Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XeNdiNnGy0VyeCShyADXs1PdlxY.roa
File: XeNdiNnGy0VyeCShyADXs1PdlxY.roa (raw, json)
Hash identifier: dECHfqPdKknlOq8+jp2pZw/n+4wYy4yS45U6L0Zx5dg=
Subject key identifier: 5D:E3:5D:88:D9:C6:CB:45:72:78:24:A1:C8:00:D7:B3:53:DD:97:16
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01856D941658D44194AB6FCA77F84E9CE00F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XeNdiNnGy0VyeCShyADXs1PdlxY.roa
Signing time: Sun 01 Jan 2023 13:44:59 +0000
ROA not before: Sun 01 Jan 2023 13:44:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208046
IP address blocks: 46.23.110.0/24 maxlen: 24
109.205.211.0/24 maxlen: 24
109.205.214.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:16:58:d4:41:94:ab:6f:ca:77:f8:4e:9c:e0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 1 13:44:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5de35d88d9c6cb45727824a1c800d7b353dd9716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1e:97:ed:b1:7a:c8:80:9c:f9:9f:5e:a6:f3:
65:98:26:3a:07:e4:47:c3:08:8d:87:1e:68:db:b5:
ce:80:c9:92:e1:6c:2b:b5:35:42:01:78:2c:0c:3f:
94:e7:a7:bc:b5:50:ed:fb:9b:8e:91:d1:9b:a1:1c:
c0:44:b4:dd:16:07:89:ad:7f:79:1e:a3:1d:20:6e:
32:3f:cf:36:cc:34:08:21:44:e9:26:b7:b1:63:a9:
e0:ca:c8:6d:0a:de:9a:ba:e4:94:1e:7c:97:72:52:
8e:45:22:2b:37:03:b4:46:b7:f1:25:40:62:61:28:
02:98:5c:dc:3a:e2:1a:6b:f5:1c:46:1e:d8:f8:e9:
1a:51:53:5e:57:fb:3f:84:f2:f4:a8:a3:67:61:70:
d4:a7:0f:57:f6:7e:31:0a:4d:95:7f:d5:0a:e9:ce:
c7:00:86:3e:02:80:fa:d3:4f:8e:3d:b6:8f:19:8d:
d1:51:fa:7c:94:b7:57:0c:c7:7e:47:2d:b9:b4:2e:
b4:81:90:87:45:29:4f:14:30:16:94:3a:7f:e9:bb:
b1:65:31:d5:2c:cd:5e:f1:6c:04:50:04:be:61:57:
7b:08:13:6e:35:70:b7:5c:3d:b7:4f:c2:a3:29:55:
57:91:04:be:17:94:f2:f0:26:52:69:91:9f:d7:87:
21:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:E3:5D:88:D9:C6:CB:45:72:78:24:A1:C8:00:D7:B3:53:DD:97:16
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/XeNdiNnGy0VyeCShyADXs1PdlxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.23.110.0/24
109.205.211.0/24
109.205.214.0/24
Signature Algorithm: sha256WithRSAEncryption
11:fa:ac:1b:16:d1:e2:95:50:9b:93:05:87:16:fb:45:1c:f2:
0a:99:32:d0:46:b9:ad:a5:28:86:a4:d0:1a:10:a1:16:44:10:
98:b9:16:1d:e7:23:65:47:7d:f1:d9:17:a5:53:49:aa:40:15:
5f:c3:48:ba:28:e0:5d:90:7e:17:ef:5b:7d:5b:af:e4:5d:84:
62:0f:94:4f:c6:15:45:3b:0e:11:e3:9b:c8:af:ec:bd:49:23:
5c:45:cd:ba:f8:46:ce:be:a7:63:b7:72:74:fd:60:52:3c:08:
02:4d:8c:3f:3e:d4:02:a3:f3:00:36:96:d1:29:9e:cd:3f:ff:
d4:40:50:85:6e:65:0a:04:31:0c:ee:8a:32:9f:b2:08:01:4f:
d6:ac:09:a7:18:59:ac:49:af:a7:29:7a:5f:b3:5f:2f:2d:36:
b8:3f:f8:51:87:4b:a4:f7:bc:28:e8:f2:6e:17:f2:f4:b2:95:
e0:70:a5:e9:24:fd:69:1f:84:c2:7e:12:03:2f:07:e2:dc:48:
03:68:13:a3:d4:d4:e9:98:dd:7d:b6:cf:29:d9:55:40:49:4d:
a6:ff:3e:13:95:90:34:df:c7:81:87:ce:86:24:5d:c3:98:9b:
27:99:ca:73:c8:13:75:4e:1b:91:66:c2:8e:d9:be:56:05:a4:
43:88:87:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org