Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ETXFWss1nFY8tC4sDfJLN7vOSjs.roa
File: ETXFWss1nFY8tC4sDfJLN7vOSjs.roa (raw, json)
Hash identifier: CicX8UEQIqjL6t1qVcUXXKURiuVEK2eAeEoNttOxaVw=
Subject key identifier: 11:35:C5:5A:CB:35:9C:56:3C:B4:2E:2C:0D:F2:4B:37:BB:CE:4A:3B
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018659470BA1295221FB244BB2E75FB143D3
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ETXFWss1nFY8tC4sDfJLN7vOSjs.roa
Signing time: Thu 16 Feb 2023 08:11:13 +0000
ROA not before: Thu 16 Feb 2023 08:11:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.100.0/22 maxlen: 22
109.205.212.0/24 maxlen: 24
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:59:47:0b:a1:29:52:21:fb:24:4b:b2:e7:5f:b1:43:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 16 08:11:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1135c55acb359c563cb42e2c0df24b37bbce4a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:33:b2:47:54:97:25:a9:9a:48:bd:1e:10:34:
d4:7e:87:7f:c9:c0:43:e8:b9:54:6d:34:b9:b9:58:
d1:e4:97:0f:db:ec:cd:51:36:1d:a5:1e:8c:e0:8d:
38:bc:69:3e:dc:a8:bc:b1:38:25:94:4a:14:ce:49:
ca:e8:33:30:2c:cc:f9:a9:e6:cd:f8:b5:03:ed:bf:
50:2c:2e:ab:cd:d1:54:9a:37:c5:f7:ca:f9:d4:3d:
e1:68:59:dc:33:95:de:ab:27:41:f8:db:4f:2f:df:
a7:2b:ce:e1:d6:5d:0e:32:5e:d8:5c:22:00:85:d8:
1a:ac:18:c8:c5:26:3c:e1:2a:1a:97:ca:02:de:f7:
bf:72:11:32:1a:fd:d4:da:d3:03:ee:53:65:12:3c:
3e:da:d7:81:b0:67:ac:08:5c:81:f5:fb:f2:ec:12:
9e:16:41:e3:f8:18:da:a5:0a:fd:c4:f8:51:ed:b1:
d8:18:0c:0c:ba:80:ab:70:51:3c:0a:c8:13:39:a8:
5c:e1:4e:5d:e4:f5:b1:fa:e8:db:27:a3:82:f7:7c:
2b:8b:42:48:0b:d2:41:7c:d1:d6:2a:15:f6:7c:9d:
a7:fa:63:02:97:59:96:d5:0f:ef:25:e5:32:9c:4b:
0a:0d:13:fd:3c:d2:42:26:26:9a:52:8c:c8:40:6f:
15:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:35:C5:5A:CB:35:9C:56:3C:B4:2E:2C:0D:F2:4B:37:BB:CE:4A:3B
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/ETXFWss1nFY8tC4sDfJLN7vOSjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
109.205.212.0/24
185.81.217.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:ac:60:de:84:ab:10:87:7f:a5:e9:4c:e2:70:65:bf:98:83:
1e:c2:b0:07:b6:1a:b3:0a:26:e3:7d:39:98:47:aa:33:93:cb:
e7:60:8a:1b:3e:9b:9b:c9:89:8b:50:3c:4b:06:06:00:47:7a:
e3:85:2a:f4:77:8f:1f:ef:53:be:49:3e:9b:74:8e:a7:d0:92:
25:25:61:82:3c:b8:06:b6:0a:5b:1d:c3:53:7f:57:d6:4f:3e:
66:44:37:4b:03:90:b9:b3:40:29:42:d8:88:30:38:4e:7f:1a:
95:8f:5e:c0:a2:d2:85:d4:e5:ab:45:0b:69:23:ed:7e:3e:9e:
f8:fc:2f:6d:8c:ac:a9:54:84:6d:f0:65:0f:a5:d6:f5:8d:f5:
e7:4c:86:1d:94:c6:45:32:2d:38:d2:9b:94:0f:54:97:f6:7b:
06:cc:d9:c5:05:49:ea:bb:3f:b9:40:41:09:ca:bc:f3:88:19:
0a:72:d0:ab:3d:57:97:f3:13:20:5c:7a:0e:bc:e3:f2:d1:19:
31:29:d5:b3:67:bb:0d:20:d1:b7:37:7c:00:35:4e:9a:ec:3b:
50:90:96:a3:31:49:25:fa:2b:00:e6:94:bd:77:53:80:22:5b:
29:e3:16:fe:db:af:42:ea:dd:b3:20:a0:ee:92:4b:06:c3:9d:
c7:78:88:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org