Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/egpF435QLAx2CbN2CONbQZWWlIE.roa
File: egpF435QLAx2CbN2CONbQZWWlIE.roa (raw, json)
Hash identifier: FOq/Ewiy+5dF9SjsgCVFOfPoHpK+qWbSCoTVJ5UTcQg=
Subject key identifier: 7A:0A:45:E3:7E:50:2C:0C:76:09:B3:76:08:E3:5B:41:95:96:94:81
Certificate issuer: /CN=01626ffd800eafa336bdf343141f03f7c393c364
Certificate serial: 0187A35F931DD197B0AF89743F67AFFFC891
Authority key identifier: 01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/egpF435QLAx2CbN2CONbQZWWlIE.roa
Signing time: Fri 21 Apr 2023 10:32:42 +0000
ROA not before: Fri 21 Apr 2023 10:32:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48635
IP address blocks: 85.92.132.0/24 maxlen: 24
85.92.139.0/24 maxlen: 24
85.92.145.0/24 maxlen: 24
213.189.29.0/24 maxlen: 24
89.18.168.0/24 maxlen: 24
83.98.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:a3:5f:93:1d:d1:97:b0:af:89:74:3f:67:af:ff:c8:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01626ffd800eafa336bdf343141f03f7c393c364
Validity
Not Before: Apr 21 10:32:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7a0a45e37e502c0c7609b37608e35b4195969481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ba:b0:ef:b1:16:4f:2c:e0:50:e7:f1:90:a2:
cf:e6:54:4c:65:05:eb:1f:2a:bb:4e:c7:9e:96:74:
5d:fe:6c:ee:3d:b7:36:c0:3c:da:fd:ec:76:0e:53:
ff:90:d6:45:34:f2:e2:90:5d:6e:83:f1:34:8a:b3:
c3:40:d1:df:a1:35:6a:bf:67:53:b9:50:d1:33:86:
a9:4e:22:e1:b1:27:ee:9f:cf:33:c8:f7:8d:3a:fe:
bb:26:89:e0:35:88:b9:c4:81:67:91:f3:e9:8d:1d:
6d:4c:00:10:0e:ef:0c:bf:45:54:06:1a:e5:6a:66:
59:de:6c:80:9d:9d:72:c6:62:5a:d5:1e:d8:91:7c:
53:c6:50:37:64:df:7b:b2:61:74:5d:44:43:44:89:
00:10:1d:92:36:a6:47:42:df:36:16:d6:17:94:69:
b7:23:d6:94:da:84:9f:2a:af:39:77:96:78:65:01:
4d:75:31:70:9f:e6:e9:5b:b5:37:31:a7:8b:8d:de:
44:39:45:91:43:74:da:f1:63:9f:3d:6d:0b:16:ef:
f2:1b:6b:05:3c:37:5f:21:48:4f:88:3f:29:4e:e5:
00:1a:52:40:4c:c1:86:c6:e2:a6:4c:5a:5b:7e:d5:
a6:ab:23:84:0d:f2:60:a2:c3:72:d0:f1:4c:a3:4a:
2d:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:0A:45:E3:7E:50:2C:0C:76:09:B3:76:08:E3:5B:41:95:96:94:81
X509v3 Authority Key Identifier:
keyid:01:62:6F:FD:80:0E:AF:A3:36:BD:F3:43:14:1F:03:F7:C3:93:C3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AWJv_YAOr6M2vfNDFB8D98OTw2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/egpF435QLAx2CbN2CONbQZWWlIE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/c4e5a0-8219-4ff9-8287-1f4bea23e4c7/1/AWJv_YAOr6M2vfNDFB8D98OTw2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.177.0/24
85.92.132.0/24
85.92.139.0/24
85.92.145.0/24
89.18.168.0/24
213.189.29.0/24
Signature Algorithm: sha256WithRSAEncryption
31:08:28:aa:76:da:db:b8:0a:c5:59:4a:ce:0c:f9:43:15:22:
a9:63:7b:ee:89:ee:f3:ff:af:06:77:16:63:7d:b9:b5:0f:5f:
0b:ed:c9:35:9f:22:42:c6:92:d3:88:bf:c6:7e:cd:58:c7:05:
38:de:ad:4e:a9:8f:23:c0:67:f8:f3:b9:c9:95:fc:b5:60:4d:
5b:e0:72:cb:b7:c3:95:c7:94:13:fb:b7:83:9d:88:7c:d7:81:
53:ae:e1:36:31:1c:38:d7:93:f7:11:8a:a6:11:3a:e3:fa:91:
f8:be:0f:f6:42:f6:f5:0b:93:0a:46:b9:69:c7:8c:38:ee:df:
36:41:8b:24:e8:f1:86:d1:22:b8:e6:87:ec:40:73:ff:8e:02:
b3:66:3c:8b:75:92:5f:a5:5f:37:be:15:ac:be:9a:76:64:dd:
a5:0e:45:ed:f8:6d:42:ea:9c:dc:87:f3:ee:0e:c3:07:0b:1e:
5d:ce:45:98:a1:42:1c:e1:1e:05:d9:e4:37:8f:85:21:0b:7d:
4b:0c:81:65:1d:80:26:6a:58:18:4e:db:b0:12:15:be:52:68:
3a:ae:7a:2b:d1:e2:26:ab:b5:12:fd:e2:82:03:d4:b9:aa:9e:
a1:e6:8b:97:10:3f:35:42:8f:82:1c:3e:eb:aa:3b:3a:b4:d4:
82:8c:c9:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:17:07 2024 by rpki-client on console-ams.rpki-client.org