72j7mq8FP4.roa (raw, json)
Hash identifier: WfLTujHMuoREfCX84e16mizB0vEs2F0lekXCrL8XDDs=
Subject key identifier: 12:93:DE:FA:C4:73:57:34:1C:EE:C3:15:47:BD:A3:EE:6A:BC:14:FE
Certificate issuer: /CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Certificate serial: 0189979628616B5F41380A0EBD98AD53286F
Authority key identifier: 1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EpPe-sRzVzQc7sMVR72j7mq8FP4.roa
Signing time: Thu 27 Jul 2023 13:42:27 +0000
ROA not before: Thu 27 Jul 2023 13:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5378
IP address blocks: 62.56.0.0/17 maxlen: 17
80.176.0.0/15 maxlen: 15
83.104.0.0/14 maxlen: 14
212.225.0.0/17 maxlen: 17
62.49.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:97:96:28:61:6b:5f:41:38:0a:0e:bd:98:ad:53:28:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1ada225cb7f29416e7534695fbfb21762fee93c8
Validity
Not Before: Jul 27 13:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1293defac47357341ceec31547bda3ee6abc14fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:d7:49:9f:56:2c:ac:78:41:01:60:1d:fc:09:
4a:cc:fb:01:6e:53:8d:5d:f1:c6:2e:81:33:29:3f:
26:b1:d4:2d:f5:41:7e:c8:d1:a3:57:d0:a2:4b:48:
d3:79:cd:2c:ee:1c:2b:d2:b1:26:67:ec:60:b6:62:
b6:a8:5d:cf:dc:61:4a:03:5b:d1:0c:aa:10:86:c2:
cd:8a:9d:93:04:3f:62:27:3b:53:09:7d:1a:6e:31:
f1:e4:a0:f5:8d:72:0b:5f:48:b1:aa:1f:b8:c1:ff:
00:c1:de:4e:e4:78:f4:d4:72:3b:61:85:0b:2d:e3:
95:f5:51:5e:a9:a6:cc:60:20:9b:56:11:d2:24:aa:
fd:86:e4:c8:87:1a:69:ba:af:9a:b1:56:b3:93:39:
cc:a9:06:8c:53:2d:cc:cc:31:7f:84:94:6b:e4:15:
36:ee:ca:88:c4:25:f0:7a:d2:c9:9a:60:27:31:6e:
67:7d:48:77:50:4f:05:16:52:7b:5d:7f:eb:19:47:
f1:55:e8:b8:b7:69:cf:43:6b:fa:f4:da:9c:f2:3a:
3c:ba:3f:e5:c8:d0:e3:84:fb:7a:15:86:a1:22:84:
b4:ef:32:aa:78:cf:a0:d7:45:e0:58:70:dc:00:56:
0b:22:28:da:f7:1d:fc:31:fa:53:ee:73:dc:f6:15:
7a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:93:DE:FA:C4:73:57:34:1C:EE:C3:15:47:BD:A3:EE:6A:BC:14:FE
X509v3 Authority Key Identifier:
keyid:1A:DA:22:5C:B7:F2:94:16:E7:53:46:95:FB:FB:21:76:2F:EE:93:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GtoiXLfylBbnU0aV-_shdi_uk8g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/EpPe-sRzVzQc7sMVR72j7mq8FP4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/e9d9cc-2668-42fc-8315-7525d4d408b5/1/GtoiXLfylBbnU0aV-_shdi_uk8g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.49.0.0/16
62.56.0.0/17
80.176.0.0/15
83.104.0.0/14
212.225.0.0/17
Signature Algorithm: sha256WithRSAEncryption
6a:32:38:fb:64:06:40:ef:51:08:8d:ab:96:57:18:0c:79:49:
20:5d:a4:bb:32:3a:1e:b5:f7:b5:1d:fc:fb:88:ed:f2:0b:2e:
d2:71:a6:cc:13:81:1a:e4:55:44:9d:67:21:25:52:86:61:aa:
af:2b:bf:2d:b7:b0:c0:99:c2:50:6d:ef:6a:c2:a8:a9:88:29:
73:a0:7d:c6:2f:cf:fd:de:46:7c:73:2a:17:40:a5:cd:78:32:
7a:80:c2:29:a1:f1:fa:aa:58:46:c3:e9:d5:a8:06:38:36:28:
54:5b:e9:b5:82:2f:d2:38:81:49:b8:07:39:82:8f:a0:9a:21:
82:3a:aa:a2:8a:f0:05:ec:22:89:6e:6a:08:ae:ea:c4:40:7a:
a5:14:79:1d:50:33:6f:ff:31:48:03:5c:e1:74:52:5c:5c:d9:
56:d1:c8:b4:3d:30:4f:3b:dc:c3:14:79:64:65:82:08:37:0e:
4c:48:59:19:34:f8:b6:5e:21:77:10:de:7d:42:92:db:0a:c9:
57:74:72:08:ed:b6:40:fa:fb:9b:ae:21:35:36:7c:54:a7:e6:
2c:eb:76:f4:9b:a5:5f:80:a5:4c:bb:b4:63:90:73:51:ee:1f:
91:a6:22:09:ed:2f:23:6d:92:0d:91:07:45:1e:c3:07:7d:ae:
7c:c2:25:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 27 14:25:01 2023 by rpki-client on console-ams.rpki-client.org