Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_pzenlIlGj4Ti6XGu1VAXZLR0jc.roa
File: _pzenlIlGj4Ti6XGu1VAXZLR0jc.roa (raw, json)
Hash identifier: GCuyAtcHDo2nXwfp1+X780O1LHDId/7N6WA66UKG0gA=
Subject key identifier: FE:9C:DE:9E:52:25:1A:3E:13:8B:A5:C6:BB:55:40:5D:92:D1:D2:37
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01861733B4D988152E8FAD80388629A9D09F
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_pzenlIlGj4Ti6XGu1VAXZLR0jc.roa
Signing time: Fri 03 Feb 2023 12:15:09 +0000
ROA not before: Fri 03 Feb 2023 12:15:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211193
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:33:b4:d9:88:15:2e:8f:ad:80:38:86:29:a9:d0:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 3 12:15:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9cde9e52251a3e138ba5c6bb55405d92d1d237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:03:9f:e1:37:94:a7:77:01:b6:9f:15:12:b7:
82:73:f8:06:8b:ea:79:eb:32:cb:e4:2f:6e:0b:81:
48:cb:09:cb:6b:51:3e:91:80:98:33:79:93:a6:88:
dc:e8:06:d3:ab:41:4b:c2:1f:55:9a:cd:48:63:3a:
97:1a:8a:2d:e0:14:17:fd:48:ae:6c:46:06:7b:09:
6d:95:0b:f0:53:7b:23:3f:d6:71:a3:9c:08:aa:1c:
c1:21:f5:8f:57:ec:03:05:86:0f:60:c7:a7:00:fd:
b4:83:47:ec:fb:38:96:93:be:b4:b3:55:ea:d6:de:
91:63:02:04:06:75:8f:34:48:a9:cc:85:ac:68:83:
d6:10:c4:07:cc:96:21:56:ef:c1:f5:c0:55:29:e2:
34:98:6e:00:40:54:76:b3:ea:62:f7:37:b4:43:4a:
96:b7:9d:f9:53:ca:15:53:44:f2:2d:32:e1:b4:b3:
8b:ff:16:36:99:c1:65:c4:1f:55:e7:a4:37:d0:50:
19:d0:d3:8a:d0:24:97:7e:3e:13:ac:d2:27:b1:f2:
2e:7b:01:e6:a5:6c:15:47:c8:df:9e:8e:37:8c:a9:
ca:af:ff:b9:03:7d:89:ad:44:1c:6d:3e:df:f9:dd:
5e:44:4a:de:fb:e7:61:3e:c1:b8:19:f3:84:8d:e5:
8a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:9C:DE:9E:52:25:1A:3E:13:8B:A5:C6:BB:55:40:5D:92:D1:D2:37
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/_pzenlIlGj4Ti6XGu1VAXZLR0jc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.3.0/24
46.23.96.0/24
46.23.98.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:c7:6c:1d:c1:8a:2a:6b:31:d5:84:ac:4d:56:d2:58:d5:fa:
9c:ee:9b:e8:30:4e:1a:60:bc:7c:a4:f0:97:1a:e3:68:af:c8:
8e:a2:27:d8:1a:ff:2a:cd:2a:85:41:b0:0c:19:2d:45:34:1b:
95:30:fe:66:7a:8d:ca:85:4f:28:be:b0:57:82:77:74:fe:2e:
3f:f6:51:c4:d3:81:84:20:23:d7:64:54:14:9e:dd:e7:aa:a9:
91:09:96:6d:4b:5e:83:f1:37:8e:00:66:85:96:a3:19:29:f1:
47:56:e9:4f:ce:cd:cc:9e:9a:77:5c:86:07:ed:0e:7d:b1:11:
59:5e:0a:f8:f1:61:c9:2d:ce:06:39:ac:e6:c7:eb:ee:ac:9a:
a6:2b:2e:be:5c:16:11:de:07:ba:40:e2:a0:f5:ee:b2:60:39:
16:50:95:53:c4:10:f1:ee:71:61:54:da:ff:b1:0f:8e:fe:20:
60:4e:75:2a:a4:62:1c:7a:38:46:39:7b:0c:cf:22:57:53:55:
64:5c:16:a7:e4:1a:75:f2:37:10:22:9d:d2:19:4f:99:4a:ff:
b1:47:64:07:aa:23:18:a9:a2:7f:0a:8a:ae:8e:d9:6f:5a:b0:
93:05:1d:de:c0:9e:56:a9:a2:35:83:d6:ae:22:c7:a3:dc:05:
3b:b3:54:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:50 2023 by rpki-client on console-ams.rpki-client.org