Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8BQlL_gVonDxPWWo9r6fxXcnpZk.roa
File: 8BQlL_gVonDxPWWo9r6fxXcnpZk.roa (raw, json)
Hash identifier: f7YB8WD3ALdlOeeIZdNEKtLDoTiwT3y9tc4UbYHWfiY=
Subject key identifier: F0:14:25:2F:F8:15:A2:70:F1:3D:65:A8:F6:BE:9F:C5:77:27:A5:99
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185DF90591DED1BBF5797B4E3A0D7E30A64
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8BQlL_gVonDxPWWo9r6fxXcnpZk.roa
Signing time: Mon 23 Jan 2023 16:57:37 +0000
ROA not before: Mon 23 Jan 2023 16:57:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 46.23.108.0/24 maxlen: 24
185.81.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:df:90:59:1d:ed:1b:bf:57:97:b4:e3:a0:d7:e3:0a:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 23 16:57:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f014252ff815a270f13d65a8f6be9fc57727a599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:46:e7:d7:89:77:30:d0:7b:65:5e:18:0e:60:
bc:b7:c2:0b:80:a3:32:5e:b4:c4:e3:ae:1f:fc:31:
a6:9a:89:40:de:22:67:48:15:cf:5d:45:b4:59:7e:
a0:5f:57:12:48:07:e2:e3:de:b8:40:0d:98:fc:27:
57:fd:9a:67:93:35:1c:a1:eb:0e:8c:d9:78:d7:49:
cf:e2:89:d2:70:09:35:ce:a7:73:44:5b:49:8d:6b:
d2:6f:11:40:9b:9d:e9:21:e8:da:cf:c1:e5:1a:a2:
79:d5:78:3d:6e:2a:5b:fc:6f:17:84:b2:41:a2:f0:
56:33:73:6e:a7:59:12:f8:96:bc:80:c6:13:f8:f4:
ba:03:4a:3c:0f:6f:55:92:1c:da:ee:7d:19:c2:6e:
99:09:d2:ee:73:e0:74:89:31:0d:c2:66:ba:52:14:
51:40:fd:b4:3a:79:b0:e4:62:10:b0:ee:e1:59:92:
e7:d4:fd:50:1a:d8:bd:9f:74:1a:a0:f4:df:0c:1c:
75:3e:e3:5d:e5:6d:18:d2:79:25:bd:79:b0:68:10:
65:69:ef:37:89:d7:94:bf:13:a8:f9:58:06:37:3c:
d4:73:8f:30:c5:6d:9f:b5:fa:ea:69:0e:80:31:a8:
08:87:20:e3:a4:9e:4f:3b:5d:9f:69:66:83:2e:0d:
13:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:14:25:2F:F8:15:A2:70:F1:3D:65:A8:F6:BE:9F:C5:77:27:A5:99
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8BQlL_gVonDxPWWo9r6fxXcnpZk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.108.0/24
185.81.218.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:0f:a1:03:d0:d4:c7:79:77:b0:76:93:1b:f0:1f:3e:a8:0a:
c0:8b:64:82:90:b8:92:e2:dd:b1:da:0e:6d:49:74:af:89:66:
37:ea:ff:a5:4e:0c:03:5e:3a:2c:64:39:57:bc:c4:12:21:e8:
1f:e4:ba:8f:0e:b2:cd:f8:c4:e8:5d:3c:e1:3e:16:90:b0:02:
86:cf:8e:09:0a:65:36:b2:86:11:d7:2b:55:2a:85:e4:3b:f4:
6c:dd:cf:ad:dc:ee:41:0d:82:cc:2f:ad:32:93:ce:b9:04:52:
44:df:a9:5d:55:ad:ca:29:8b:04:bd:38:53:1e:4e:ec:aa:26:
89:b9:b2:59:29:6b:3e:34:60:54:c6:fa:52:dd:26:dc:15:fb:
ca:76:cf:9d:50:9d:9a:ed:69:9e:f3:d1:45:a3:03:71:47:0c:
b0:3d:a7:17:8d:e9:16:e5:60:04:c9:d2:8c:63:bf:17:cc:a3:
a6:a0:97:35:b9:fa:eb:be:b8:c3:c4:04:2f:39:0d:25:63:82:
70:2a:41:5d:ba:a2:dc:01:bd:1d:33:2a:da:f4:66:31:6a:3f:
2e:96:2b:ec:e7:2c:0a:7e:dd:da:7f:86:0e:54:b6:00:fa:bb:
52:49:9a:7e:6d:17:f9:fb:78:89:36:2b:21:37:82:a5:91:e4:
71:ec:0e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org