Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/7FKgEBbSlShHWx0NlB5oe41dsBE.roa
File: 7FKgEBbSlShHWx0NlB5oe41dsBE.roa (raw, json)
Hash identifier: 9yw2q3UeOPdRgQKjqGeO4uSZCG4TuIDRqAS3jqJYgCc=
Subject key identifier: EC:52:A0:10:16:D2:95:28:47:5B:1D:0D:94:1E:68:7B:8D:5D:B0:11
Certificate issuer: /CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Certificate serial: 01856F796F7FEC33BC93D236DD7B1D60E35C
Authority key identifier: 4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/7FKgEBbSlShHWx0NlB5oe41dsBE.roa
Signing time: Sun 01 Jan 2023 22:35:07 +0000
ROA not before: Sun 01 Jan 2023 22:35:07 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35205
IP address blocks: 77.78.166.0/24 maxlen: 24
77.78.160.0/20 maxlen: 20
77.78.160.0/19 maxlen: 19
77.78.176.0/20 maxlen: 20
77.78.184.0/22 maxlen: 22
212.37.176.0/20 maxlen: 20
185.27.152.0/22 maxlen: 22
77.78.188.0/22 maxlen: 22
46.28.80.0/21 maxlen: 21
212.37.160.0/20 maxlen: 20
212.37.164.0/22 maxlen: 22
212.37.160.0/19 maxlen: 19
212.37.168.0/21 maxlen: 21
2a03:ed00::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:6f:7f:ec:33:bc:93:d2:36:dd:7b:1d:60:e3:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4df2c6fa54a8cc2dc71e802cf83f5c776ce974c9
Validity
Not Before: Jan 1 22:35:07 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec52a01016d29528475b1d0d941e687b8d5db011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a0:f2:24:07:9c:28:ae:71:60:81:86:a3:c5:
38:95:f9:47:93:dd:31:74:20:a7:ca:f2:53:74:b8:
00:d7:bd:75:08:b1:2a:df:af:56:de:bd:24:fa:3d:
29:e2:98:c4:35:33:fa:43:7a:a2:d9:87:ce:40:bd:
12:07:74:d1:ca:62:16:fd:96:d1:23:39:85:9e:fa:
95:15:f5:ca:ab:d8:f1:e8:d1:d1:71:2f:01:64:6f:
3d:6b:59:5c:67:bd:e3:1c:ec:ee:07:32:3b:35:7c:
c9:0d:db:24:dd:f1:62:ab:41:3f:9a:c4:a3:9a:3f:
48:3e:ba:a0:d4:ca:9e:55:bd:b5:d8:61:08:9c:15:
b4:28:d2:3e:c4:c2:fd:98:9c:c4:20:6e:17:ce:1b:
bf:47:40:e1:5d:00:74:70:19:3c:83:30:15:bc:72:
94:c7:d1:f5:03:4e:41:b2:f7:9d:ce:7a:89:64:ca:
55:9d:4b:19:e1:27:e8:0c:27:80:f0:5b:cf:ec:49:
82:c1:db:d4:3a:19:fa:c4:4c:e2:00:62:d9:bb:d0:
2d:09:f2:d7:b4:69:42:a0:7a:6d:3f:9f:0e:d6:5d:
f2:fd:98:dd:ba:70:5f:b2:0b:1e:85:59:ea:6d:67:
90:87:f4:11:4d:a8:96:fb:33:d6:84:2b:eb:fc:2c:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:52:A0:10:16:D2:95:28:47:5B:1D:0D:94:1E:68:7B:8D:5D:B0:11
X509v3 Authority Key Identifier:
keyid:4D:F2:C6:FA:54:A8:CC:2D:C7:1E:80:2C:F8:3F:5C:77:6C:E9:74:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TfLG-lSozC3HHoAs-D9cd2zpdMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/7FKgEBbSlShHWx0NlB5oe41dsBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/54b0d0-e9fe-48d1-968d-9e243c2d8821/1/TfLG-lSozC3HHoAs-D9cd2zpdMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.80.0/21
77.78.160.0/19
185.27.152.0/22
212.37.160.0/19
IPv6:
2a03:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
a3:76:a9:28:20:f7:ee:c9:c6:37:11:14:db:a9:4b:49:4c:b7:
52:38:9b:91:87:d9:21:84:ae:00:47:fd:f1:c4:39:52:39:93:
55:36:de:c0:a9:8d:e5:10:10:ae:92:35:20:c7:59:d3:c6:88:
71:02:6d:13:48:75:6b:7b:68:dd:1f:c3:bf:c0:0f:72:e6:3c:
b3:cc:c7:0e:b9:c6:95:d7:ca:9d:83:62:04:d4:37:ac:e3:dd:
47:bf:53:e7:10:df:6e:8e:16:1e:e9:2e:ef:c6:bf:66:38:38:
65:22:a2:df:5a:b8:f1:1a:bd:14:7c:85:5a:14:f9:d4:ed:e1:
95:35:15:4c:16:bd:f9:b6:04:21:93:10:94:81:8a:50:09:6f:
03:fc:81:f2:6c:da:26:32:35:52:49:67:4f:cf:35:d9:6e:57:
e5:63:72:71:1b:bd:20:76:55:84:c4:aa:c4:17:fa:86:4e:7d:
a6:50:71:60:9e:89:fc:8f:c7:50:a4:53:8e:14:34:94:0c:3f:
b7:51:9c:1e:79:f7:6e:e9:7c:2c:e2:39:d3:44:72:30:6b:85:
00:57:25:53:84:1a:b9:1a:b2:3f:96:2c:a8:a7:8c:81:ce:84:
2c:44:6f:70:19:b6:3c:5a:ad:72:53:95:85:d2:5d:b7:be:96:
71:05:be:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 24 13:37:26 2023 by rpki-client on console-ams.rpki-client.org