Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/F2Me-N-f1uEmQP2UOeXuJbLK7Hc.roa
File: F2Me-N-f1uEmQP2UOeXuJbLK7Hc.roa (raw, json)
Hash identifier: 3VM/Fw71nPESzk1WtqkshU6gkbSILjAo9kSjk/wpUK8=
Subject key identifier: 17:63:1E:F8:DF:9F:D6:E1:26:40:FD:94:39:E5:EE:25:B2:CA:EC:77
Certificate issuer: /CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Certificate serial: 0185738FBB634F35D9058562E444DD76C8C2
Authority key identifier: 15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/F2Me-N-f1uEmQP2UOeXuJbLK7Hc.roa
Signing time: Mon 02 Jan 2023 17:37:57 +0000
ROA not before: Mon 02 Jan 2023 17:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203969
IP address blocks: 185.110.152.0/22 maxlen: 22
185.110.154.0/24 maxlen: 24
185.110.155.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:8f:bb:63:4f:35:d9:05:85:62:e4:44:dd:76:c8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158962bc5da2712f208fc8b15ebdc246af4cbecf
Validity
Not Before: Jan 2 17:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17631ef8df9fd6e12640fd9439e5ee25b2caec77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:64:f7:4c:dd:bf:c6:86:dc:ac:59:5b:09:1e:
c1:d6:4b:8b:bd:f1:08:bd:95:4d:8f:3c:79:e5:a2:
04:9c:5d:b2:a0:09:35:36:9e:d0:a4:25:7e:02:01:
dc:25:8d:0c:bd:f0:1a:95:95:89:2b:bf:37:fe:24:
1b:38:93:4e:f2:93:fb:45:cc:0e:9d:6e:1c:6e:89:
c0:ac:6a:1e:90:54:ed:0a:14:eb:e3:5f:dd:3d:02:
b9:d4:9d:b2:5a:9c:53:f0:a6:33:27:70:07:2f:89:
a8:5e:99:cf:fc:6e:b1:36:a4:66:5b:bb:12:5f:75:
e9:37:e5:ec:ae:a1:7e:9f:1a:6c:cf:1b:f5:6a:3a:
8a:ed:71:6d:76:d3:ec:10:51:1e:b5:a0:39:37:af:
ce:55:23:f1:a0:8e:1d:6a:da:48:de:3d:23:e3:a0:
3c:25:53:05:1c:07:e0:95:9b:64:c2:d2:73:55:44:
1d:1f:d4:2f:44:93:7f:26:7d:03:82:7b:89:d2:1b:
13:a6:13:d9:3d:e7:94:89:01:f3:15:dc:34:e8:1a:
f8:4d:62:8e:81:ba:57:48:82:d9:ac:08:d3:f7:45:
ef:a6:bd:87:e6:89:30:7d:a4:2e:65:73:62:67:80:
75:82:3c:e2:32:21:e5:78:2b:f5:ec:2b:9f:12:27:
aa:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:63:1E:F8:DF:9F:D6:E1:26:40:FD:94:39:E5:EE:25:B2:CA:EC:77
X509v3 Authority Key Identifier:
keyid:15:89:62:BC:5D:A2:71:2F:20:8F:C8:B1:5E:BD:C2:46:AF:4C:BE:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlivF2icS8gj8ixXr3CRq9Mvs8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/F2Me-N-f1uEmQP2UOeXuJbLK7Hc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/51d999-df6c-47e8-8c35-5a60131004e8/1/FYlivF2icS8gj8ixXr3CRq9Mvs8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.152.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:7a:28:0f:5b:a1:ac:b4:34:5d:35:41:20:1a:c0:d0:68:28:
ce:16:77:7b:11:6e:fc:66:50:f9:f0:75:35:cc:c8:a6:e6:07:
fc:9b:c3:e6:89:06:55:bc:2e:64:1e:44:30:27:0a:ef:90:aa:
1b:9b:c5:71:c7:61:0c:9d:63:c7:dc:b1:2d:bc:1a:be:f9:f6:
fd:16:65:25:c5:ce:1e:d6:56:d0:c6:35:8b:6d:0d:e8:f2:ea:
60:85:83:af:42:b9:67:8f:1b:db:0d:bf:d2:5c:44:c9:83:ca:
0d:72:a1:98:bc:37:58:3f:e1:b5:49:b7:92:5f:30:04:14:0e:
16:54:51:cc:cb:e8:d1:53:84:f2:7a:ad:13:e3:75:d7:e2:da:
bd:32:8b:ee:7c:b1:8b:cc:48:cd:57:ee:de:b5:e0:34:ff:c1:
f2:ef:bc:a1:92:13:7f:3d:8a:05:74:52:58:6a:de:81:c5:b0:
80:47:93:87:9e:5b:50:4d:e5:33:c6:11:49:28:46:31:89:51:
7a:59:d5:64:ca:e7:94:e2:12:36:d7:f5:ad:a0:a1:28:0f:e1:
ae:fb:56:5e:9b:23:58:0a:89:41:dd:87:03:1d:0c:05:b3:ab:
7e:ce:e2:f8:f4:ec:bb:0c:87:9b:43:48:71:b3:c9:12:ed:11:
3d:e1:ee:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:18:45 2024 by rpki-client on console-fra.rpki-client.org