Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7Duu98He2SYlo-kmYC-ISxHyki8.roa
File: 7Duu98He2SYlo-kmYC-ISxHyki8.roa (raw, json)
Hash identifier: jV9c+cMZ4RLgNx7HbaS4tqPFF7K+HLxytTJyo6A8BKM=
Subject key identifier: EC:3B:AE:F7:C1:DE:D9:26:25:A3:E9:26:60:2F:88:4B:11:F2:92:2F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0189B0F5D1ABE523E1AAD1C2A8CC159FAA63
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7Duu98He2SYlo-kmYC-ISxHyki8.roa
Signing time: Tue 01 Aug 2023 11:57:27 +0000
ROA not before: Tue 01 Aug 2023 11:57:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213373
IP address blocks: 164.215.103.0/24 maxlen: 24
46.23.109.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:b0:f5:d1:ab:e5:23:e1:aa:d1:c2:a8:cc:15:9f:aa:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Aug 1 11:57:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ec3baef7c1ded92625a3e926602f884b11f2922f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:40:2b:f2:7b:4c:19:f4:89:c9:b6:07:5e:9a:
11:11:05:80:d7:57:bf:9c:9e:54:25:d6:25:5a:83:
af:ba:30:3a:b9:0b:1a:31:d2:46:37:16:a1:f8:77:
d0:ae:5d:a0:a6:8d:ea:fd:6c:d3:30:f3:5d:5d:8b:
74:e1:29:fe:25:4a:bc:9d:82:af:00:a5:07:bd:ba:
6e:bd:97:2f:00:c8:f3:42:13:63:00:5e:24:f5:34:
32:c8:8f:a0:19:f7:07:30:d2:3a:e3:fb:10:cf:85:
3f:4a:02:cc:65:40:7c:22:dc:5b:06:0b:25:96:c2:
1d:6d:a1:19:6e:27:b9:e3:53:14:cf:fd:f8:0d:b6:
83:4f:ab:d6:65:76:c5:42:47:11:47:38:1d:c1:87:
93:61:03:d9:09:4c:b9:75:28:34:ec:9b:44:8c:14:
34:fc:ed:e3:29:b3:d9:a6:b6:4a:97:f4:7c:be:82:
61:24:ab:61:d1:80:9a:44:97:38:ec:3f:4e:e7:37:
23:d0:d0:63:80:03:aa:17:a3:cd:43:a6:a3:f2:64:
f8:84:26:db:13:03:3f:9d:a5:9c:57:b0:d5:0e:ca:
21:1a:fc:eb:67:f7:24:e8:b5:41:9a:fc:a3:eb:04:
4a:0b:49:93:b7:f9:a4:45:97:1e:b6:2a:60:48:e9:
8d:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3B:AE:F7:C1:DE:D9:26:25:A3:E9:26:60:2F:88:4B:11:F2:92:2F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/7Duu98He2SYlo-kmYC-ISxHyki8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.109.0/24
164.215.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:c6:c1:c2:2a:e5:3b:9b:42:ed:d9:de:ca:61:1d:27:07:f7:
98:bb:eb:3c:d5:f2:b5:f2:a0:1c:53:45:61:6d:4d:e3:0c:b4:
c3:80:25:07:88:56:c6:06:a8:5a:99:92:3e:33:83:a3:ec:fc:
60:0a:a8:5c:8b:50:7f:7b:a4:9f:76:52:44:dc:d7:69:45:a3:
d1:0a:f6:8b:c3:8c:93:a0:eb:cd:f6:e6:a4:14:73:83:c6:d6:
17:fc:27:a1:c5:c5:6e:9f:67:cc:e8:68:8a:f4:91:e3:fa:0a:
44:56:48:c9:47:59:10:83:73:80:1c:2d:a2:69:fa:3e:cb:e6:
c5:5f:a5:0d:59:c7:69:50:8a:a7:72:71:06:58:f9:1c:a3:a5:
12:69:9a:5d:99:5a:d5:a2:02:01:7c:c4:98:35:4a:13:91:1e:
ac:ba:ed:06:e5:6d:fd:70:0f:6a:04:75:1a:2a:14:f0:6a:e6:
c1:ec:98:3d:80:6b:05:fb:90:23:86:cb:cd:2c:ac:fe:7b:ca:
e7:7b:53:3a:f1:49:72:18:26:7f:24:9e:a0:2f:d5:a4:0f:a8:
19:69:72:ee:a7:c6:8c:e5:e3:ee:40:90:13:9c:aa:71:51:6c:
65:17:05:7b:cd:e2:cf:0b:9c:fa:59:8d:84:6f:b3:b3:81:f6:
35:7b:89:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 13 14:10:09 2023 by rpki-client on console-fra.rpki-client.org