Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ei1IL9TlUwL_Z7FCXBAPrzrjHBg.roa
File: ei1IL9TlUwL_Z7FCXBAPrzrjHBg.roa (raw, json)
Hash identifier: 4D3hB+BgsqUsxy3N3KR+GSK3SSjlNTJVz3uldRJeaDQ=
Subject key identifier: 7A:2D:48:2F:D4:E5:53:02:FF:67:B1:42:5C:10:0F:AF:3A:E3:1C:18
Certificate issuer: /CN=826605b4d27f13968e8794e6ef091223748817d8
Certificate serial: 01856ED4C87B2A6EE743029314DC44D08211
Authority key identifier: 82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ei1IL9TlUwL_Z7FCXBAPrzrjHBg.roa
Signing time: Sun 01 Jan 2023 19:35:16 +0000
ROA not before: Sun 01 Jan 2023 19:35:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 147.136.68.0/22 maxlen: 24
147.136.76.0/22 maxlen: 24
147.136.84.0/22 maxlen: 24
147.136.92.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:c8:7b:2a:6e:e7:43:02:93:14:dc:44:d0:82:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=826605b4d27f13968e8794e6ef091223748817d8
Validity
Not Before: Jan 1 19:35:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a2d482fd4e55302ff67b1425c100faf3ae31c18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:44:9c:8b:02:6b:fc:52:78:d5:f0:69:de:5a:
dd:34:a4:b8:5f:3c:bc:2c:7b:39:0a:a0:33:e6:0f:
5a:27:0f:77:6d:f7:53:d1:f0:d3:2a:6a:0f:33:5d:
e0:8f:cb:9c:15:06:9c:8a:17:4c:c1:dd:7c:98:ed:
8e:2f:aa:be:b6:c1:4f:4a:69:6a:d1:1e:4f:0e:8a:
35:99:63:c4:ea:3e:12:f7:38:f8:98:14:13:49:46:
e5:e9:56:d1:98:dc:32:d7:69:1d:85:e1:12:6f:67:
0a:17:b6:fa:ec:e9:89:a6:90:72:3a:11:96:92:89:
17:71:16:41:58:af:98:5d:79:66:69:6f:cc:a2:c0:
5a:c6:67:40:38:1c:5a:e7:8c:9e:4c:92:b4:84:fc:
fe:c6:f5:fe:cb:ac:f6:f4:cc:89:b1:4e:59:28:d0:
41:14:26:06:b2:b5:a5:f2:64:6f:80:25:e4:85:ab:
98:77:b4:b7:ea:f6:29:8b:db:76:a1:1e:c1:42:2e:
ee:c3:e4:54:d7:ce:4b:a4:f3:a5:20:5d:98:09:9d:
e2:84:b9:e3:9a:59:fe:39:fa:31:05:fb:6a:39:81:
c1:49:ba:94:58:fd:c9:59:f8:35:3c:25:fe:35:ca:
0c:d1:0c:a0:c2:11:63:db:bc:2e:37:e5:22:19:4d:
4b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:2D:48:2F:D4:E5:53:02:FF:67:B1:42:5C:10:0F:AF:3A:E3:1C:18
X509v3 Authority Key Identifier:
keyid:82:66:05:B4:D2:7F:13:96:8E:87:94:E6:EF:09:12:23:74:88:17:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/ei1IL9TlUwL_Z7FCXBAPrzrjHBg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/fbcc32-33c8-41ff-89fa-2d1918ba1c0e/1/gmYFtNJ_E5aOh5Tm7wkSI3SIF9g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.136.68.0/22
147.136.76.0/22
147.136.84.0/22
147.136.92.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:d8:61:ec:c4:06:c7:e0:59:b7:88:6a:cf:1a:0a:92:14:8b:
d3:32:cc:70:62:af:07:5b:df:7f:dc:36:bc:f5:6f:19:bf:9a:
d7:29:a7:91:5a:80:12:8a:eb:35:ca:83:87:2d:35:78:95:89:
b9:17:ec:d3:20:aa:18:28:87:b7:0c:44:bb:c2:cb:8d:3f:0a:
db:b1:e1:74:d7:b2:ab:e4:18:75:30:1c:89:33:de:40:08:d9:
f2:eb:76:13:58:14:bc:db:61:4c:41:51:6d:95:4f:f9:65:bd:
07:6f:b3:e0:88:7a:bf:3d:16:05:29:17:a4:16:fb:7a:bf:ed:
f2:e3:1a:5a:b8:9e:9a:5a:e8:e1:89:66:a9:b7:17:1b:84:f4:
0f:74:32:aa:c5:a4:b4:11:f6:62:ed:d6:f1:0e:e1:03:8e:5a:
ed:fd:1e:f1:80:30:27:91:a3:16:30:95:98:2c:56:0d:fa:d0:
90:44:bb:bd:87:5c:bb:3f:33:8a:8a:49:5e:be:42:21:a8:56:
81:cb:98:ab:97:0d:e0:5c:79:44:5a:ee:01:b2:09:33:f5:97:
fb:a9:12:7e:f4:0d:36:fc:40:39:e3:c7:9a:c8:de:5f:72:01:
c8:fd:c3:d6:4f:b4:4c:8d:ee:ab:d0:3d:6a:63:7f:19:ce:3e:
93:a1:d5:9d
-----BEGIN CERTIFICATE-----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Generated at Tue Oct 3 15:23:27 2023 by rpki-client on console-fra.rpki-client.org