Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ceKhzUrzUmsrqPqyXhpL1qfvd48.roa
File: ceKhzUrzUmsrqPqyXhpL1qfvd48.roa (raw, json)
Hash identifier: W1dN3zkLcm+4ZXXsaWeFNpXLWDZqgeB/WRIfUO7OoGs=
Subject key identifier: 71:E2:A1:CD:4A:F3:52:6B:2B:A8:FA:B2:5E:1A:4B:D6:A7:EF:77:8F
Certificate issuer: /CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Certificate serial: 01856BAEBCF9A0A30BBE8435F01D0EFD429F
Authority key identifier: 7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ceKhzUrzUmsrqPqyXhpL1qfvd48.roa
Signing time: Sun 01 Jan 2023 04:54:51 +0000
ROA not before: Sun 01 Jan 2023 04:54:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213260
IP address blocks: 87.238.28.0/22 maxlen: 22
80.249.32.0/20 maxlen: 20
89.249.176.0/21 maxlen: 21
80.67.112.0/20 maxlen: 20
87.238.0.0/20 maxlen: 20
46.232.144.0/21 maxlen: 21
87.238.16.0/21 maxlen: 21
87.238.24.0/22 maxlen: 22
Validation: Failed, certificate revoked on Fri 27 Oct 2023 10:51:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ae:bc:f9:a0:a3:0b:be:84:35:f0:1d:0e:fd:42:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a1ff702726e75b3a68f1182e47ffbcdcae515e5
Validity
Not Before: Jan 1 04:54:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=71e2a1cd4af3526b2ba8fab25e1a4bd6a7ef778f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:72:5d:0f:59:23:7f:18:b2:15:67:3d:9a:78:
95:57:e1:59:db:4e:b7:b5:9b:de:b7:12:33:68:d1:
97:d8:f0:fd:b9:2e:d6:18:f2:d2:d9:bb:e8:b5:d5:
de:a3:1d:57:da:9d:38:7f:ec:26:b6:50:7d:0c:8c:
30:88:5b:be:fd:03:4f:86:23:0c:bd:0b:dc:51:62:
1d:ae:28:40:7c:91:e5:f2:9e:2b:28:a5:cb:8c:00:
3b:7d:8d:cd:fb:b7:42:2e:ba:2c:87:dc:01:48:46:
ed:48:b2:3d:1a:6e:11:75:0e:9f:bc:07:97:fc:95:
9e:e0:ab:9a:6e:0b:65:b3:a0:dc:fa:11:2f:f5:76:
f3:33:cd:46:81:5a:dd:98:22:b1:f6:07:a5:33:13:
e1:dc:87:6e:b8:44:9f:8b:1b:43:7e:fb:23:ae:0e:
32:68:15:4a:a8:44:44:a9:45:27:fc:f3:f3:e7:f6:
5f:58:5c:a3:36:56:a9:74:8a:7b:64:11:7e:91:af:
10:db:92:c1:9a:b2:43:e1:bc:cb:05:9d:6c:fc:28:
09:3d:1e:52:5a:bc:44:2e:71:77:4d:70:8b:80:1f:
60:16:8b:a3:35:4b:06:45:08:45:17:e5:aa:d3:58:
84:52:50:ea:2e:0e:df:14:18:d7:ee:8e:18:67:1b:
57:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E2:A1:CD:4A:F3:52:6B:2B:A8:FA:B2:5E:1A:4B:D6:A7:EF:77:8F
X509v3 Authority Key Identifier:
keyid:7A:1F:F7:02:72:6E:75:B3:A6:8F:11:82:E4:7F:FB:CD:CA:E5:15:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eh_3AnJudbOmjxGC5H_7zcrlFeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/ceKhzUrzUmsrqPqyXhpL1qfvd48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/6fef03-0670-41ab-a6c9-43adb605f68a/1/eh_3AnJudbOmjxGC5H_7zcrlFeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.144.0/21
80.67.112.0/20
80.249.32.0/20
87.238.0.0/19
89.249.176.0/21
Signature Algorithm: sha256WithRSAEncryption
64:ba:84:f2:77:a7:db:2a:c1:74:7e:36:87:3c:72:64:c9:42:
ad:56:65:fa:31:4b:85:fe:38:c8:0a:f0:b3:90:d6:e8:d9:07:
c9:0e:9d:ef:64:ac:f7:63:be:55:78:3c:7b:54:cd:85:12:24:
22:25:cd:05:cc:05:5a:44:65:61:4d:c7:03:5d:95:e6:09:c3:
10:e4:b9:56:d2:f8:c1:b3:e8:04:83:a5:f1:0f:85:c6:9e:6c:
b6:df:97:f8:c3:45:26:f7:56:42:3a:da:49:5a:53:26:7b:e3:
3d:cf:df:a4:4c:a7:ca:eb:3a:fa:70:d1:9a:e1:b8:d1:85:ff:
b9:eb:a6:39:27:c1:f6:98:7c:74:78:93:0d:8b:c5:25:a0:98:
1f:44:b8:ba:65:ef:61:07:af:d9:84:c5:9f:d9:c4:14:f9:40:
82:75:25:f9:50:f8:5f:37:9f:be:96:f9:ce:10:3e:5d:b4:00:
55:52:9f:83:57:53:85:5a:b3:47:45:69:a9:cd:c0:dd:6d:04:
3d:98:b1:7a:db:0a:9d:48:f1:c3:0b:79:44:c7:86:d3:94:13:
a5:43:ee:f1:a4:d1:d4:dd:64:8a:4b:16:ad:bd:f4:23:12:0e:
fa:c2:95:30:5b:5d:06:7d:fa:c7:74:3d:6a:33:c5:0b:4c:99:
2f:dc:33:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:42:14 2024 by rpki-client on console-ams.rpki-client.org