Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ft_aPgkyapk8MVbEvISZ55I04F0.roa
File: Ft_aPgkyapk8MVbEvISZ55I04F0.roa (raw, json)
Hash identifier: TVqV9AcxbOZqjQF4wCFS755pWKVXq3QMMoreBlRKC5U=
Subject key identifier: 16:DF:DA:3E:09:32:6A:99:3C:31:56:C4:BC:84:99:E7:92:34:E0:5D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 01856F024B7E5B92D4D49E01638488CA157A
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ft_aPgkyapk8MVbEvISZ55I04F0.roa
Signing time: Sun 01 Jan 2023 20:24:59 +0000
ROA not before: Sun 01 Jan 2023 20:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199558
IP address blocks: 159.148.218.0/24 maxlen: 24
85.254.144.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
159.148.233.0/24 maxlen: 24
85.254.45.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
159.148.27.0/24 maxlen: 24
85.254.52.0/22 maxlen: 22
85.254.70.0/24 maxlen: 24
159.148.58.0/24 maxlen: 24
159.148.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:02:4b:7e:5b:92:d4:d4:9e:01:63:84:88:ca:15:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jan 1 20:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16dfda3e09326a993c3156c4bc8499e79234e05d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:b6:7f:ca:89:c8:dd:b9:aa:d9:f7:3c:e1:73:
f5:0b:80:6e:72:61:b6:d9:26:e8:52:7b:e4:13:ca:
f2:3d:34:31:62:56:26:fb:d5:3f:47:cc:83:ee:db:
7f:68:d4:f0:20:0a:ea:f5:0d:0e:9c:7a:1b:c9:3f:
52:41:d3:9e:7c:5e:41:47:73:5e:b4:e1:30:d1:74:
c7:4d:f6:06:4c:f7:5c:16:ad:55:98:91:2e:ec:44:
50:c5:5a:eb:c1:53:f1:20:6f:82:bb:db:74:02:88:
a0:68:b2:ad:2e:f4:a0:33:63:ea:d7:76:d4:ed:d6:
9e:d4:44:ab:73:15:75:4d:b8:10:2a:ce:18:c5:9f:
47:1c:e7:97:61:ce:3c:5d:58:43:29:2e:d3:23:45:
c5:14:89:5e:05:87:12:67:63:14:e8:94:93:7b:1c:
48:2c:a1:89:25:b6:26:1e:4a:de:63:45:a0:1d:b6:
54:59:53:9e:67:0c:52:cf:da:1e:7c:f1:40:80:bf:
93:1d:3e:d6:0d:65:e0:70:3e:a5:ce:a4:84:bc:3c:
95:c3:09:ba:51:97:15:2e:3e:b1:89:d9:b1:7a:86:
4c:7f:76:8f:59:72:35:63:b2:3a:8f:8c:ab:c9:4e:
18:df:23:5f:46:2d:85:d3:b0:8b:80:98:2b:27:6f:
dd:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DF:DA:3E:09:32:6A:99:3C:31:56:C4:BC:84:99:E7:92:34:E0:5D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/Ft_aPgkyapk8MVbEvISZ55I04F0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.254.41.0/24
85.254.45.0-85.254.46.255
85.254.52.0/22
85.254.70.0/24
85.254.144.0/24
159.148.27.0/24
159.148.58.0/24
159.148.89.0/24
159.148.218.0/24
159.148.233.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:55:a6:4d:0c:b9:bc:da:bc:6e:c4:80:83:8f:31:8c:d0:81:
ab:9f:c5:ab:72:7b:53:fc:fa:45:52:c8:62:67:49:7e:59:5c:
12:2e:aa:72:55:f9:0b:34:7a:a1:dd:9c:a1:54:47:2b:d6:e8:
20:a0:15:05:a0:95:1d:9e:a6:78:00:18:90:57:b0:d0:e1:57:
8b:4a:e3:bd:68:5e:20:97:3c:4f:86:a9:3d:37:ef:a1:91:53:
88:26:83:c6:75:06:68:59:0e:fc:89:0a:ac:f2:fe:46:ce:d9:
6c:90:cb:3b:1b:af:bc:ef:75:3e:2d:f4:16:6e:55:e6:4e:ac:
c3:b7:e2:0c:e1:5d:e1:bb:0e:00:ad:08:a0:73:6f:6a:06:d8:
14:e4:38:13:2c:31:3c:4c:92:ba:77:aa:ad:ab:5e:c6:1d:8e:
35:42:f9:4d:28:34:17:db:cc:c2:37:4a:51:ed:cb:74:86:89:
09:6c:fe:c9:8b:26:e3:25:01:a8:4b:41:cf:7c:cd:05:3a:25:
48:21:d5:a0:25:6c:f6:4a:33:20:95:97:6d:39:36:96:76:43:
75:0d:0d:5b:9b:5d:35:25:ed:9e:2a:04:fc:51:42:89:39:3d:
7f:3f:c1:1f:3d:b9:70:5f:e4:45:2c:bb:ca:5a:b3:39:c6:08:
01:eb:23:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Aug 7 12:45:40 2023 by rpki-client on console-fra.rpki-client.org