Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fzilO51Ms7hyKq7fzz6GZ2yjcsM.roa
File: fzilO51Ms7hyKq7fzz6GZ2yjcsM.roa (raw, json)
Hash identifier: qjJaxjgex4IsooEBOzl5psKOdOZGPgZRIZz7Yba/Qsg=
Subject key identifier: 7F:38:A5:3B:9D:4C:B3:B8:72:2A:AE:DF:CF:3E:86:67:6C:A3:72:C3
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 0185D3A2280222331131E15032333AF95C20
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fzilO51Ms7hyKq7fzz6GZ2yjcsM.roa
Signing time: Sat 21 Jan 2023 09:21:37 +0000
ROA not before: Sat 21 Jan 2023 09:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200615
IP address blocks: 46.243.76.0/22 maxlen: 22
193.42.60.0/22 maxlen: 22
2a09:e683:1::/48 maxlen: 48
2a09:e685::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:a2:28:02:22:33:11:31:e1:50:32:33:3a:f9:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Jan 21 09:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f38a53b9d4cb3b8722aaedfcf3e86676ca372c3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:43:5f:ae:cc:40:8b:0d:cd:10:09:52:03:e2:
14:d7:6c:30:bd:f0:d4:0f:75:ff:c3:ba:76:97:fb:
b3:7c:c3:75:d9:45:44:30:f7:7f:b3:7c:4f:52:79:
a2:d3:82:d5:81:3d:ca:66:71:5f:c8:4d:f7:bf:09:
04:36:1d:ae:0e:f3:03:0a:f1:ed:f1:3d:2b:ec:10:
aa:85:80:b2:56:29:7f:b7:39:bc:51:ad:fd:a7:c8:
c6:aa:30:c0:1a:7b:36:a0:9b:5c:00:51:01:22:be:
0e:13:ba:47:fc:b9:5b:07:ac:99:7c:1d:66:d7:67:
dd:3d:c9:04:f1:44:50:4a:be:66:81:1d:6a:34:09:
c8:17:95:bd:8f:26:d1:6e:af:97:e2:2f:68:c1:ec:
82:d7:26:b8:9c:2e:7a:e0:06:9d:6c:8d:77:11:25:
16:a0:0f:4f:47:a1:2e:80:a4:85:17:b2:5e:6b:79:
05:4a:90:cd:c9:2d:01:4d:68:50:dc:4c:e6:d2:59:
28:46:9c:17:74:95:0b:67:ec:e1:d3:81:e2:92:36:
3b:5a:1b:e9:3b:90:51:f9:75:e3:41:96:6a:d6:96:
db:1e:af:91:53:1d:67:6e:c4:53:fe:34:37:2f:09:
50:61:61:bf:3d:6b:63:44:b0:37:62:2a:ee:25:93:
42:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:38:A5:3B:9D:4C:B3:B8:72:2A:AE:DF:CF:3E:86:67:6C:A3:72:C3
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/fzilO51Ms7hyKq7fzz6GZ2yjcsM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.243.76.0/22
193.42.60.0/22
IPv6:
2a09:e683:1::/48
2a09:e685::/48
Signature Algorithm: sha256WithRSAEncryption
3e:cd:7b:d0:8a:36:09:c7:d9:86:a6:94:4b:d6:ef:11:fe:7c:
ac:41:79:b6:de:03:99:10:5e:d9:b6:8a:b5:6a:25:30:b0:24:
15:12:3d:40:e8:be:15:1a:22:2d:90:63:e9:27:86:9f:67:aa:
5b:a7:7f:4a:d5:dd:9c:35:03:95:14:0d:c1:5f:b0:5c:e8:e4:
26:25:b2:c4:b9:92:cc:b7:c1:7c:06:a0:57:d1:d8:32:47:0e:
de:22:9b:c7:4f:5a:7a:af:52:dc:57:a1:91:cb:6b:90:39:6f:
d3:87:bb:ad:7e:df:b3:cb:07:95:26:06:d9:e5:81:4b:d6:fb:
9e:d3:3e:c2:a5:05:4f:c7:d3:f3:ea:ac:1d:18:58:a9:49:3f:
27:a3:a4:a4:c3:0f:93:82:60:6a:5c:60:f2:4d:84:c6:9f:c7:
36:81:37:81:a4:ff:5e:bb:3c:b8:98:04:3d:30:98:2b:19:0d:
5d:0d:45:57:c7:85:70:cf:84:a4:ab:31:d7:0a:d2:7a:21:09:
ab:19:a8:0a:39:b8:68:f7:5c:20:1b:e1:d6:37:04:1a:e5:37:
88:dc:b2:9e:b2:e0:e7:4b:04:92:e5:e7:a1:27:be:d3:10:f3:
81:74:2b:de:27:ef:c6:54:8d:93:09:9b:38:86:51:c5:22:ba:
6f:61:ab:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:30 2023 by rpki-client on console-fra.rpki-client.org