Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/75fUhGRdddgDBrspbj2v4VuQh-E.roa
File: 75fUhGRdddgDBrspbj2v4VuQh-E.roa (raw, json)
Hash identifier: bbf/xATe8OhZTbHzKtkJIEAsANA7+nj3C2m2PZDkxuo=
Subject key identifier: EF:97:D4:84:64:5D:75:D8:03:06:BB:29:6E:3D:AF:E1:5B:90:87:E1
Certificate issuer: /CN=f22bed3f37cd72826511c574560deb55542550e4
Certificate serial: 018571152545E15A01F46D4DEBE6FDFE0E9D
Authority key identifier: F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/75fUhGRdddgDBrspbj2v4VuQh-E.roa
Signing time: Mon 02 Jan 2023 06:04:49 +0000
ROA not before: Mon 02 Jan 2023 06:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24586
IP address blocks: 188.66.16.0/21 maxlen: 24
46.22.180.0/22 maxlen: 24
46.22.184.0/21 maxlen: 24
80.95.160.0/21 maxlen: 24
80.95.168.0/22 maxlen: 24
80.95.172.0/22 maxlen: 24
93.92.96.0/22 maxlen: 24
93.92.100.0/22 maxlen: 24
2001:4c10::/32 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:25:45:e1:5a:01:f4:6d:4d:eb:e6:fd:fe:0e:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f22bed3f37cd72826511c574560deb55542550e4
Validity
Not Before: Jan 2 06:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ef97d484645d75d80306bb296e3dafe15b9087e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:07:0c:ce:2b:fa:f0:11:17:f6:11:2d:c9:39:
c4:6c:62:fd:cf:5c:7d:01:8f:82:25:3f:ef:11:70:
28:ad:7a:da:39:2d:bf:29:ae:f9:67:20:08:dc:33:
4b:80:16:41:f4:a0:87:74:d6:e3:2d:cc:f4:e1:28:
b7:52:c6:65:2b:a2:fc:98:95:3a:e2:0d:fd:b4:ff:
d2:b1:10:a0:e0:24:f1:9e:b0:f3:55:31:43:4a:78:
db:17:13:7b:98:11:bb:27:7b:7a:b0:77:25:26:c5:
82:86:47:c4:9f:b2:61:b1:48:b8:89:91:47:26:bc:
5c:c8:26:b1:47:8e:e4:0c:8f:9b:e9:f8:e8:fd:9a:
54:84:61:de:00:0c:66:d2:85:ca:f0:d7:c4:9a:ad:
dc:a9:95:2a:85:68:b5:dd:9c:f4:66:e8:78:c1:42:
52:23:f1:9d:f2:83:10:c4:14:69:b3:ee:2e:39:78:
a4:fc:f7:8d:ef:b7:7b:b4:01:33:d8:8c:77:26:0f:
1e:77:a9:ee:43:47:d6:c4:f0:f0:d2:a5:d2:1e:cc:
f9:f5:a1:7f:88:a4:8a:29:3e:bd:26:3c:eb:90:67:
f1:54:7b:64:ce:31:ee:4b:bd:6d:1d:87:b1:64:fa:
b4:4b:32:76:e8:66:51:2e:b3:33:46:a5:4f:df:a4:
ed:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:D4:84:64:5D:75:D8:03:06:BB:29:6E:3D:AF:E1:5B:90:87:E1
X509v3 Authority Key Identifier:
keyid:F2:2B:ED:3F:37:CD:72:82:65:11:C5:74:56:0D:EB:55:54:25:50:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/75fUhGRdddgDBrspbj2v4VuQh-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/294fa1-e938-4cd2-9a89-29062e870b64/1/8ivtPzfNcoJlEcV0Vg3rVVQlUOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.22.180.0-46.22.191.255
80.95.160.0/20
93.92.96.0/21
188.66.16.0/21
IPv6:
2001:4c10::/32
Signature Algorithm: sha256WithRSAEncryption
77:85:e6:70:59:49:39:56:f1:ae:1d:ca:05:b1:34:57:9a:a2:
99:32:96:70:79:dc:3d:01:cf:af:f2:e8:a2:66:2b:18:a3:eb:
64:6c:2f:90:1b:2d:1a:ff:ab:46:de:de:88:d5:f6:c9:aa:b1:
14:3a:9b:8d:fa:ab:b9:13:86:1d:6f:f7:5c:d0:9a:9a:35:e8:
58:16:1e:7b:36:97:24:76:51:04:ac:57:ec:e8:52:0f:bc:2e:
32:3d:d4:5f:d7:e8:f6:cd:61:80:3f:05:6f:60:d9:2e:09:69:
d4:4a:22:a9:e0:1a:2e:32:c9:04:a0:a2:49:05:4c:36:b2:6d:
75:8c:fb:39:c2:37:39:69:23:44:21:9c:c2:37:ea:1f:1e:c6:
9c:d2:f3:27:69:c1:7c:25:f7:9c:dc:aa:8e:13:22:36:e1:00:
83:61:09:84:9e:76:d5:75:c1:c9:de:ae:8d:dd:47:de:a1:8d:
eb:9f:e5:be:9f:6c:96:c1:58:ae:2b:39:e3:e4:e4:e1:f5:76:
db:81:41:18:f3:f3:a3:24:af:c3:9e:e3:79:5b:3a:0d:cf:88:
e9:5b:a5:e0:37:dc:54:90:54:06:2c:d4:de:60:b2:86:51:33:
1a:9c:75:c5:1a:66:b9:12:fc:04:ef:1c:8b:cd:d2:b9:d9:c6:
8b:e5:83:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:27 2024 by rpki-client on console-fra.rpki-client.org