Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/4-uUswkERT2t9rMq5Lr4Ad8UnTk.roa
File: 4-uUswkERT2t9rMq5Lr4Ad8UnTk.roa (raw, json)
Hash identifier: hX6VzeYkATbVB1uZpRk8mlU9W/Yiu13QOlWBpIJIvxg=
Subject key identifier: E3:EB:94:B3:09:04:45:3D:AD:F6:B3:2A:E4:BA:F8:01:DF:14:9D:39
Certificate issuer: /CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Certificate serial: 0185718C149684469D156D358FFCD62966C5
Authority key identifier: C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/4-uUswkERT2t9rMq5Lr4Ad8UnTk.roa
Signing time: Mon 02 Jan 2023 08:14:43 +0000
ROA not before: Mon 02 Jan 2023 08:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202391
IP address blocks: 89.47.200.0/22 maxlen: 24
89.42.196.0/22 maxlen: 24
89.42.136.0/22 maxlen: 24
92.114.51.0/24 maxlen: 24
92.114.50.0/24 maxlen: 24
46.34.160.0/22 maxlen: 24
89.47.196.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:8c:14:96:84:46:9d:15:6d:35:8f:fc:d6:29:66:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6e1c8c65c86e8d26ddbeb68658a39a7a8e27866
Validity
Not Before: Jan 2 08:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e3eb94b30904453dadf6b32ae4baf801df149d39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7b:c0:7d:9f:49:06:04:5e:61:79:79:9b:a2:
1f:90:be:56:a2:c3:d6:3c:cc:d0:11:a0:a9:87:5c:
b3:84:fa:05:ae:7e:3a:1e:3d:64:67:12:91:00:1d:
03:b8:b4:f2:c0:7e:34:fe:be:b9:df:b2:b9:ab:8b:
30:66:66:6b:08:0e:00:0f:52:ea:9f:6b:8f:87:bf:
e5:7d:11:7c:25:58:77:8c:b0:ba:74:b1:a0:53:e4:
c5:ab:b0:70:ec:16:eb:63:06:de:56:0e:f2:f3:a1:
32:2d:2e:04:d5:68:a8:c7:49:25:0f:93:64:77:67:
9a:7a:dc:44:84:67:97:89:a5:8d:63:13:20:46:98:
44:79:15:8b:d6:70:b7:05:f4:5f:24:82:aa:b8:75:
40:62:89:f3:96:00:a1:bb:bb:b1:72:9e:78:a3:4d:
b3:19:9a:91:29:8f:57:b5:c2:b3:5a:b1:9e:b6:87:
87:55:f9:6d:53:28:bd:af:29:3c:4f:fe:f9:9a:dc:
95:f7:87:17:12:35:8e:bb:a3:54:e6:ab:fa:1d:80:
72:3a:53:b7:3b:49:3b:fc:51:7c:bb:29:10:d4:43:
d8:95:be:3a:e9:0d:6f:16:85:0d:28:6c:c3:79:31:
be:2f:d5:7c:0c:57:6b:36:4a:03:d2:20:38:7e:da:
11:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:EB:94:B3:09:04:45:3D:AD:F6:B3:2A:E4:BA:F8:01:DF:14:9D:39
X509v3 Authority Key Identifier:
keyid:C6:E1:C8:C6:5C:86:E8:D2:6D:DB:EB:68:65:8A:39:A7:A8:E2:78:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xuHIxlyG6NJt2-toZYo5p6jieGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/4-uUswkERT2t9rMq5Lr4Ad8UnTk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/a453fe-a664-47a2-8b8a-ce5e01e71c91/1/xuHIxlyG6NJt2-toZYo5p6jieGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.34.160.0/22
89.42.136.0/22
89.42.196.0/22
89.47.196.0-89.47.203.255
92.114.50.0/23
Signature Algorithm: sha256WithRSAEncryption
53:30:56:c8:09:3b:ea:b8:32:a9:81:17:34:b2:09:22:ac:2b:
76:d0:5f:ba:ec:25:ed:e3:bb:3f:e4:ce:01:21:5e:3a:27:ce:
a7:78:a4:5d:58:1d:70:86:23:23:37:b1:93:28:bd:ed:58:22:
39:ef:8e:cf:46:e6:19:69:30:70:f3:ae:84:25:f2:ab:03:a2:
ca:04:c1:72:91:f4:91:9e:6d:ce:14:54:30:ee:d2:4b:59:03:
6a:ae:d7:6d:61:1b:c2:18:75:41:fa:ec:ba:f0:d4:fb:10:33:
6d:ff:8c:90:9e:8e:90:00:44:f4:71:ae:56:4d:97:82:1f:0f:
2d:ba:25:81:7b:ed:26:6b:5e:75:13:ef:24:63:20:9c:3d:39:
c0:a9:75:0b:e0:a3:17:b9:d2:5d:06:2c:3e:2e:26:d5:df:4d:
c5:97:dc:91:64:4c:6d:ee:a1:d1:d4:6f:50:3e:3b:9b:bb:88:
48:61:40:bb:23:ad:6b:8c:c9:f1:ef:cd:12:1c:1d:6c:8f:03:
6c:7e:da:6a:a2:c3:0c:88:50:c8:d9:04:a8:0d:b4:23:a3:b6:
03:ec:7d:91:02:d9:8d:09:85:87:53:62:07:42:dc:ab:f8:70:
6e:b2:0d:bd:85:e8:07:19:39:9b:f4:86:32:2d:59:21:45:53:
41:98:f8:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:08 2023 by rpki-client on console-fra.rpki-client.org