Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Io1FlCDzGAdlNMq7OAny5cCLpzk.roa
File: Io1FlCDzGAdlNMq7OAny5cCLpzk.roa (raw, json)
Hash identifier: Spf4U38zCb89JT1o9FApqqwMM11t3kyFkBQ5zKMdawQ=
Subject key identifier: 22:8D:45:94:20:F3:18:07:65:34:CA:BB:38:09:F2:E5:C0:8B:A7:39
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01862BE147EFAFAFFCC5DD06FBC568431489
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Io1FlCDzGAdlNMq7OAny5cCLpzk.roa
Signing time: Tue 07 Feb 2023 12:37:09 +0000
ROA not before: Tue 07 Feb 2023 12:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2b:e1:47:ef:af:af:fc:c5:dd:06:fb:c5:68:43:14:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 7 12:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=228d459420f318076534cabb3809f2e5c08ba739
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:00:cf:b2:88:61:38:ea:70:f4:1b:ec:68:f3:
6f:87:a6:69:7a:d3:33:ca:a0:7d:c7:38:c4:0f:b6:
5a:d3:31:71:2b:1b:50:0d:40:fd:00:d0:54:7d:d0:
1a:cf:ca:18:f9:2a:c1:ec:77:53:de:52:19:f6:cb:
d4:a4:ce:0c:df:b3:78:48:14:1a:3d:4e:5e:a4:7f:
66:d5:e3:d4:23:92:01:7c:6d:06:53:05:80:48:52:
f3:70:bc:da:36:90:23:39:93:b5:16:eb:87:18:a3:
4d:9f:e1:3e:6f:38:89:01:87:8a:0d:a4:f3:49:50:
41:f8:6c:51:fe:ec:e2:04:81:bc:fd:78:f5:2e:2a:
01:3b:4c:c1:a5:85:77:b0:a8:27:6b:e4:cc:b5:26:
c9:9a:2c:da:be:ae:5c:66:07:8c:fd:6f:ba:b2:c7:
b4:be:87:bf:a0:cd:6c:ed:5f:29:ea:a4:f0:28:1c:
d7:5d:40:7b:aa:1c:e9:bc:70:20:04:9f:a0:15:3b:
1e:c7:c7:49:36:37:46:cd:2c:ce:89:72:a6:ea:8f:
c2:96:6a:bc:2c:9e:37:9c:bb:c0:c4:c6:b1:bc:de:
65:58:41:0f:41:bc:45:c3:4e:f1:8c:b4:f0:fe:44:
5e:a4:85:9b:31:30:02:46:5a:4f:d0:1c:1f:0e:83:
36:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:8D:45:94:20:F3:18:07:65:34:CA:BB:38:09:F2:E5:C0:8B:A7:39
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Io1FlCDzGAdlNMq7OAny5cCLpzk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.2.0/23
46.23.96.0/24
46.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:3e:20:a8:5f:34:fa:ef:e4:59:00:43:04:f5:35:7f:4e:fc:
31:66:87:5e:af:bc:5f:83:2b:88:92:a7:ac:2d:40:a4:f1:59:
3a:f5:51:26:4d:1f:3e:22:4f:19:93:0a:1a:5f:08:74:43:22:
84:c3:0f:e5:28:5d:bc:4c:7a:83:43:50:4c:cf:f7:c4:75:d9:
ad:e7:71:43:58:14:ce:dc:52:52:97:12:a2:3c:6c:53:3e:73:
b2:69:f7:fb:b3:af:46:bf:78:f6:9a:68:99:f9:58:72:a0:49:
b8:ae:f3:08:3b:cb:72:4c:31:91:1c:6e:eb:7e:07:15:bd:a1:
44:28:0f:33:2d:03:66:cd:d9:9a:fa:19:16:b3:0a:30:5e:6e:
42:93:e8:f3:2c:ec:78:e4:67:fa:83:f8:cb:f7:19:dd:34:24:
b6:bc:1c:51:c9:97:a5:ea:1c:9b:74:74:eb:d0:2f:ad:16:07:
50:29:c7:2f:03:63:1c:74:02:c6:35:83:f8:79:70:ea:40:cc:
b2:d1:eb:35:9f:e7:67:c3:b3:ed:86:66:28:9b:d6:13:07:93:
59:26:d6:86:6c:e4:e0:97:ae:48:62:0c:ac:bf:a1:f8:07:47:
b2:79:62:ba:67:ef:91:84:d1:8a:0a:36:e6:d1:66:6b:40:0a:
bd:e5:3c:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org