Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/f6lYgs96CcWPwV9wO5IdxAHpk5k.roa
File: f6lYgs96CcWPwV9wO5IdxAHpk5k.roa (raw, json)
Hash identifier: 1EhmFvhxnQ6O2Dz9kq5ah9GmbedwcJbLJIQiADlYfV4=
Subject key identifier: 7F:A9:58:82:CF:7A:09:C5:8F:C1:5F:70:3B:92:1D:C4:01:E9:93:99
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01864EB418F15A99A16CC80F713041565777
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/f6lYgs96CcWPwV9wO5IdxAHpk5k.roa
Signing time: Tue 14 Feb 2023 06:54:31 +0000
ROA not before: Tue 14 Feb 2023 06:54:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 46.23.100.0/22 maxlen: 22
5.10.248.0/22 maxlen: 22
188.64.12.0/22 maxlen: 22
185.81.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:4e:b4:18:f1:5a:99:a1:6c:c8:0f:71:30:41:56:57:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 14 06:54:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa95882cf7a09c58fc15f703b921dc401e99399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:11:12:38:59:bb:2b:cc:de:3c:4d:0f:62:85:
13:22:87:83:d2:4c:95:d5:49:4e:25:97:c1:87:e1:
0b:4a:a5:9b:0d:35:dc:4b:95:dd:6a:7a:67:68:12:
92:e1:04:d6:c9:fb:4d:2c:2d:d9:0c:a9:1b:58:4e:
2d:df:d7:3e:2f:20:75:26:aa:c6:51:aa:09:8b:8f:
bd:e9:c2:15:e3:3a:f6:ea:63:7d:fe:79:d5:25:8c:
3b:b1:13:04:4c:08:22:68:17:b8:55:5d:d4:6f:1d:
7b:ba:9e:7d:39:f4:fe:d9:17:2c:cb:4d:09:08:89:
8c:ea:01:6f:4e:eb:66:6e:f8:1a:2f:df:fc:be:f9:
d5:fc:db:63:38:92:c4:98:4c:c5:85:71:7e:cc:14:
46:a7:66:5c:15:6a:1e:51:a1:80:80:04:61:f3:81:
98:d4:95:56:2f:ca:50:66:aa:7b:5d:d6:cb:03:40:
42:a6:a4:2c:a3:a4:9d:d7:79:2e:0c:5b:70:ed:3e:
60:e8:3c:1f:55:dc:a9:1e:b1:07:e5:1c:b4:5b:24:
bd:de:28:b0:5d:0d:27:f7:af:01:2b:b0:88:2b:d7:
28:6c:4b:4c:91:0c:b7:68:2b:cc:93:a3:e9:4f:fb:
4f:be:bb:df:7a:af:01:d9:d6:a3:1c:bf:ce:1a:d5:
31:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:58:82:CF:7A:09:C5:8F:C1:5F:70:3B:92:1D:C4:01:E9:93:99
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/f6lYgs96CcWPwV9wO5IdxAHpk5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.248.0/22
46.23.100.0/22
185.81.217.0/24
188.64.12.0/22
Signature Algorithm: sha256WithRSAEncryption
dd:66:26:dc:7e:7c:d9:af:e2:50:76:ef:2a:1c:e4:79:a4:d4:
1d:9d:5e:a6:64:67:d6:60:d9:d4:63:2b:32:7f:1a:1b:4f:8d:
ac:15:a4:05:1d:cf:2c:17:dc:f0:8b:01:83:ac:66:4b:5a:78:
65:8d:73:fa:d6:5c:2a:b5:c8:ac:69:c7:2c:8c:e9:18:90:13:
fb:6e:7e:24:6a:50:0f:90:7c:7e:6a:c7:63:63:aa:d7:5a:e5:
c2:7d:f0:be:be:2e:f0:5e:1e:41:a5:88:ff:8f:6b:2f:13:f8:
c9:83:c9:4d:a7:3f:15:d5:65:f3:a3:ac:41:5a:5f:ad:a1:dc:
9c:17:78:4d:53:9b:91:76:97:97:05:4a:5b:82:56:55:d6:d2:
73:6e:19:49:1f:72:11:d1:0f:10:9e:22:19:14:cd:47:07:67:
4b:31:16:a1:f2:41:37:59:3d:59:79:62:a2:f6:b0:5d:60:a8:
1a:fc:1a:a3:dc:52:41:4c:73:44:f1:bc:88:8b:19:53:ef:a6:
81:e7:c0:cb:5e:a8:46:88:ff:60:6f:a9:cb:a0:7c:5f:fb:fd:
bb:a9:60:e1:f6:2f:7c:a1:9a:5b:9d:17:2f:c9:7b:a5:64:f4:
2f:96:8a:b8:5e:b5:64:4a:c3:94:60:8c:cf:6b:11:58:5f:76:
4d:df:0d:48
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAYZOtBjxWpmhbMgPcTBBVld3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkMDZhNDJiYjI0NDZlNTFmMTkyZWEzNzViZGY3ZWVjNWE1
MWM3N2YwHhcNMjMwMjE0MDY1NDMxWhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZmE5NTg4MmNmN2EwOWM1OGZjMTVmNzAzYjkyMWRjNDAxZTk5Mzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxESOFm7K8zePE0PYoUTIoeD0kyV
1UlOJZfBh+ELSqWbDTXcS5XdanpnaBKS4QTWyftNLC3ZDKkbWE4t39c+LyB1JqrG
UaoJi4+96cIV4zr26mN9/nnVJYw7sRMETAgiaBe4VV3Ubx17up59OfT+2Rcsy00J
CImM6gFvTutmbvgaL9/8vvnV/NtjOJLEmEzFhXF+zBRGp2ZcFWoeUaGAgARh84GY
1JVWL8pQZqp7XdbLA0BCpqQso6Sd13kuDFtw7T5g6DwfVdypHrEH5Ry0WyS93iiw
XQ0n968BK7CIK9cobEtMkQy3aCvMk6PpT/tPvrvfeq8B2dajHL/OGtUxKQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFH+pWILPegnFj8FfcDuSHcQB6ZOZMB8GA1UdIwQY
MBaAFH0GpCuyRG5R8ZLqN1vffuxaUcd/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUt
MmNmODA2YjJkMGYyLzEvZjZsWWdzOTZDY1dQd1Y5d081SWR4QUhwazVrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy83ODAwMmEtNGZjMC00ZGJmLTg1ODUtMmNmODA2YjJkMGYy
LzEvZlFha0s3SkVibEh4a3VvM1c5OS03RnBSeDM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCBQr4AwQC
LhdkAwQAuVHZAwQCvEAMMA0GCSqGSIb3DQEBCwUAA4IBAQDdZibcfnzZr+JQdu8q
HOR5pNQdnV6mZGfWYNnUYysyfxobT42sFaQFHc8sF9zwiwGDrGZLWnhljXP61lwq
tcisaccsjOkYkBP7bn4kalAPkHx+asdjY6rXWuXCffC+vi7wXh5BpYj/j2svE/jJ
g8lNpz8V1WXzo6xBWl+todycF3hNU5uRdpeXBUpbglZV1tJzbhlJH3IR0Q8QniIZ
FM1HB2dLMRah8kE3WT1ZeWKi9rBdYKga/Bqj3FJBTHNE8byIixlT76aB58DLXqhG
iP9gb6nLoHxf+/27qWDh9i98oZpbnRcvyXulZPQvloq4XrVkSsOUYIzPaxFYX3ZN
3w1I
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:09:51 2023 by rpki-client on console-ams.rpki-client.org