Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/t7CoNZ4fxIyizIQh3z49R_igxsw.roa
File: t7CoNZ4fxIyizIQh3z49R_igxsw.roa (raw, json)
Hash identifier: 0ZP1G0FuKWWtrqSmswvh7HFVblf8xfUGeAejSY03UJs=
Subject key identifier: B7:B0:A8:35:9E:1F:C4:8C:A2:CC:84:21:DF:3E:3D:47:F8:A0:C6:CC
Certificate issuer: /CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Certificate serial: 018A6EAD1FDCCEF91B3334A51DBF4B848C72
Authority key identifier: 1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/t7CoNZ4fxIyizIQh3z49R_igxsw.roa
Signing time: Thu 07 Sep 2023 08:05:54 +0000
ROA not before: Thu 07 Sep 2023 08:05:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42306
IP address blocks: 46.253.96.0/21 maxlen: 21
185.134.160.0/22 maxlen: 22
46.253.104.0/21 maxlen: 21
77.236.192.0/19 maxlen: 19
37.44.208.0/22 maxlen: 22
2a03:f280::/29 maxlen: 29
2a0e:5340::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6e:ad:1f:dc:ce:f9:1b:33:34:a5:1d:bf:4b:84:8c:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a99c75fe5777e136573e1e51efba6781f3a5b16
Validity
Not Before: Sep 7 08:05:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7b0a8359e1fc48ca2cc8421df3e3d47f8a0c6cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:00:b6:19:db:15:13:76:b0:26:88:e1:3b:85:
62:02:eb:0d:07:d4:9f:cd:0b:70:df:4d:ef:ff:5c:
2d:70:0f:93:49:91:12:3d:4e:77:93:0e:e4:61:83:
72:9b:1d:25:78:5d:a3:78:2d:7a:f7:d9:98:ce:63:
a6:32:bd:f1:f7:ee:7d:a6:e1:b6:aa:7e:52:0b:2c:
7c:29:4a:51:84:9b:e3:40:4a:58:95:50:a5:8b:15:
7a:ff:e9:4d:6c:0c:e4:28:9b:39:1e:97:fc:53:c6:
82:7d:37:7d:b0:29:b4:b0:34:d9:92:f6:9c:79:09:
19:8a:31:bb:4d:da:a3:a9:63:c4:f3:47:33:52:25:
63:3c:cd:af:e6:1f:29:5e:48:e6:3d:38:29:7d:4f:
04:9c:77:0c:77:f7:02:f2:58:2b:f9:b2:e6:c8:2f:
71:29:2b:0f:97:82:b9:7f:ee:ab:c3:2b:18:f0:ca:
2b:66:23:15:58:b7:d3:42:08:00:e4:90:6f:92:ec:
18:86:58:e0:7a:81:b7:8a:83:8b:85:fd:b4:85:d5:
d8:7c:bc:d4:1a:a2:9c:70:08:8f:fa:6b:b1:fa:14:
d1:47:13:c9:eb:92:7e:9a:d5:5c:0b:bd:5e:53:0a:
45:97:60:15:35:cd:26:94:c8:f2:5e:47:64:3c:27:
6f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B0:A8:35:9E:1F:C4:8C:A2:CC:84:21:DF:3E:3D:47:F8:A0:C6:CC
X509v3 Authority Key Identifier:
keyid:1A:99:C7:5F:E5:77:7E:13:65:73:E1:E5:1E:FB:A6:78:1F:3A:5B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GpnHX-V3fhNlc-HlHvumeB86WxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/t7CoNZ4fxIyizIQh3z49R_igxsw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/71173b-1938-4835-af00-a699bcb08ae3/1/GpnHX-V3fhNlc-HlHvumeB86WxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.208.0/22
46.253.96.0/20
77.236.192.0/19
185.134.160.0/22
IPv6:
2a03:f280::/29
2a0e:5340::/29
Signature Algorithm: sha256WithRSAEncryption
52:2f:d4:0c:b7:67:9a:c0:e8:8e:ce:5d:b7:f3:e6:1b:ae:a8:
4a:dd:f6:ca:87:c0:22:d2:65:a5:4c:44:fa:d7:42:2b:78:f0:
a4:a5:7f:f9:65:a4:21:29:1f:0e:a1:35:1f:ef:b7:a3:84:8a:
93:3e:5d:f1:48:b8:9d:f7:40:45:e7:84:2d:58:cb:bb:36:49:
e3:c5:71:3b:d6:2b:c8:63:66:de:d9:01:15:f0:72:9c:6a:ce:
1d:f4:ce:d6:8a:d0:44:00:01:51:cc:2e:33:bd:15:ca:72:20:
50:6c:43:65:3e:9b:ef:01:17:6c:43:09:32:1c:78:6f:6d:d6:
5e:72:d0:9d:4b:26:ee:34:9a:cd:c6:f5:54:02:50:28:18:87:
80:a9:84:06:2a:46:d6:62:05:4b:1e:f3:28:42:63:b6:8f:09:
b5:53:0a:f1:68:d8:cd:c1:7f:13:e8:62:48:0c:38:c2:3e:00:
1d:6c:58:dc:07:04:29:72:97:8d:fb:cd:76:55:28:f7:ab:d3:
e3:6c:9a:40:a6:50:65:23:12:9f:ed:b7:90:08:cf:f8:ef:33:
e8:e2:a9:da:5c:7b:5c:1b:46:34:54:4f:17:1f:b6:bd:53:63:
86:e1:c1:58:69:99:5c:cb:86:7e:ae:e7:17:bf:ba:55:2e:52:
7e:4e:34:3a
-----BEGIN CERTIFICATE-----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Generated at Fri Sep 8 11:12:48 2023 by rpki-client on console-ams.rpki-client.org