Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jCqUgH6DXutTlyg7yyvdixaMmo.roa
File: 8jCqUgH6DXutTlyg7yyvdixaMmo.roa (raw, json)
Hash identifier: c4QvxttNCXBqgji8lPMmoaTlP862ltfovKNaZNEsQt8=
Subject key identifier: F2:30:AA:52:01:FA:0D:7B:AD:4E:5C:A0:EF:2C:AF:76:2C:5A:32:6A
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01888A1C056CF75F2C5E44CA227778C8C5C0
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jCqUgH6DXutTlyg7yyvdixaMmo.roa
Signing time: Mon 05 Jun 2023 05:51:12 +0000
ROA not before: Mon 05 Jun 2023 05:51:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 164.215.100.0/24 maxlen: 24
46.23.104.0/22 maxlen: 22
85.158.148.0/22 maxlen: 22
85.158.146.0/24 maxlen: 24
85.158.147.0/24 maxlen: 24
109.205.210.0/24 maxlen: 24
37.128.200.0/22 maxlen: 22
5.10.240.0/22 maxlen: 22
5.10.252.0/22 maxlen: 22
185.81.218.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:1c:05:6c:f7:5f:2c:5e:44:ca:22:77:78:c8:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jun 5 05:51:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f230aa5201fa0d7bad4e5ca0ef2caf762c5a326a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:b5:a9:89:99:65:a9:59:0e:df:c8:70:f0:28:
ba:71:a4:63:4f:6b:29:24:41:e9:9c:d6:23:f1:2d:
fb:ec:19:63:dc:81:4e:d3:d5:30:a6:28:8e:5a:ad:
ac:79:ae:9f:5f:63:5d:61:06:d5:b5:73:3e:5a:4d:
e3:f5:18:df:84:7c:7a:35:ed:fa:d3:3c:14:47:0f:
d2:41:16:0d:e4:57:41:ea:e7:dd:dd:06:0e:db:a7:
93:c7:6d:e1:be:69:98:dd:ef:87:7f:7a:c4:be:0a:
cf:7f:66:21:bf:65:94:2c:44:ba:15:63:65:42:74:
db:9b:58:e6:10:b2:96:44:0e:84:5f:95:0c:fe:93:
35:a7:2d:df:d2:b1:c2:1e:c7:23:d5:25:19:61:3a:
9f:1d:43:47:cb:e9:c5:c2:d4:bf:1c:18:c0:f8:71:
89:e6:34:26:ab:bd:f8:c0:1b:d1:0b:29:07:a5:22:
dd:03:df:04:d4:64:64:67:9b:00:a7:34:57:10:14:
b0:90:49:d0:b7:69:7d:17:e5:4f:6b:de:65:aa:5e:
6b:2f:39:00:42:0a:a8:1b:9d:94:65:dc:9f:ac:ad:
0e:15:b7:96:e7:c8:59:40:2b:52:18:9d:ad:20:90:
53:93:c3:78:40:e7:b2:00:8f:d8:02:c9:f0:0c:58:
0e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:30:AA:52:01:FA:0D:7B:AD:4E:5C:A0:EF:2C:AF:76:2C:5A:32:6A
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/8jCqUgH6DXutTlyg7yyvdixaMmo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.240.0/22
5.10.252.0/22
37.128.200.0/22
46.23.104.0/22
85.158.146.0-85.158.151.255
109.205.210.0/24
164.215.100.0/24
185.81.218.0/24
Signature Algorithm: sha256WithRSAEncryption
43:ef:e3:36:8a:4f:f7:13:24:1a:60:b4:f8:df:1f:55:64:80:
43:82:37:bf:82:43:bf:b6:fc:d4:62:58:b9:47:b2:da:87:81:
88:4d:23:53:9b:7c:e4:17:77:9a:f4:77:1f:33:a4:b1:26:96:
99:ae:9e:5a:24:3c:14:57:db:0d:19:59:51:e9:1d:a8:a1:1c:
00:ed:45:99:f3:33:4f:4a:8a:5f:fa:16:79:7b:53:56:70:9b:
20:bc:e3:e8:c1:1d:99:60:a0:ee:bd:0b:ec:fb:15:08:e9:30:
96:02:40:a0:13:8f:06:ec:fb:1d:ee:5c:53:ed:f0:25:9d:49:
3e:e5:ba:69:bf:b9:a4:7f:eb:5a:d4:44:d3:f7:ed:80:9b:01:
1f:37:64:85:b7:24:17:23:2a:1f:62:58:4f:4b:d9:3e:3a:19:
16:6c:8d:ac:99:6a:1b:f3:ea:4b:7a:39:c3:80:f1:15:ea:97:
0d:40:cb:8e:47:80:3c:3e:30:62:61:57:35:99:89:bc:5e:1c:
ce:e9:fe:e4:28:91:06:5b:d8:0f:61:4f:33:a1:d8:97:7d:2f:
db:1b:95:fa:90:dd:51:50:30:39:34:2a:ab:fa:05:68:75:6c:
a1:c0:f5:d5:7f:30:eb:d0:3e:a0:a9:7f:eb:04:e4:f8:2b:29:
c4:bd:95:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:55 2024 by rpki-client on console-fra.rpki-client.org