Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/eZNJYPiIVPeaspTE6-Cbt38Me-A.roa
File: eZNJYPiIVPeaspTE6-Cbt38Me-A.roa (raw, json)
Hash identifier: CxV5ZwBaBm5r+WC94EKYaj6aK4KC72V0RaYNinSI2+Q=
Subject key identifier: 79:93:49:60:F8:88:54:F7:9A:B2:94:C4:EB:E0:9B:B7:7F:0C:7B:E0
Certificate issuer: /CN=ecf42776be532bd0575332855d8c42c4952ed931
Certificate serial: 0185729EDC9DA7A13A5CF1DD43770335318F
Authority key identifier: EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/eZNJYPiIVPeaspTE6-Cbt38Me-A.roa
Signing time: Mon 02 Jan 2023 13:14:51 +0000
ROA not before: Mon 02 Jan 2023 13:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20743
IP address blocks: 146.109.145.0/24 maxlen: 24
146.109.153.0/24 maxlen: 24
146.109.160.0/19 maxlen: 19
146.109.161.0/24 maxlen: 24
2a01:4642:100::/40 maxlen: 40
2a01:4642:200::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:dc:9d:a7:a1:3a:5c:f1:dd:43:77:03:35:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ecf42776be532bd0575332855d8c42c4952ed931
Validity
Not Before: Jan 2 13:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79934960f88854f79ab294c4ebe09bb77f0c7be0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:4e:07:dd:0e:7c:3e:ae:ab:14:4d:bc:80:7c:
da:1b:50:6e:f2:7c:16:f1:1c:49:16:c2:73:91:3c:
e9:5b:d3:4a:b6:86:de:bc:94:db:fa:b4:d4:6a:57:
2b:5d:6a:9c:6a:61:62:b2:1b:bb:98:93:95:c7:1c:
bd:8b:54:37:b9:a3:c5:7d:5e:f5:bb:3d:95:31:db:
0a:b4:d0:10:97:61:57:af:6b:e1:ab:7c:33:9f:9a:
ad:2c:4b:2b:6c:8e:af:4c:b4:61:57:d8:fb:b1:64:
24:5a:d7:a6:96:a2:d6:62:8f:b6:c1:11:e5:0a:09:
c2:e3:cf:6e:41:ae:fd:18:13:59:3b:d2:55:61:00:
92:89:d9:db:75:b6:90:28:90:58:7a:d0:c0:00:70:
8c:bc:f9:5e:30:69:1f:bd:a9:9e:cd:91:c9:ff:22:
4d:89:dd:ce:e3:7e:9c:e2:fe:5b:ff:89:bc:6f:04:
37:cf:f6:ac:ee:5d:c7:a6:4f:52:28:89:18:62:3a:
8b:97:72:d4:5f:9e:3d:76:89:40:dc:98:a2:f5:cd:
50:d6:f7:84:e5:dd:b7:70:0c:6e:8f:c7:f2:14:54:
4f:6e:de:17:fa:69:c2:ff:75:74:bf:63:35:8c:d1:
7f:67:4e:28:95:7f:bb:14:3c:af:f5:ba:f8:52:35:
96:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:93:49:60:F8:88:54:F7:9A:B2:94:C4:EB:E0:9B:B7:7F:0C:7B:E0
X509v3 Authority Key Identifier:
keyid:EC:F4:27:76:BE:53:2B:D0:57:53:32:85:5D:8C:42:C4:95:2E:D9:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7PQndr5TK9BXUzKFXYxCxJUu2TE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/eZNJYPiIVPeaspTE6-Cbt38Me-A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ebd49f-f569-4152-b0b8-5e53c23b55b0/1/7PQndr5TK9BXUzKFXYxCxJUu2TE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.109.145.0/24
146.109.153.0/24
146.109.160.0/19
IPv6:
2a01:4642:100::-2a01:4642:2ff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:17:45:52:53:35:b4:a1:68:7d:7b:58:a1:6a:5e:93:a8:72:
c7:b5:2e:9a:79:ca:f1:4d:96:92:c4:72:d2:61:eb:e9:64:da:
f8:d2:d5:51:2d:83:4e:fc:c0:cc:dd:5d:be:45:0b:ec:bf:fd:
6d:fd:3f:38:2b:a7:39:65:de:51:11:37:1b:30:28:8c:44:68:
f3:b7:90:bf:ad:c7:3b:2a:bd:8a:55:36:dd:7b:6b:53:99:ef:
f7:55:4f:c0:4b:40:e6:92:32:ff:26:6a:4f:64:12:90:fa:b4:
26:9b:2f:78:99:dc:3c:2a:7d:61:a3:03:b2:ec:d4:87:f3:e8:
3a:a3:59:89:db:b3:c0:25:3e:de:35:ae:c9:92:87:7f:61:52:
bd:f4:5d:00:58:33:69:44:1b:92:18:f1:b2:36:e7:53:92:87:
f9:7e:a8:29:5d:3f:b8:13:16:26:d8:41:69:34:c5:a4:83:74:
23:36:c8:e5:71:70:41:58:c8:ff:36:39:32:25:2e:20:c6:b5:
13:9e:7a:23:2d:a0:43:33:a2:12:6a:3a:b4:05:44:e1:1b:09:
95:10:6b:4c:74:a4:ff:ec:98:ed:34:6e:36:cb:95:b9:a7:97:
0c:fd:c3:e9:0f:be:fe:1e:da:22:bd:83:fc:f8:d7:34:5a:81:
20:98:02:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:34 2024 by rpki-client on console-ams.rpki-client.org