Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/et20dzlnplGktjVmjg7EnQGv6ck.roa
File: et20dzlnplGktjVmjg7EnQGv6ck.roa (raw, json)
Hash identifier: MWgWy+QPcuuAPxzpwOy7lHJwHUlksMP+RuPopW0UfWI=
Subject key identifier: 7A:DD:B4:77:39:67:A6:51:A4:B6:35:66:8E:0E:C4:9D:01:AF:E9:C9
Certificate issuer: /CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Certificate serial: 0185701EE2DA470104EEF92FBED637F095AC
Authority key identifier: D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/et20dzlnplGktjVmjg7EnQGv6ck.roa
Signing time: Mon 02 Jan 2023 01:35:50 +0000
ROA not before: Mon 02 Jan 2023 01:35:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40994
IP address blocks: 46.102.157.0/24 maxlen: 24
46.102.156.0/24 maxlen: 24
31.14.17.0/24 maxlen: 24
94.177.8.0/23 maxlen: 24
86.106.182.0/24 maxlen: 24
2a0d:f302::/32 maxlen: 32
2a0d:f301::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:1e:e2:da:47:01:04:ee:f9:2f:be:d6:37:f0:95:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4cf0fbd5f6e1759903cc69de0dc4ea24c1f83df
Validity
Not Before: Jan 2 01:35:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7addb4773967a651a4b635668e0ec49d01afe9c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:20:5e:dd:da:a1:04:8f:b7:15:7d:a7:d2:
84:2f:35:e9:a5:ba:05:7e:31:07:5e:09:8d:dd:ea:
12:f2:b9:bd:63:95:97:d3:0f:d7:3e:db:82:79:5f:
3f:1b:1f:93:84:b0:ff:98:ad:40:54:8e:72:66:c2:
1e:1f:7d:ff:71:9d:9e:53:14:06:e4:e5:55:a3:06:
1f:ca:fc:c5:1e:89:16:8c:e7:ec:8f:fb:69:fe:47:
09:d2:8b:61:0c:78:86:24:a5:60:9a:16:75:ca:93:
c8:35:cb:62:ba:71:c4:8d:91:0b:41:45:1e:87:c7:
7c:84:42:54:8c:81:3e:cb:a6:09:f0:bd:5a:ad:07:
df:07:50:bc:ed:e2:22:62:7e:05:01:f5:cf:2c:ba:
93:37:ac:a7:a3:4e:f1:c3:cb:68:66:c8:44:a8:e7:
67:59:4e:36:2d:7b:89:b9:37:60:04:ea:33:00:b1:
24:3c:8f:ce:a9:33:40:f6:71:76:3c:01:08:7b:6e:
44:41:6d:f5:3e:71:99:68:c3:2a:6e:15:3d:24:1c:
aa:56:a8:9a:b1:fd:b6:60:a1:d9:fa:43:73:ec:3a:
d7:b3:99:41:18:e5:c9:12:51:4e:5b:ac:70:a5:7b:
6a:5e:bf:dd:ec:0b:e1:72:e8:47:45:3f:09:ee:5c:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:DD:B4:77:39:67:A6:51:A4:B6:35:66:8E:0E:C4:9D:01:AF:E9:C9
X509v3 Authority Key Identifier:
keyid:D4:CF:0F:BD:5F:6E:17:59:90:3C:C6:9D:E0:DC:4E:A2:4C:1F:83:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1M8PvV9uF1mQPMad4NxOokwfg98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/et20dzlnplGktjVmjg7EnQGv6ck.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/d34fa2-3a37-4308-b783-5857f1c17624/1/1M8PvV9uF1mQPMad4NxOokwfg98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.14.17.0/24
46.102.156.0/23
86.106.182.0/24
94.177.8.0/23
IPv6:
2a0d:f301::/48
2a0d:f302::/32
Signature Algorithm: sha256WithRSAEncryption
6d:65:4a:33:fd:ea:a6:e9:62:05:13:8d:29:b3:47:c6:d3:89:
4f:c7:2a:0f:24:72:74:57:7c:8f:41:34:42:b4:d8:58:88:a5:
fb:55:5f:de:39:1c:c9:ce:45:89:6a:4c:bc:4e:95:97:f2:6f:
56:ed:45:c7:fa:ef:03:c1:b5:2f:ee:f3:e9:53:1a:cc:40:6a:
7e:c0:59:5d:6d:94:9b:11:53:93:6d:c8:e5:da:b9:12:6d:e6:
f0:4d:65:3b:00:d4:b6:78:69:9c:aa:fa:03:27:97:dd:4f:73:
08:ad:8f:fb:66:e4:0b:66:0d:e6:a3:11:4f:2e:37:36:e6:37:
9c:20:1f:0c:b8:f7:04:65:62:e1:89:53:b3:25:34:13:dd:70:
18:a4:f8:79:ec:ba:32:3a:c7:cd:b2:44:bf:1d:65:9f:f8:9b:
27:b1:a1:e8:a4:cf:7d:7a:37:07:19:49:c0:f4:ef:92:f1:c9:
d7:db:6d:16:88:4d:e7:80:3f:02:e5:81:4f:63:52:51:e1:ef:
c7:9a:ab:49:2a:24:92:bb:c3:ee:c2:f0:e0:0d:2f:af:4a:73:
f0:8b:ef:5a:32:04:16:33:9b:a7:cb:fc:7a:70:13:7e:b1:18:
d1:33:97:01:0f:b2:93:5f:21:e2:1b:51:ed:25:f4:85:9e:e1:
bb:7c:ee:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:50 2023 by rpki-client on console-ams.rpki-client.org