Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/7Cysq6IWN_i_5Q1bk4X18hvIW5U.roa
File: 7Cysq6IWN_i_5Q1bk4X18hvIW5U.roa (raw, json)
Hash identifier: x7TTqyxxOUyY3HHFuKuom67c16Xl5hFRNxtdMbEw7FQ=
Subject key identifier: EC:2C:AC:AB:A2:16:37:F8:BF:E5:0D:5B:93:85:F5:F2:1B:C8:5B:95
Certificate issuer: /CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Certificate serial: 0185ECDE10E8FB3AC930C4B6315C3D31B306
Authority key identifier: E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/7Cysq6IWN_i_5Q1bk4X18hvIW5U.roa
Signing time: Thu 26 Jan 2023 06:57:34 +0000
ROA not before: Thu 26 Jan 2023 06:57:34 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210329
IP address blocks: 81.28.4.0/24 maxlen: 24
83.229.68.0/24 maxlen: 24
83.229.69.0/24 maxlen: 24
83.229.75.0/24 maxlen: 24
81.28.5.0/24 maxlen: 24
194.146.24.0/24 maxlen: 24
63.250.58.0/24 maxlen: 24
45.91.170.0/24 maxlen: 24
185.127.17.0/24 maxlen: 24
185.127.16.0/24 maxlen: 24
185.237.98.0/24 maxlen: 24
185.127.18.0/24 maxlen: 24
185.127.19.0/24 maxlen: 24
91.223.236.0/24 maxlen: 24
185.237.99.0/24 maxlen: 24
185.237.12.0/24 maxlen: 24
185.237.13.0/24 maxlen: 24
194.146.25.0/24 maxlen: 24
212.86.104.0/24 maxlen: 24
212.86.105.0/24 maxlen: 24
2a06:c5c0:600::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ec:de:10:e8:fb:3a:c9:30:c4:b6:31:5c:3d:31:b3:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5bd7923afdbae87d07b2308dd389d9cf082ed6d
Validity
Not Before: Jan 26 06:57:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec2cacaba21637f8bfe50d5b9385f5f21bc85b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:23:b4:f8:ff:ce:9c:e6:9d:f9:cf:bc:3d:f7:
26:2f:d6:64:a4:08:83:2d:c6:ac:a6:f3:e8:28:00:
9b:8d:49:08:10:6d:63:70:31:da:e7:66:f7:b1:e6:
5d:57:4c:24:5e:bb:f2:0f:49:22:67:59:17:85:f3:
c4:23:f9:f5:fc:28:ef:57:ea:f5:3c:a5:a2:17:fe:
fe:64:11:89:f1:4c:c2:6f:0f:55:2d:7d:28:45:20:
af:1c:cb:44:b9:34:36:0e:6c:02:75:cb:63:07:e8:
e4:2c:c1:20:f0:09:dc:00:50:c7:a6:1e:53:1d:8e:
dc:ac:86:83:b3:ae:fc:21:65:33:ae:af:23:97:c4:
3e:7c:b7:ea:48:99:40:87:d0:73:70:f9:a8:88:92:
61:cd:56:47:95:a8:7b:83:ee:04:1f:c1:2e:7e:84:
61:45:56:8d:66:98:26:f2:80:4f:36:95:e1:79:3a:
65:2b:44:dc:c0:28:a3:9f:b3:9e:3d:2f:2a:0d:80:
c7:cf:4e:6e:b7:99:4e:d6:95:32:1a:4f:1f:f1:32:
f1:40:5e:f8:5f:3f:db:79:df:84:2a:d9:5d:f8:7b:
00:da:69:fd:b4:42:bb:51:9e:89:5a:b8:89:6c:ee:
1f:0f:d6:c5:ef:08:06:88:95:7b:40:71:f6:4b:f4:
19:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:2C:AC:AB:A2:16:37:F8:BF:E5:0D:5B:93:85:F5:F2:1B:C8:5B:95
X509v3 Authority Key Identifier:
keyid:E5:BD:79:23:AF:DB:AE:87:D0:7B:23:08:DD:38:9D:9C:F0:82:ED:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b15I6_brofQeyMI3TidnPCC7W0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/7Cysq6IWN_i_5Q1bk4X18hvIW5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/269229-20eb-4f1c-a13e-26d1e54578f1/1/5b15I6_brofQeyMI3TidnPCC7W0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.91.170.0/24
63.250.58.0/24
81.28.4.0/23
83.229.68.0/23
83.229.75.0/24
91.223.236.0/24
185.127.16.0/22
185.237.12.0/23
185.237.98.0/23
194.146.24.0/23
212.86.104.0/23
IPv6:
2a06:c5c0:600::/48
Signature Algorithm: sha256WithRSAEncryption
b6:48:74:2c:71:17:ba:40:c8:a7:38:b7:6d:99:a5:1e:fc:e4:
51:a7:38:aa:1a:fd:a8:16:72:e3:ae:2d:ca:8a:03:3e:ec:14:
24:c4:89:ec:e3:d5:ed:b8:d1:9d:50:81:c8:aa:f7:b4:01:83:
5b:95:3f:e9:c2:9b:b6:69:b1:18:e0:71:3b:f8:4e:ba:60:d1:
fa:70:0f:ab:1a:80:de:f8:1a:50:10:58:3c:33:9d:df:93:f3:
0f:2a:10:24:21:f2:64:98:f1:0c:44:5c:22:60:e9:00:25:81:
d7:3c:d1:b6:52:c9:89:73:fe:29:6e:ac:8f:ef:a4:bf:a4:32:
55:5f:33:7d:d2:d3:d2:fd:96:0a:e6:31:a6:2b:ba:c0:73:95:
d6:de:36:fc:c2:00:69:56:65:d8:23:56:fd:35:dc:b2:f0:cf:
fa:f7:cc:b7:3a:98:5e:f5:dd:07:24:b3:5d:bc:3a:07:fc:ba:
24:80:a4:1f:2d:08:49:8b:cc:b2:c2:77:bc:65:b2:bc:d1:da:
f7:19:af:da:a3:ab:66:7c:5a:8f:ae:d2:76:cd:88:48:c8:99:
ca:39:78:1f:2c:89:6d:4b:3b:e2:30:6e:89:8d:f0:89:c1:69:
08:99:4a:b8:c1:aa:51:51:e8:4c:97:38:5a:22:5d:e8:ad:80:
d8:c5:a6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:31 2023 by rpki-client on console-fra.rpki-client.org