Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1kQ9-7W4BBO-94oRQQuNEo7jsk.roa
File: e1kQ9-7W4BBO-94oRQQuNEo7jsk.roa (raw, json)
Hash identifier: OregUhEzD+kDGvvQ+ChmfKHwtggfLuBVSZfHKYayDlw=
Subject key identifier: 7B:59:10:F7:EE:D6:E0:10:4E:FB:DE:28:45:04:2E:34:4A:3B:8E:C9
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0188298B9CCB706F16201C086C1EB9E53453
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1kQ9-7W4BBO-94oRQQuNEo7jsk.roa
Signing time: Wed 17 May 2023 11:49:55 +0000
ROA not before: Wed 17 May 2023 11:49:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202492
IP address blocks: 164.215.100.0/24 maxlen: 24
46.23.104.0/22 maxlen: 22
85.158.148.0/22 maxlen: 22
37.128.200.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:29:8b:9c:cb:70:6f:16:20:1c:08:6c:1e:b9:e5:34:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: May 17 11:49:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b5910f7eed6e0104efbde2845042e344a3b8ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f1:35:cf:43:b0:d0:7b:9b:4d:f8:31:a6:f2:
f9:8a:1c:80:98:b4:a9:1b:69:58:1d:11:67:c4:5a:
e1:35:ba:fb:7f:d2:8b:e7:23:0d:b5:d0:6e:71:14:
76:c9:ad:d0:0c:28:96:01:b1:d1:99:1a:41:f7:be:
b2:f0:e2:29:92:51:50:27:68:d3:07:77:26:5a:0c:
e6:20:a7:af:80:98:c0:68:6b:00:50:27:37:0c:73:
fc:46:f9:77:47:39:f5:ff:72:07:fc:a2:d5:c1:bb:
f6:4d:96:c3:f2:f8:4f:84:97:cb:46:cc:b7:3a:9a:
8e:3f:69:40:38:cb:ed:43:e6:c7:d6:64:19:85:25:
8f:49:a6:26:e7:b4:b5:41:61:37:9c:78:48:31:e0:
3e:fd:ac:e6:99:01:90:09:c1:f0:25:b7:f7:50:50:
d5:f4:ba:07:b8:c9:1d:9d:f8:57:10:97:d0:45:9f:
24:5e:d4:02:61:49:a9:54:dc:fa:f9:3d:c7:c4:8b:
2b:39:35:23:6e:0e:16:fa:49:c0:3a:cf:8a:7b:d6:
13:dc:8e:14:94:9e:76:65:d2:14:f0:27:18:49:ed:
5b:4d:3c:ac:00:6a:07:0a:3e:11:8c:d9:37:3c:b0:
78:40:53:c9:b8:ee:d6:fe:5e:d8:75:31:44:28:75:
9d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:59:10:F7:EE:D6:E0:10:4E:FB:DE:28:45:04:2E:34:4A:3B:8E:C9
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/e1kQ9-7W4BBO-94oRQQuNEo7jsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.200.0/22
46.23.104.0/22
85.158.148.0/22
164.215.100.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:b7:4e:55:35:ce:af:c5:37:78:36:e3:88:73:d8:1a:08:ce:
e9:83:29:2d:82:47:5d:fa:59:29:25:2e:e8:0f:bd:81:4a:3a:
cb:eb:61:fd:34:e7:67:05:8d:74:a4:45:8c:b2:be:8e:13:9f:
b4:83:76:32:68:d2:e7:d4:2d:21:9f:a5:48:37:c7:5f:82:e5:
28:0b:15:d2:5e:39:89:b9:aa:2a:bd:f6:c2:13:5f:ea:55:b6:
f7:3e:8f:d7:c1:e3:ac:8e:69:e4:0f:60:1d:ba:c7:21:c7:f0:
27:2c:56:eb:19:52:b0:33:c6:b9:f3:99:3a:b1:1f:7e:20:85:
2f:a9:29:90:fa:94:49:bd:5c:ac:1f:f0:5c:51:b1:47:ff:57:
56:dc:54:c0:02:4b:c4:d7:31:6b:49:3d:a3:dc:8c:31:d6:14:
f0:3d:41:5e:86:bf:65:dd:29:72:45:1a:32:42:42:50:74:66:
09:1f:e1:79:a9:fd:ab:de:82:6f:f9:92:9d:3a:cb:9e:93:0a:
79:bc:5f:36:ca:f4:45:3d:21:cc:21:17:b4:66:5c:ce:00:65:
4e:a4:b8:70:52:60:b5:2a:ed:56:0d:f8:e9:97:65:6a:56:01:
66:96:46:32:97:4c:ad:d4:ea:cb:82:d2:6b:71:37:f2:8a:eb:
82:97:cc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org