Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/d70y7ybLJ1T4RmmqUHVj7kpsoxs.roa
File: d70y7ybLJ1T4RmmqUHVj7kpsoxs.roa (raw, json)
Hash identifier: F3vRXZFEeb42AyFmU1bwjMR15ef9uc4WnubaU9Wb0OA=
Subject key identifier: 77:BD:32:EF:26:CB:27:54:F8:46:69:AA:50:75:63:EE:4A:6C:A3:1B
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570306EC6942072BAC6D555197EEA53C4
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/d70y7ybLJ1T4RmmqUHVj7kpsoxs.roa
Signing time: Mon 02 Jan 2023 01:55:00 +0000
ROA not before: Mon 02 Jan 2023 01:55:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 58098
IP address blocks: 78.92.231.0/24 maxlen: 24
78.92.234.0/24 maxlen: 24
46.107.226.0/23 maxlen: 24
46.107.232.0/23 maxlen: 23
46.107.228.0/24 maxlen: 24
46.107.229.0/24 maxlen: 24
46.107.230.0/24 maxlen: 24
46.107.231.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:6e:c6:94:20:72:ba:c6:d5:55:19:7e:ea:53:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:55:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77bd32ef26cb2754f84669aa507563ee4a6ca31b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:fa:ea:73:82:ad:66:d1:d5:22:08:30:b5:43:
c8:1c:ca:41:d3:83:84:91:0c:9d:98:bb:56:a2:32:
53:c7:17:de:e4:9e:3c:f5:d2:a5:c0:cd:73:9b:28:
3a:cd:ec:36:12:0b:9e:cd:4b:75:97:81:2e:9e:6f:
eb:49:e8:f0:ec:53:9a:5c:be:ff:2b:f5:f9:e4:f6:
46:92:41:2d:6b:1d:b9:8d:37:38:26:2b:ed:b7:01:
48:b0:3b:69:0f:81:c2:bb:f2:82:54:6b:fc:89:34:
6f:70:05:86:20:9f:63:5f:cb:10:43:85:74:2f:f4:
00:6f:c1:0c:3d:03:07:67:1d:dc:dd:4c:79:11:5b:
c1:52:d1:7d:13:b5:8b:66:ca:6f:fa:5c:c7:5a:1d:
fa:8f:c7:b0:7d:2e:f2:aa:2a:e1:7c:d9:ad:a1:de:
ab:07:ac:62:26:ef:5c:f7:5f:8a:42:2f:70:59:0e:
76:c7:60:9f:e0:5b:fa:cf:84:e3:05:87:4f:81:da:
5c:e4:60:92:2a:41:32:ec:e4:d8:0a:16:93:aa:99:
db:e7:72:01:79:f1:24:97:4c:9a:80:05:ad:20:42:
df:00:95:68:7a:ec:f9:63:f3:06:28:15:8c:77:d5:
03:8b:18:4f:ed:8c:26:09:d5:58:5d:92:83:88:24:
9d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:BD:32:EF:26:CB:27:54:F8:46:69:AA:50:75:63:EE:4A:6C:A3:1B
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/d70y7ybLJ1T4RmmqUHVj7kpsoxs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.107.226.0-46.107.233.255
78.92.231.0/24
78.92.234.0/24
Signature Algorithm: sha256WithRSAEncryption
39:f9:b6:8c:7f:cb:8d:b3:c5:ea:1c:5b:1d:ba:58:ba:48:c2:
f6:e5:aa:86:48:85:16:a1:22:9f:77:66:6f:2d:f8:ef:69:67:
2e:08:4b:79:55:1c:dd:f2:32:55:97:35:1f:07:c3:0d:9b:95:
2e:6e:6a:7e:23:62:eb:0e:c5:6b:53:c2:24:3e:dd:89:57:27:
3e:35:cb:9d:34:70:07:93:ab:ce:82:3a:db:4e:4d:c6:e2:2a:
4d:02:35:36:82:48:21:16:15:35:10:34:28:32:d6:68:40:62:
ae:40:88:ac:e1:57:56:b2:35:fa:9d:fa:99:32:4e:61:e0:4c:
bd:01:a3:68:36:33:5e:a2:00:38:f2:a7:b9:1c:07:2e:90:2a:
14:8a:e0:11:55:46:ae:52:32:d3:79:66:ec:84:34:8e:01:2a:
85:4a:71:fe:bc:26:31:da:0a:06:1c:51:88:0f:e7:10:29:0a:
fa:21:e6:40:bd:b7:e6:f2:e6:36:8b:17:39:64:c9:13:56:ee:
02:dc:f3:89:7e:9d:4d:44:17:4d:ba:3f:32:5e:18:0b:a0:9d:
79:03:18:56:24:c3:9b:60:fc:1c:87:09:4a:42:b4:4a:9a:2b:
6f:2b:9a:2e:6b:07:b3:10:6e:b1:ca:05:73:dc:51:78:01:3e:
54:db:10:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:04 2024 by rpki-client on console-fra.rpki-client.org