Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/ewVmLq88QczpDjSnxCMWyrzNuaE.roa
File: ewVmLq88QczpDjSnxCMWyrzNuaE.roa (raw, json)
Hash identifier: YW7vl9+bcuYxZ8zlOVnbJgRwAiaON2FQJ72JTWWESQk=
Subject key identifier: 7B:05:66:2E:AF:3C:41:CC:E9:0E:34:A7:C4:23:16:CA:BC:CD:B9:A1
Certificate issuer: /CN=086282e751286fbbecc75ea6edcc254192c55c76
Certificate serial: 01857169DAF28FCA7FCA59F8DF9BF154DF55
Authority key identifier: 08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/ewVmLq88QczpDjSnxCMWyrzNuaE.roa
Signing time: Mon 02 Jan 2023 07:37:20 +0000
ROA not before: Mon 02 Jan 2023 07:37:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6878
IP address blocks: 93.188.242.0/24 maxlen: 24
46.29.96.0/24 maxlen: 24
160.44.192.0/21 maxlen: 21
160.44.200.0/21 maxlen: 21
2a00:da8:fffb::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:69:da:f2:8f:ca:7f:ca:59:f8:df:9b:f1:54:df:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=086282e751286fbbecc75ea6edcc254192c55c76
Validity
Not Before: Jan 2 07:37:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b05662eaf3c41cce90e34a7c42316cabccdb9a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3b:5a:06:6f:16:80:36:71:9b:41:b0:14:67:
4a:f3:57:5a:10:3d:6b:10:c8:5d:29:46:15:8c:6c:
f2:c4:34:f2:2c:f0:67:94:d3:e7:6a:b4:ff:f3:bd:
d6:45:40:57:47:66:d8:08:d7:91:2e:d7:7f:13:93:
04:79:0c:61:8c:f9:bb:28:71:46:62:1e:05:c9:bc:
1b:b4:5d:9a:42:05:c3:a5:c5:49:2e:5c:13:43:c3:
7e:d6:26:4f:77:3c:a7:f9:2a:9f:cd:97:91:2c:90:
77:f1:cb:56:fe:40:4f:60:a8:52:27:42:59:89:b6:
ca:ad:9b:23:ab:eb:5a:64:c4:83:8d:8e:0e:c5:69:
b9:9d:6d:8f:af:fa:ca:14:79:a4:a6:b8:15:22:6f:
d8:c3:83:06:2f:cd:a3:f2:7b:85:80:e6:f2:bd:1a:
9c:21:d3:57:f6:76:b4:2b:c2:75:25:af:13:88:17:
d8:74:d7:fa:02:6b:1c:c7:45:d0:8a:d4:70:04:c4:
76:05:d1:fc:53:46:47:16:67:ba:99:46:50:ff:68:
ed:ce:89:69:56:d5:67:c5:bc:ef:cb:47:c0:d8:5f:
92:32:44:46:1f:11:11:e9:36:f5:78:95:ac:bb:a4:
df:fa:b7:16:8e:3e:3a:e6:52:77:c4:ca:67:2a:67:
18:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:05:66:2E:AF:3C:41:CC:E9:0E:34:A7:C4:23:16:CA:BC:CD:B9:A1
X509v3 Authority Key Identifier:
keyid:08:62:82:E7:51:28:6F:BB:EC:C7:5E:A6:ED:CC:25:41:92:C5:5C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CGKC51Eob7vsx16m7cwlQZLFXHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/ewVmLq88QczpDjSnxCMWyrzNuaE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/9d8598-e9e2-4709-b535-6b04aadeef10/1/CGKC51Eob7vsx16m7cwlQZLFXHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.29.96.0/24
93.188.242.0/24
160.44.192.0/20
IPv6:
2a00:da8:fffb::/48
Signature Algorithm: sha256WithRSAEncryption
af:61:d6:7e:a0:0e:5a:1b:db:99:71:64:28:ba:22:83:c0:18:
2a:94:76:34:fc:ea:99:cd:17:fd:df:85:53:13:db:2a:bc:18:
5a:5d:d7:4e:8b:85:93:b0:5e:4b:3a:d7:bf:38:87:ba:e5:95:
a6:2e:0b:b8:ac:d5:e7:a7:f0:05:0f:46:a5:13:17:e0:7b:f8:
66:08:ba:40:29:ea:63:dd:08:37:9d:20:76:4f:78:14:ab:d9:
ee:3c:5c:c5:87:76:f3:66:30:37:27:2d:e7:4f:80:54:1f:96:
f2:b5:4a:fe:5c:a3:f6:8f:30:bc:79:d4:28:ed:c8:d5:e0:09:
02:fd:c1:21:13:ca:bd:17:61:c1:37:b0:32:b6:9c:29:b0:52:
a0:fd:99:57:e5:f2:6e:f5:30:79:66:89:3d:57:19:64:61:9f:
a1:12:ab:e0:49:02:48:5f:7b:a2:61:15:69:e2:b4:b3:fe:1a:
1c:c6:ff:67:2a:68:a8:e9:1c:40:e2:b6:40:d4:02:67:9f:5a:
37:d1:28:8e:d2:b8:25:58:3a:8e:46:9b:5b:99:4b:c1:ff:11:
60:54:39:ab:5b:e5:1c:d1:e7:ca:f9:47:5e:58:b5:91:87:ea:
ab:97:b3:98:c9:f6:ae:b2:dc:9e:96:6c:fa:b7:33:be:c4:ed:
ba:48:6e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:16:06 2024 by rpki-client on console-ams.rpki-client.org