Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/eGFve9t0CySR1pwQ5DkBbpy98M0.roa
File: eGFve9t0CySR1pwQ5DkBbpy98M0.roa (raw, json)
Hash identifier: NyqNNVqkDIieym8F5LmltY4VKXTzd33/szE/a1lj0pw=
Subject key identifier: 78:61:6F:7B:DB:74:0B:24:91:D6:9C:10:E4:39:01:6E:9C:BD:F0:CD
Certificate issuer: /CN=c1233861207a230564ef36f11e0157344731e3f9
Certificate serial: 018891AE31155B80AF282E19DA82534A24A5
Authority key identifier: C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/eGFve9t0CySR1pwQ5DkBbpy98M0.roa
Signing time: Tue 06 Jun 2023 17:08:12 +0000
ROA not before: Tue 06 Jun 2023 17:08:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16273
IP address blocks: 46.228.128.0/24 maxlen: 24
46.228.128.0/23 maxlen: 24
46.228.129.0/24 maxlen: 24
46.228.130.0/24 maxlen: 24
46.228.131.0/24 maxlen: 24
46.228.132.0/23 maxlen: 23
46.228.134.0/23 maxlen: 24
46.228.141.0/24 maxlen: 24
46.228.143.0/24 maxlen: 24
193.110.108.0/23 maxlen: 23
193.110.108.0/24 maxlen: 24
2a03:7800:a00::/40 maxlen: 40
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:91:ae:31:15:5b:80:af:28:2e:19:da:82:53:4a:24:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1233861207a230564ef36f11e0157344731e3f9
Validity
Not Before: Jun 6 17:08:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=78616f7bdb740b2491d69c10e439016e9cbdf0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:48:88:60:28:f2:73:35:86:d1:31:72:15:
8d:ad:fc:c6:5e:b1:9a:55:93:2c:ba:63:e2:f8:19:
c6:00:80:ea:c7:3b:68:7f:99:4d:b9:ef:01:0a:96:
31:60:c9:ff:75:71:9a:56:89:89:a0:6f:9a:ae:49:
47:9a:75:95:c1:47:9a:92:c6:ef:71:1a:0c:03:c7:
81:ef:93:3b:1d:7e:13:a0:85:e1:20:60:51:e5:16:
61:96:22:00:3c:e8:e8:d4:c1:48:f4:f7:40:80:b8:
67:59:79:ff:11:d7:08:dd:d8:38:7f:a3:00:d3:ef:
a8:3d:7b:aa:39:6a:f8:87:57:bd:45:0c:93:66:d4:
eb:4f:69:2f:26:0f:6d:9c:99:4a:82:b9:7d:b9:98:
6d:32:3d:d4:f3:16:9d:58:b6:fe:74:ac:47:99:3c:
07:45:df:89:26:de:77:ba:1f:10:43:65:0f:e2:88:
af:50:27:6e:1c:15:6b:2c:bc:4b:13:5c:a8:a3:69:
ee:8e:d8:4d:08:46:2c:1c:11:53:f8:df:1c:5a:f1:
23:61:64:0f:ea:6c:17:34:c1:cd:c8:f9:f1:86:0e:
51:12:e1:9b:ff:92:94:40:f6:8b:87:9c:b5:85:96:
cf:f0:67:ca:39:b5:64:9a:54:7d:74:24:71:6d:26:
29:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:61:6F:7B:DB:74:0B:24:91:D6:9C:10:E4:39:01:6E:9C:BD:F0:CD
X509v3 Authority Key Identifier:
keyid:C1:23:38:61:20:7A:23:05:64:EF:36:F1:1E:01:57:34:47:31:E3:F9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wSM4YSB6IwVk7zbxHgFXNEcx4_k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/eGFve9t0CySR1pwQ5DkBbpy98M0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/2c9320-38d9-4604-ad92-1c7b2b91d308/1/wSM4YSB6IwVk7zbxHgFXNEcx4_k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.228.128.0/21
46.228.141.0/24
46.228.143.0/24
193.110.108.0/23
IPv6:
2a03:7800:a00::/40
Signature Algorithm: sha256WithRSAEncryption
31:b9:15:87:f5:16:c1:18:2a:d6:da:37:76:32:c6:e6:e2:3d:
34:28:22:6c:02:da:d7:1e:a9:e6:70:77:93:4e:d6:23:9e:5d:
44:87:4f:5f:5c:1b:9f:c2:cc:a4:8c:21:e5:55:ff:13:d4:4a:
66:c0:41:20:32:33:f3:40:2e:42:3d:42:73:99:9d:9c:68:76:
86:0d:6c:7c:2d:ea:96:7c:55:f7:82:b2:d6:c8:e3:35:e4:b1:
32:53:23:7c:90:91:dd:ba:67:f4:27:cc:80:0e:ce:56:24:f3:
30:69:65:2d:6b:5d:e2:0c:9e:39:e1:34:32:67:8b:5c:3c:fa:
06:8c:6e:28:91:61:8d:cb:9e:a6:11:49:a7:b9:d7:82:2c:fd:
f5:6a:24:78:db:a5:99:4d:67:cf:19:74:9f:bd:af:90:c2:9b:
5d:38:85:4a:63:bd:07:fc:ce:11:02:15:50:a5:22:71:4f:c9:
e9:86:da:1e:03:ee:3f:f8:bb:7d:77:8e:f9:81:1e:4c:f9:c4:
35:f4:2f:1f:65:d8:3c:49:84:93:7a:99:2c:61:a8:07:be:7d:
ba:31:86:cd:cf:65:26:28:d5:66:43:97:c8:b2:e2:4f:84:35:
f8:1b:c5:92:4c:ad:5e:b3:0b:2e:f2:07:a3:36:e5:e6:11:60:
e3:2f:e8:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:44 2023 by rpki-client on console-fra.rpki-client.org