Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/O7tM1JY0PoHKHjkfstmgaP0G4Wg.roa
File: O7tM1JY0PoHKHjkfstmgaP0G4Wg.roa (raw, json)
Hash identifier: WiyaykigUME1y9YWz8WiENV7KA1qLdxkiqDuxg47oik=
Subject key identifier: 3B:BB:4C:D4:96:34:3E:81:CA:1E:39:1F:B2:D9:A0:68:FD:06:E1:68
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 018C8D7759A3C11D054091E9D4F2D33E9324
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/O7tM1JY0PoHKHjkfstmgaP0G4Wg.roa
Signing time: Thu 21 Dec 2023 17:40:58 +0000
ROA not before: Thu 21 Dec 2023 17:40:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:8d:77:59:a3:c1:1d:05:40:91:e9:d4:f2:d3:3e:93:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Dec 21 17:40:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3bbb4cd496343e81ca1e391fb2d9a068fd06e168
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:67:41:bb:2b:98:09:a3:be:14:b9:eb:2c:86:
12:40:b9:1f:97:5c:5d:61:51:6a:8b:f6:2c:c6:23:
a8:8b:f8:a3:ad:80:97:ef:c2:53:00:1a:5b:06:7e:
c9:8f:e1:0c:1a:90:12:51:03:fd:98:22:6b:dd:01:
11:3d:08:e6:b1:58:a5:4e:9e:cd:83:ab:f3:d9:da:
49:bc:91:11:34:e7:e8:80:1f:d0:fd:d8:9c:fc:af:
54:10:80:c9:91:9b:1f:77:80:c3:67:7b:d8:a1:a5:
53:1d:68:c8:34:a2:d1:f7:6f:f3:4d:cc:da:17:e8:
9b:15:25:28:76:4e:b9:e6:40:59:4a:30:cc:df:80:
dc:f6:22:5f:90:74:38:59:a4:93:49:a3:f5:fe:1f:
4d:86:11:ca:c6:2a:3d:47:fe:13:40:87:fb:bc:e8:
4a:0e:54:ad:32:ac:1e:b0:b7:39:00:13:5f:33:75:
5d:4f:b8:4b:96:39:e7:35:6b:a6:33:cc:89:dd:9a:
0f:93:7d:f0:9d:e0:e2:31:ce:a5:44:dd:22:de:34:
42:ae:f2:d6:a1:53:fd:76:89:7a:39:a4:33:25:3f:
ac:8b:69:33:9f:48:a7:47:37:91:53:f7:67:dc:11:
a3:58:14:6d:b8:1b:03:e2:73:e4:18:75:11:59:7d:
35:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:BB:4C:D4:96:34:3E:81:CA:1E:39:1F:B2:D9:A0:68:FD:06:E1:68
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/O7tM1JY0PoHKHjkfstmgaP0G4Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
46.23.100.0/22
46.23.110.0/24
109.205.212.0/24
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
18:eb:08:2b:5c:74:13:fd:d1:aa:6e:08:46:61:ab:90:7d:69:
69:33:c5:27:6f:84:87:c0:40:fb:c9:cc:a3:9f:77:d7:03:8e:
73:d2:18:1e:5f:e2:da:81:4d:bd:52:96:4d:f8:e5:a1:c5:d6:
ec:ce:81:72:44:ad:40:ff:8c:1d:2a:cd:63:cd:32:64:bb:fd:
93:33:b3:2d:36:ab:01:1a:78:eb:f5:58:07:05:d5:9b:c7:30:
43:a0:d4:6f:36:f6:6b:1b:f8:b4:11:0a:49:52:c4:af:cf:af:
c9:ba:b7:0f:61:f6:63:79:cf:ae:60:fc:77:b2:f6:62:fe:44:
30:64:30:c9:f0:99:1c:5c:2c:f1:a3:73:0a:ba:6c:e9:00:3f:
c7:7f:d3:fd:3e:a6:71:fb:5c:05:81:35:7b:c0:83:84:4c:e1:
62:f4:d6:af:64:01:cc:d2:e6:bf:90:68:f7:4c:11:24:a3:ed:
71:dc:f2:de:1e:bd:e9:bb:6d:b0:f4:9e:e3:96:5b:81:4d:be:
77:ed:d6:ad:07:43:8c:92:e3:d4:75:94:25:44:c8:ab:9a:4a:
21:47:a2:f9:41:29:61:9b:2e:9e:22:96:28:92:d7:aa:74:19:
34:25:06:f6:45:ee:89:ff:a4:85:ef:46:e3:90:d8:bb:b5:1a:
7e:3e:bc:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 19:27:55 2024 by rpki-client on console-fra.rpki-client.org