Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xxTn6qvva2zqSVp2UYLZ0giCyzM.roa
File: xxTn6qvva2zqSVp2UYLZ0giCyzM.roa (raw, json)
Hash identifier: OIXIs0NBu2S036thXHN5ayS0O4Xy4cO8GCDGhyQ9Xtw=
Subject key identifier: C7:14:E7:EA:AB:EF:6B:6C:EA:49:5A:76:51:82:D9:D2:08:82:CB:33
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 0185E3FA0C54B0E20ED01FEC4F2EE752B1EA
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xxTn6qvva2zqSVp2UYLZ0giCyzM.roa
Signing time: Tue 24 Jan 2023 13:31:33 +0000
ROA not before: Tue 24 Jan 2023 13:31:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15723
IP address blocks: 46.23.98.0/24 maxlen: 24
46.23.96.0/24 maxlen: 24
164.215.100.0/24 maxlen: 24
46.23.99.0/24 maxlen: 24
85.158.146.0/24 maxlen: 24
109.205.212.0/24 maxlen: 24
37.128.203.0/24 maxlen: 24
37.128.202.0/24 maxlen: 24
37.128.201.0/24 maxlen: 24
185.81.219.0/24 maxlen: 24
185.81.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e3:fa:0c:54:b0:e2:0e:d0:1f:ec:4f:2e:e7:52:b1:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Jan 24 13:31:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c714e7eaabef6b6cea495a765182d9d20882cb33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f3:cb:8c:be:a0:3f:48:0d:1e:42:bf:99:28:
c1:78:b5:52:6d:06:dd:4e:18:45:85:c8:80:55:45:
2a:7e:f1:55:ec:8a:95:63:a5:b3:4e:27:d1:0c:1d:
2a:42:04:c1:b0:02:ed:6c:bb:42:ff:d3:77:2b:a7:
13:58:57:c3:ff:1e:1f:5b:f5:af:45:ca:8c:d4:a3:
5a:59:e5:41:f1:15:b7:d1:df:a8:87:e6:7f:42:b9:
5f:13:22:ac:48:c5:ac:f7:ad:fd:08:5e:5f:5f:95:
be:80:f1:1e:49:56:68:08:38:9a:75:f6:d5:dc:6a:
dc:af:4c:5e:17:31:78:d5:37:ac:6e:c7:d8:b9:5b:
ea:c5:2f:1c:86:9c:68:79:ad:e7:c1:99:c4:26:d2:
c8:71:fb:ea:64:e3:2e:2a:4a:fd:69:c9:ae:37:b5:
91:8a:df:3c:d3:2e:17:01:c2:71:fe:b4:9f:a9:4f:
8d:65:a7:1c:29:9d:2d:e5:fc:12:38:62:6f:98:88:
b7:f0:41:b9:95:39:5b:bd:1b:96:29:18:0a:36:fe:
28:1b:15:50:f5:60:9c:de:7b:77:8a:18:58:7c:cf:
d1:4a:08:5a:95:cc:37:c2:b7:25:86:d5:92:7d:10:
b8:ac:de:20:72:4d:bc:3c:dd:41:ae:c1:f4:fc:d6:
d1:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:E7:EA:AB:EF:6B:6C:EA:49:5A:76:51:82:D9:D2:08:82:CB:33
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/xxTn6qvva2zqSVp2UYLZ0giCyzM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.128.201.0-37.128.203.255
46.23.96.0/24
46.23.98.0/23
85.158.146.0/24
109.205.212.0/24
164.215.100.0/24
185.81.216.0/24
185.81.219.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:ef:1c:2d:d5:f9:e7:ff:38:3b:87:33:49:a5:26:b3:31:e4:
14:b8:b2:86:2d:34:86:c5:01:92:0f:0c:50:e7:07:df:32:20:
ba:73:cb:79:9b:85:7f:32:70:8f:d8:a7:c4:d1:04:c2:bf:57:
b6:75:2a:9b:9a:fc:79:c7:d1:0f:c4:17:65:89:53:77:fb:a4:
88:c7:f4:e9:fa:9b:d7:08:a4:3c:1a:97:a1:c0:b0:b9:2c:0c:
fc:bd:03:0a:48:6f:61:55:07:0c:38:a3:d4:53:05:61:db:a7:
a1:d4:ed:71:8c:2c:58:c9:4a:1f:ea:76:3c:44:52:b6:6e:93:
8a:0d:42:25:e5:34:7e:00:54:84:3a:d3:5c:cd:72:d1:f8:ee:
9c:f4:71:20:b5:96:cf:48:f4:d1:02:92:86:3c:19:bd:a6:20:
14:65:fb:64:51:73:e8:f6:2f:88:a2:c3:9f:f3:f6:26:64:73:
dc:8b:38:5d:8b:f8:b2:98:b0:ce:10:05:3a:2a:7f:a4:72:bc:
23:2d:23:22:a5:78:2f:b7:59:cc:84:25:18:05:4e:10:19:f1:
8c:1a:54:57:a9:a8:2c:23:fb:40:ef:86:bd:a3:fe:1e:14:e0:
54:b2:ad:b5:81:0f:0e:91:61:18:4c:b2:ad:7a:3e:cc:a4:55:
e6:37:ad:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:01 2023 by rpki-client on console-fra.rpki-client.org