Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T6nOEsPBB7l1NXdNtnUMWwIQqgw.roa
File: T6nOEsPBB7l1NXdNtnUMWwIQqgw.roa (raw, json)
Hash identifier: uj4yKBGRTIkE6unS3Xmg/onW6ySanPURVAKbEfvYgDQ=
Subject key identifier: 4F:A9:CE:12:C3:C1:07:B9:75:35:77:4D:B6:75:0C:5B:02:10:AA:0C
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186DAEEF37954C45D77FFE24A44466A0B4C
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T6nOEsPBB7l1NXdNtnUMWwIQqgw.roa
Signing time: Mon 13 Mar 2023 12:25:38 +0000
ROA not before: Mon 13 Mar 2023 12:25:38 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:ee:f3:79:54:c4:5d:77:ff:e2:4a:44:46:6a:0b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 12:25:38 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4fa9ce12c3c107b97535774db6750c5b0210aa0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:21:34:65:3c:c2:ec:f3:cc:10:d0:34:b6:ec:
10:38:ad:50:39:4a:eb:a8:2e:ec:92:a9:45:61:9a:
9a:18:c4:2d:a6:0b:21:cf:47:39:79:a7:5e:bf:f9:
45:8f:d8:44:93:f2:d5:a1:c1:5d:17:d2:30:fb:20:
e8:33:69:ad:66:39:a6:81:4e:c6:a5:18:d8:6d:55:
cc:4a:bb:4a:b5:b4:c6:ef:32:d2:8d:f0:7b:37:3c:
8e:09:9a:dc:53:fe:a5:a9:98:43:a0:44:f5:ee:d0:
5b:9c:cc:04:09:1e:f5:32:69:ad:69:57:c8:b5:fe:
f2:f8:e2:5c:3f:8a:ea:94:fd:cd:db:2d:8a:ab:0f:
40:fe:2c:c2:bc:a7:17:22:3f:bd:c1:62:64:7e:f5:
ea:22:6f:2e:b7:14:18:3b:9a:e1:49:6a:64:86:0d:
18:0d:e0:4e:d8:a3:35:da:af:d4:9c:52:80:ed:1a:
d4:db:ef:54:40:0c:8f:6b:cf:ae:1b:39:f9:6a:8e:
94:72:f2:39:20:e2:47:77:ec:fc:df:0a:3b:0a:a4:
8b:78:08:d1:73:57:91:3c:f7:c8:8c:ed:bf:aa:b6:
ae:5f:22:f6:2b:7c:22:f8:3c:2c:f4:c7:9b:1d:1b:
5e:c8:e8:4c:67:39:e6:1e:d4:f3:a2:91:a9:dd:bd:
8f:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A9:CE:12:C3:C1:07:B9:75:35:77:4D:B6:75:0C:5B:02:10:AA:0C
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/T6nOEsPBB7l1NXdNtnUMWwIQqgw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.2.0/23
46.23.96.0/24
46.23.98.0/24
46.23.100.0/22
46.23.110.0/24
185.81.217.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:2b:d1:19:2a:4f:af:9d:48:00:02:66:f4:0c:f0:e9:5f:b0:
51:33:b1:86:73:00:69:5d:99:13:c3:d4:73:9a:75:e4:04:6e:
9b:0d:ae:9a:d7:ab:23:19:54:72:95:ad:2e:90:6f:cf:ac:e5:
80:82:ff:d0:05:84:c8:95:fb:26:4a:c6:24:63:cd:35:47:fb:
f9:09:b7:f0:20:46:5c:5e:5d:e0:39:b1:cc:22:7a:e7:b3:ea:
b5:7d:06:4a:a1:fd:c1:65:8d:31:8b:7d:de:45:fb:b4:90:72:
b1:76:c9:dc:68:92:46:dd:44:75:db:11:f4:db:0f:72:bf:f9:
d8:fb:20:18:c8:7e:6d:5c:93:49:65:9a:37:79:c5:a8:a3:46:
d1:92:f1:ab:62:05:06:b6:ae:5e:cc:07:dd:c5:be:40:e1:99:
61:4e:dc:fb:b4:db:ed:a9:ed:77:fa:e9:d6:33:08:4c:27:b2:
b1:01:bf:b4:b3:d6:87:1a:fa:b6:3e:0f:7b:88:57:ca:34:6b:
ea:db:34:86:33:23:10:a6:71:d2:6a:f0:dc:8e:f3:e9:a5:82:
63:33:a3:d7:02:fd:c5:8e:c7:4c:7d:e3:cb:03:37:4d:0c:cc:
4f:d4:e8:ff:9c:75:09:cb:4a:b0:c6:4f:9c:ea:2f:d0:d7:a4:
fc:29:0e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:00 2023 by rpki-client on console-fra.rpki-client.org