Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/EM4_9LexYOQg6RfIGJzLGlgRvNo.roa
File: EM4_9LexYOQg6RfIGJzLGlgRvNo.roa (raw, json)
Hash identifier: g0pUyRmKvdCemicIT338QHlsSKck6PYd7emKaJJDSU4=
Subject key identifier: 10:CE:3F:F4:B7:B1:60:E4:20:E9:17:C8:18:9C:CB:1A:58:11:BC:DA
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 018AA21FD659479D1749274E25AE2D5853E6
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/EM4_9LexYOQg6RfIGJzLGlgRvNo.roa
Signing time: Sun 17 Sep 2023 07:51:50 +0000
ROA not before: Sun 17 Sep 2023 07:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 0
IP address blocks: 123.253.212.0/24 maxlen: 24
46.175.130.0/24 maxlen: 24
185.110.63.0/24 maxlen: 24
141.98.139.0/24 maxlen: 24
141.98.137.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:a2:1f:d6:59:47:9d:17:49:27:4e:25:ae:2d:58:53:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Sep 17 07:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=10ce3ff4b7b160e420e917c8189ccb1a5811bcda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:88:7f:99:21:f8:c4:fe:fd:b0:21:6d:b5:4d:
a1:8b:4e:78:5b:9d:27:ca:d8:b2:a8:2e:4d:2f:71:
f1:2f:39:47:80:33:45:a1:47:b7:b7:3b:19:8f:96:
8c:96:c3:f3:a2:78:02:77:b8:92:19:79:89:26:6a:
cf:81:04:2e:0a:3f:7a:56:46:07:e9:c1:83:42:a8:
eb:77:4e:32:ac:8a:2e:66:39:38:27:64:02:ff:84:
f0:af:44:a8:e4:ef:68:ce:18:28:c6:18:c8:2d:d2:
72:62:64:b0:f2:a7:89:17:fe:c4:4d:7f:3d:b8:dd:
16:fe:6a:3a:c8:75:66:c8:58:83:98:aa:e0:fd:76:
50:19:ae:ec:68:81:c3:c8:92:d2:4f:65:44:57:98:
d5:ca:a8:25:c2:cc:92:31:7c:1d:4c:cc:56:fe:95:
0c:8c:cf:2f:11:52:fe:4e:ca:21:55:e5:0d:6c:a7:
bd:42:30:b6:87:0e:a7:96:69:57:81:45:22:01:21:
f2:80:0b:72:cb:b6:e4:9e:07:68:7f:40:8a:5d:b5:
9b:75:60:5c:47:9b:5e:74:81:6d:46:34:70:49:00:
a5:63:3b:f7:c5:55:df:63:b1:42:d2:53:fc:13:97:
6a:9a:d4:10:83:61:da:98:ae:5f:2b:3b:a9:cd:36:
ee:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:CE:3F:F4:B7:B1:60:E4:20:E9:17:C8:18:9C:CB:1A:58:11:BC:DA
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/EM4_9LexYOQg6RfIGJzLGlgRvNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.175.130.0/24
123.253.212.0/24
141.98.137.0/24
141.98.139.0/24
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
43:b9:36:60:90:34:a8:8e:a6:1f:85:13:52:9e:13:06:1e:12:
52:b9:74:9e:6a:e2:a2:9b:18:0c:7c:96:77:3e:d3:df:6a:db:
7a:9e:ef:1c:c1:97:57:54:01:d9:6b:65:00:25:05:e0:6a:99:
7a:4c:99:a3:53:15:03:7f:d3:19:ca:6b:49:96:16:88:27:d0:
db:a3:27:1b:e5:03:a0:ef:85:a0:b8:25:ac:c5:44:a9:6b:07:
a3:78:f9:5d:4b:dc:25:16:be:a2:11:8a:13:f6:f3:88:cf:c9:
c5:9f:84:6e:3c:4f:f5:76:1a:d4:4d:56:26:d9:fe:2b:e3:43:
5e:5e:07:a5:54:2f:61:b7:b7:ce:db:1d:64:22:f9:10:7b:e5:
8f:84:bf:63:59:30:fd:5e:3f:6d:48:5c:e1:f3:d3:d7:12:a0:
90:36:e4:ad:e6:df:0f:06:93:74:af:07:3e:61:37:9e:0e:e9:
cd:eb:62:6e:7a:86:ec:3d:6d:5d:59:0b:36:35:1a:28:04:ce:
1f:78:b8:b3:88:e6:3f:44:12:b6:50:2a:c4:26:83:a1:90:1f:
e5:9b:7c:37:91:b4:25:1b:d7:76:5f:4a:50:6d:3c:a1:38:7f:
20:39:31:11:30:7a:4a:c3:96:57:11:1d:79:2a:66:3f:4c:89:
3e:c9:31:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 21 06:45:52 2023 by rpki-client on console-fra.rpki-client.org