Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/79rahWYshQCJuY4xbRFLkUOQpls.roa
File: 79rahWYshQCJuY4xbRFLkUOQpls.roa (raw, json)
Hash identifier: vR5DeFYF41hmDypz9IObOlZ0biWWzr1XvvXU47WadRA=
Subject key identifier: EF:DA:DA:85:66:2C:85:00:89:B9:8E:31:6D:11:4B:91:43:90:A6:5B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018611C5EE3288D3494A948D13C350319CC4
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/79rahWYshQCJuY4xbRFLkUOQpls.roa
Signing time: Thu 02 Feb 2023 10:57:09 +0000
ROA not before: Thu 02 Feb 2023 10:57:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
109.205.212.0/24 maxlen: 24
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.216.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:11:c5:ee:32:88:d3:49:4a:94:8d:13:c3:50:31:9c:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 2 10:57:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=efdada85662c850089b98e316d114b914390a65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:9b:dc:1d:60:f6:72:34:38:f8:5f:64:d6:32:
45:b0:a0:37:a6:0e:19:f2:1c:38:1d:61:2a:6a:3f:
5e:95:8d:c8:a8:12:3d:b0:74:07:61:0c:a5:90:7a:
4b:7e:0a:cc:d1:ce:84:03:28:fe:b3:2c:79:3f:eb:
39:25:13:e5:b4:7d:d5:94:b9:00:38:9e:e6:ca:75:
cc:fb:fa:52:fe:4b:6b:9a:51:e5:20:64:fc:b7:e1:
da:14:b6:d8:bf:df:93:2d:05:7d:3b:36:7b:0e:ee:
df:aa:d6:a8:03:3b:c4:ec:53:94:f3:e6:b2:9e:4f:
45:9f:10:74:22:70:be:58:d7:c7:79:74:a3:4a:19:
52:48:33:75:29:d0:ce:2d:a3:5c:2a:b1:b7:5c:a0:
15:10:49:6e:da:0b:f6:1a:76:55:50:0d:94:39:15:
65:ff:22:47:ca:d2:f1:38:1c:43:47:71:a9:3a:0d:
e5:2b:8a:16:cb:e5:65:24:fd:0b:a4:39:6b:1e:ed:
24:83:59:e4:71:8b:d0:ea:67:12:e6:36:0b:05:77:
eb:c2:2e:7b:0c:ff:2f:9f:1e:36:27:58:12:60:90:
f2:ef:47:c3:31:45:7a:9a:f8:2e:0c:7d:59:ac:2b:
87:48:c5:d6:6d:12:d8:d8:8f:08:7c:4d:a2:d2:f5:
e6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:DA:DA:85:66:2C:85:00:89:B9:8E:31:6D:11:4B:91:43:90:A6:5B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/79rahWYshQCJuY4xbRFLkUOQpls.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.96.0/24
46.23.98.0-46.23.103.255
109.205.212.0/24
185.81.216.0/23
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:4f:7c:82:36:fa:70:9f:cc:1f:cf:38:d7:64:66:b5:34:87:
44:9f:b2:97:0d:b2:37:18:9d:72:ce:6d:28:da:f2:1e:33:43:
ca:49:d0:3d:5c:ea:e5:b3:c0:f2:db:fe:ba:ea:b0:1a:77:60:
be:7f:55:54:ab:6c:c5:21:42:00:13:b8:f3:aa:a7:6b:86:de:
e2:2a:77:23:10:c8:56:f2:46:4d:63:94:23:6d:ac:c7:48:73:
d3:dc:36:0e:b9:7c:88:ec:1f:c1:88:48:e2:97:59:84:34:91:
8b:35:9b:bc:e9:95:cc:61:bd:b1:d9:e1:19:0c:70:d8:c8:3a:
60:7b:39:e3:b4:94:17:2d:7c:a6:df:57:43:0e:6e:11:40:6a:
26:e3:fb:94:f2:17:8e:a6:6e:14:fe:75:3b:11:88:bf:e8:56:
3f:a9:1f:f4:a6:b4:e1:9d:d1:cd:f0:e3:77:d7:a7:94:00:3c:
09:95:f9:3c:24:6f:13:b1:53:f7:ef:f8:82:d6:7c:3a:df:d2:
96:df:19:d4:b3:9c:b5:dc:9e:8f:a8:a7:51:6e:f4:a6:32:49:
b0:13:a0:4a:f2:91:91:04:97:bf:73:66:46:c7:02:9a:d5:04:
34:11:90:2b:89:a8:e8:ad:c2:d0:15:1f:86:6d:63:60:05:33:
22:2a:32:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org