Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EzByLwPrAQli7s7XyPwJ_smY8qo.roa
File: EzByLwPrAQli7s7XyPwJ_smY8qo.roa (raw, json)
Hash identifier: EV/qNWbP/+KN1emM/aEdNWsu84HHUeHLGKS9FyWKK/Q=
Subject key identifier: 13:30:72:2F:03:EB:01:09:62:EE:CE:D7:C8:FC:09:FE:C9:98:F2:AA
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 018646EAA736E10C4A904C3397E29DBA0AA1
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EzByLwPrAQli7s7XyPwJ_smY8qo.roa
Signing time: Sun 12 Feb 2023 18:37:08 +0000
ROA not before: Sun 12 Feb 2023 18:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 178.239.204.0/24 maxlen: 24
178.239.201.0/24 maxlen: 24
193.42.53.0/24 maxlen: 24
103.212.81.0/24 maxlen: 24
185.103.75.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:46:ea:a7:36:e1:0c:4a:90:4c:33:97:e2:9d:ba:0a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Feb 12 18:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1330722f03eb010962eeced7c8fc09fec998f2aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e1:57:68:94:38:51:89:57:a6:b6:41:da:c9:
7e:87:d9:9a:a8:36:b3:bf:5c:a1:49:af:8e:10:9f:
e3:33:00:da:b0:b0:97:3c:4d:1f:16:b4:7f:5f:1a:
52:09:1f:7d:8e:e4:c0:dc:21:80:a9:4c:39:38:9b:
77:58:37:61:76:ea:85:94:55:75:6f:98:e8:c6:03:
f5:29:79:27:99:58:41:d4:08:ec:44:59:92:98:df:
d0:b1:66:84:9d:a0:92:70:7e:07:fd:87:fa:a5:84:
a4:c2:a4:b0:e8:ba:0b:f5:fb:56:7f:78:58:98:c3:
69:2e:3d:56:0c:20:53:6c:63:8c:07:c0:3e:c5:7c:
00:9d:19:05:94:11:71:cd:41:f4:f1:c9:af:42:68:
32:60:70:99:10:80:86:2f:05:64:37:8f:c8:69:ac:
b5:4f:8a:1d:0f:99:f2:13:49:1f:cb:39:b5:2e:61:
46:0d:96:db:c4:30:d8:b8:30:4c:2b:22:f8:d8:6e:
28:72:1b:1b:98:b6:12:7e:08:43:75:ef:de:75:6c:
57:d9:fd:c2:f7:9e:a4:e5:4e:5f:a2:4a:fa:1e:d3:
11:bf:34:52:f3:ff:d7:ce:97:13:80:d6:13:41:40:
88:2d:a1:97:1b:d4:51:5b:ba:b9:cb:8e:fc:21:a2:
9f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:30:72:2F:03:EB:01:09:62:EE:CE:D7:C8:FC:09:FE:C9:98:F2:AA
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/EzByLwPrAQli7s7XyPwJ_smY8qo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.212.81.0/24
178.239.201.0/24
178.239.204.0/24
185.103.75.0/24
193.42.53.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:36:35:8f:1d:32:57:78:5e:42:9f:71:f6:3d:84:b9:81:d4:
22:23:39:89:19:60:a8:3b:f9:9f:29:25:4e:e6:d7:63:48:b0:
8b:4d:aa:43:fa:1e:8a:95:17:f6:ef:4f:86:3c:02:9d:0b:b9:
93:64:f2:73:ea:7d:0c:99:ab:ba:bc:e8:9e:14:af:aa:8e:c8:
a4:c1:47:65:5f:72:9a:3f:5b:37:5e:18:f6:7d:ee:74:ba:4f:
3a:af:27:37:d4:48:4b:bb:2a:75:88:66:68:b2:57:54:87:a2:
f5:24:26:2b:cb:fc:e1:a1:7b:d8:0c:08:83:49:26:84:8b:ef:
b6:a9:13:81:25:8e:15:ce:2f:08:4a:96:ed:b0:0b:d7:cc:d5:
b8:e5:50:8e:9d:0e:0c:bc:7d:8d:28:b9:2f:b8:a5:b7:1d:63:
d6:73:5e:70:af:3e:d1:c4:cd:54:dc:4a:e0:3c:c0:4c:9e:4d:
f9:92:f6:35:10:15:08:d6:b7:a4:9c:c1:ad:01:f9:06:b4:ab:
db:04:3d:b3:21:c0:99:74:81:61:6a:37:d7:10:e4:00:d1:d6:
c0:5a:76:cf:d6:ff:7d:4b:89:29:56:a0:d8:a1:07:9c:ac:f5:
f1:f3:68:b2:b1:c7:ce:f3:e7:89:a7:df:51:d6:7f:a3:f4:73:
b9:73:08:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:00 2023 by rpki-client on console-fra.rpki-client.org