Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r10xM9JfdanXeM8ijeKmjhVYTbs.roa
File: r10xM9JfdanXeM8ijeKmjhVYTbs.roa (raw, json)
Hash identifier: fwTpUZJXa3pQAuPwZJviGkDX2GmGkGGJH6geL0eBP3c=
Subject key identifier: AF:5D:31:33:D2:5F:75:A9:D7:78:CF:22:8D:E2:A6:8E:15:58:4D:BB
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0186DAE65F3E6646684955257684B070D47B
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r10xM9JfdanXeM8ijeKmjhVYTbs.roa
Signing time: Mon 13 Mar 2023 12:16:16 +0000
ROA not before: Mon 13 Mar 2023 12:16:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61302
IP address blocks: 46.23.96.0/24 maxlen: 24
46.23.98.0/24 maxlen: 24
46.23.100.0/22 maxlen: 22
46.23.110.0/24 maxlen: 24
5.178.2.0/24 maxlen: 24
5.178.3.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:e6:5f:3e:66:46:68:49:55:25:76:84:b0:70:d4:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Mar 13 12:16:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af5d3133d25f75a9d778cf228de2a68e15584dbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:dd:5b:8d:e9:c1:6a:63:74:df:cd:60:b0:
95:a3:ae:24:30:8a:51:12:96:66:f2:6f:04:c4:fd:
93:3c:7b:a9:74:a8:28:7c:e4:0b:a2:67:9f:31:af:
0f:f0:45:c5:ac:dd:2b:ed:2f:27:1a:14:a7:dd:b8:
0e:44:0a:01:cf:c9:1f:bb:3d:aa:20:ee:3a:a1:46:
99:13:2c:bf:4c:b3:e8:45:6e:b0:39:b7:b8:63:43:
6a:69:0e:c3:70:df:ac:52:35:04:17:9f:3d:29:80:
b6:24:13:16:c4:43:ce:f1:14:6a:0f:86:da:ae:a0:
a4:f8:f9:da:45:f6:48:13:a2:30:95:f4:a5:49:e5:
ee:b5:3a:54:7a:02:87:da:e1:76:9f:d5:65:12:64:
98:5e:76:c4:ec:ae:00:4d:99:96:31:2e:08:3c:35:
c3:8c:73:e6:45:67:94:1f:14:cc:68:78:b3:35:2f:
5f:0b:96:54:d5:8a:45:74:33:7f:e0:af:fd:bf:54:
c6:03:d0:08:79:b3:11:01:a7:cb:59:a7:6a:06:e4:
ac:83:fb:ed:c1:34:7b:a1:53:f2:0d:a6:90:9c:74:
fb:e0:82:0c:58:26:a2:3a:79:e2:6e:c4:70:8e:45:
3c:f7:cf:3d:4f:2b:be:48:f3:ee:30:08:34:2a:d7:
84:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5D:31:33:D2:5F:75:A9:D7:78:CF:22:8D:E2:A6:8E:15:58:4D:BB
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/r10xM9JfdanXeM8ijeKmjhVYTbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.2.0/23
46.23.96.0/24
46.23.98.0/24
46.23.100.0/22
46.23.110.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:5f:98:2c:44:36:51:39:03:1c:d1:e2:32:d1:bf:34:ec:14:
68:d7:84:7c:1e:97:53:80:a9:e8:5f:4e:41:4c:14:08:28:8e:
c6:23:44:fe:a3:12:52:9a:f6:37:b9:c5:04:a2:1f:9d:28:06:
3c:a7:0a:f3:70:c6:5b:63:84:54:66:02:42:52:cd:e6:39:0b:
7e:30:95:df:2a:48:3a:82:0b:1e:56:26:a6:db:0a:d3:2d:65:
ad:20:f5:df:f6:c9:61:04:9e:b8:a3:c0:8b:63:13:cb:78:27:
3a:34:55:3b:b2:27:50:ad:45:38:ce:70:7b:ae:31:f1:f2:78:
2f:4c:4c:6f:cb:a8:91:5e:23:9e:85:bc:d6:b9:52:6d:bf:91:
c7:62:a9:e1:c3:52:1a:f7:a3:19:9e:ce:92:06:2c:23:55:2a:
e7:4e:eb:3b:6d:7e:45:99:a2:ab:a6:3c:83:66:51:ae:fd:e5:
5b:54:39:f6:48:2b:78:7d:da:5d:29:02:5c:3e:1e:93:11:62:
9d:93:62:ee:0b:0f:e8:f4:84:98:5c:06:ba:ac:77:2d:1f:cb:
ca:54:87:35:99:dc:0e:50:0c:f0:52:5c:04:27:aa:46:0c:c8:
f4:5d:bc:f5:43:0a:d3:df:67:39:80:39:73:fa:24:e1:0c:2f:
5e:91:ed:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org