Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7EzkKBxfZfaKPEeSqbPDqjLDGIQ.roa
File: 7EzkKBxfZfaKPEeSqbPDqjLDGIQ.roa (raw, json)
Hash identifier: X+YKyMNweuIMN2PQQTpcd7lV82RQPhE9iGyJhigql78=
Subject key identifier: EC:4C:E4:28:1C:5F:65:F6:8A:3C:47:92:A9:B3:C3:AA:32:C3:18:84
Certificate issuer: /CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Certificate serial: 01856ED4D484942D50943FCA2EDC749518CD
Authority key identifier: EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7EzkKBxfZfaKPEeSqbPDqjLDGIQ.roa
Signing time: Sun 01 Jan 2023 19:35:19 +0000
ROA not before: Sun 01 Jan 2023 19:35:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31611
IP address blocks: 80.66.208.0/20 maxlen: 24
46.17.152.0/21 maxlen: 24
178.218.148.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:d4:84:94:2d:50:94:3f:ca:2e:dc:74:95:18:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ec5ada0dc900a13c83b70ac3f587fb8c2e1df030
Validity
Not Before: Jan 1 19:35:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec4ce4281c5f65f68a3c4792a9b3c3aa32c31884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:ae:f5:b3:e1:cf:5f:da:a2:a7:28:aa:34:b6:
db:f8:dd:20:3e:cc:1f:5a:af:8a:cb:ed:ea:d2:81:
34:42:b8:14:97:0d:84:c6:2c:db:2f:d8:d4:58:e8:
72:a1:34:e7:be:3e:f4:25:94:bd:ac:32:08:8d:86:
ec:34:02:3e:31:1d:6a:fa:dc:79:b0:1e:a1:e3:cb:
a0:9b:17:e8:3e:c5:e1:ae:ab:59:85:c1:78:1e:24:
95:d2:40:fa:90:9a:75:da:dd:71:16:71:ba:21:ca:
fb:83:e6:59:70:28:d7:ab:4a:16:b5:37:d2:e0:83:
b9:35:67:bb:72:29:07:d5:4d:aa:8d:f4:9e:56:9e:
9d:1c:b8:d8:02:19:1b:4d:e5:12:da:0d:b4:06:74:
8a:5a:07:a6:83:8f:59:e4:48:f6:64:78:58:89:ef:
58:8e:e6:9e:50:79:64:4a:bf:ed:bc:48:ed:a6:4e:
f1:23:24:e2:de:d1:fd:fa:b4:44:74:8f:34:e3:52:
d6:ba:3e:6a:2b:41:39:a9:e6:55:34:33:1a:84:18:
7b:84:bd:c3:a3:9b:76:91:a1:97:11:39:4c:5b:67:
78:33:89:bf:0d:57:e1:fa:37:72:88:71:44:b7:0b:
39:0a:cb:07:58:9a:ae:f6:4a:98:4d:2f:c0:43:38:
50:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4C:E4:28:1C:5F:65:F6:8A:3C:47:92:A9:B3:C3:AA:32:C3:18:84
X509v3 Authority Key Identifier:
keyid:EC:5A:DA:0D:C9:00:A1:3C:83:B7:0A:C3:F5:87:FB:8C:2E:1D:F0:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7FraDckAoTyDtwrD9Yf7jC4d8DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7EzkKBxfZfaKPEeSqbPDqjLDGIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/ca734b-5a0b-4a03-8131-cfefeaee865e/1/7FraDckAoTyDtwrD9Yf7jC4d8DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.17.152.0/21
80.66.208.0/20
178.218.148.0/22
Signature Algorithm: sha256WithRSAEncryption
60:99:4e:08:70:d7:c0:48:06:97:49:ce:85:45:b6:bb:21:97:
7a:b1:34:45:b5:ad:e3:76:34:cf:a5:2b:53:c9:99:64:15:f8:
48:d8:86:dc:7f:23:66:62:0b:62:78:27:23:55:c1:be:5e:33:
6f:14:17:03:85:19:f4:76:35:82:84:0a:47:a1:3d:16:32:2d:
79:16:dd:51:76:59:fa:23:d4:27:e1:9f:22:00:ce:7f:02:92:
84:fd:e9:f9:db:cd:d4:de:df:fd:d9:6d:eb:96:df:a5:40:11:
81:76:27:dc:e8:75:c7:92:22:ae:9b:af:2a:9e:35:aa:ad:24:
d2:86:10:63:9d:07:0c:48:ab:10:d0:e7:80:f4:9a:61:ab:22:
1c:aa:f6:4e:cb:91:df:0c:6e:04:3e:10:bf:e4:31:fa:dd:6b:
d6:a5:40:5c:c0:ef:bf:d0:7f:98:e6:32:62:56:dd:66:4d:97:
a6:c4:d7:15:47:2d:ff:67:eb:11:7f:62:e0:4a:54:8a:b1:4a:
26:62:9a:97:68:b8:f0:f9:94:ef:7c:15:ad:f7:51:26:62:3c:
59:37:99:e3:e6:db:c4:f6:e3:cc:88:b4:cc:37:cc:50:3a:1d:
b7:7b:cb:ba:6f:c6:27:b5:ed:92:ec:ec:63:c9:13:07:d7:5f:
00:3a:d8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:44 2023 by rpki-client on console-ams.rpki-client.org