Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4PC5hQ9m6DELoeyBNRhFOjlinaA.roa
File: 4PC5hQ9m6DELoeyBNRhFOjlinaA.roa (raw, json)
Hash identifier: 9bcqJ6y1jLWhd8Bvf+7utzD1qNcZJFdsMxIVkPLBTlg=
Subject key identifier: E0:F0:B9:85:0F:66:E8:31:0B:A1:EC:81:35:18:45:3A:39:62:9D:A0
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01857E257501917B0C0186836F6F2B41BBE4
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4PC5hQ9m6DELoeyBNRhFOjlinaA.roa
Signing time: Wed 04 Jan 2023 18:57:42 +0000
ROA not before: Wed 04 Jan 2023 18:57:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 164.215.96.0/22 maxlen: 22
46.23.100.0/22 maxlen: 22
5.10.248.0/22 maxlen: 22
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:7e:25:75:01:91:7b:0c:01:86:83:6f:6f:2b:41:bb:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 4 18:57:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e0f0b9850f66e8310ba1ec813518453a39629da0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e1:04:ac:ad:11:b3:3b:41:a9:7b:c0:fb:41:
db:9c:2c:75:1b:b0:84:53:30:94:22:61:9f:ec:57:
1a:3f:ce:f9:d1:db:a6:68:12:77:05:cb:32:8d:f7:
8b:a1:a2:a0:51:ad:f7:22:51:9f:9d:04:3d:34:0b:
a3:5b:a4:19:98:33:52:e6:45:96:7c:bf:91:80:89:
72:44:59:04:6b:58:f3:d5:a5:84:ed:6c:42:9d:de:
da:96:e9:a2:ed:2c:8d:42:e4:cd:10:20:b9:0d:10:
e4:a3:96:8b:66:e5:85:fb:59:9c:2e:6d:ab:09:ce:
e5:d5:56:1a:e1:3b:eb:e5:72:2f:39:96:40:70:18:
25:30:2f:66:ae:77:75:a5:2d:cf:2f:13:06:a6:14:
0d:2f:fc:56:af:cb:49:66:81:16:6c:9c:2a:69:d3:
45:b9:6d:10:13:cc:eb:89:ed:d3:85:25:78:6a:d6:
1d:4d:ea:3d:b0:e4:39:80:42:35:c0:28:a9:7a:11:
b4:a6:72:47:5b:ec:5a:73:2e:6e:d8:bd:98:6e:e4:
f1:cc:3b:b4:27:f3:04:33:0d:9b:d3:fe:d5:f8:4e:
7a:f1:7d:7c:61:da:ed:44:f5:2a:48:6f:80:4d:49:
1f:1f:d5:ef:65:74:da:8b:a3:c7:d8:00:97:6c:dd:
21:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:B9:85:0F:66:E8:31:0B:A1:EC:81:35:18:45:3A:39:62:9D:A0
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/4PC5hQ9m6DELoeyBNRhFOjlinaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
164.215.96.0/22
185.81.216.0/23
Signature Algorithm: sha256WithRSAEncryption
44:ff:78:6e:8c:ba:75:33:6f:d5:50:65:f8:86:72:0e:e2:94:
32:75:73:aa:b2:9d:6d:a7:c2:92:44:54:e5:b2:71:97:52:33:
2a:20:63:a1:5f:b9:ff:1b:36:2f:0a:0a:76:d3:30:43:a8:fc:
d2:76:b2:53:8e:d7:0f:6f:e5:7e:5f:13:82:53:a4:83:5e:ee:
c4:e2:ea:97:5e:16:47:b0:b7:c8:bf:71:af:2c:0f:52:65:99:
a9:35:f1:0a:32:74:77:25:ca:7d:a3:21:4c:c5:79:81:95:e3:
1f:7e:2f:25:dd:75:ea:b5:84:1b:6b:44:28:a1:21:75:8b:94:
2c:2b:cc:c2:c9:f9:2e:c3:66:76:38:81:d4:3a:fe:d7:ee:29:
d7:89:42:b0:8a:dc:0e:fb:d4:48:5b:e3:4d:43:0d:41:cd:6a:
cc:f4:53:01:33:1a:4c:a6:c0:8c:88:dd:30:64:f9:47:5b:ff:
e2:00:2a:b7:d2:99:9b:da:fc:da:b5:09:29:dd:03:80:21:d3:
70:fb:e4:44:7b:52:37:b3:ec:6d:e3:51:df:16:2f:70:1e:4a:
e6:ab:39:99:04:27:f8:58:51:49:e7:4b:af:54:9a:ae:45:5e:
9c:90:71:99:bc:cd:e7:20:5f:5a:1b:74:7f:45:0e:8a:7e:1a:
cd:73:25:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org