Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/tT19-bbcQZQKPpUex5RwtIG3_zg.roa
File: tT19-bbcQZQKPpUex5RwtIG3_zg.roa (raw, json)
Hash identifier: LakdBVAT6ZVEmrT8BJiTSVkPQoZb5RpuO13/5Nv2n04=
Subject key identifier: B5:3D:7D:F9:B6:DC:41:94:0A:3E:95:1E:C7:94:70:B4:81:B7:FF:38
Certificate issuer: /CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Certificate serial: 01857082CAB9DF89C0F7213F4EEC125A615B
Authority key identifier: FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/tT19-bbcQZQKPpUex5RwtIG3_zg.roa
Signing time: Mon 02 Jan 2023 03:24:57 +0000
ROA not before: Mon 02 Jan 2023 03:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39256
IP address blocks: 46.254.80.0/21 maxlen: 21
188.93.24.0/21 maxlen: 21
92.43.0.0/21 maxlen: 21
185.17.88.0/22 maxlen: 22
2a03:7dc0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:82:ca:b9:df:89:c0:f7:21:3f:4e:ec:12:5a:61:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa4eea86f9f3e6e7881b4b8da19a1d2725e8710
Validity
Not Before: Jan 2 03:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b53d7df9b6dc41940a3e951ec79470b481b7ff38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:03:19:07:94:a4:39:66:43:d7:af:3e:57:64:
57:af:8b:64:bf:10:93:0b:70:6c:6d:4e:73:a1:4a:
7c:19:93:57:9e:c7:52:0a:c3:8c:91:04:2f:ab:44:
a7:ac:6a:62:ad:8c:f0:27:c3:86:a0:ad:31:bf:2d:
bf:d1:4e:67:14:de:95:a1:32:ce:9b:7f:09:07:b0:
08:8a:be:ba:86:72:b1:74:13:2e:76:36:11:80:54:
75:12:7e:99:61:c1:29:44:b6:27:c7:49:0d:d2:dc:
29:4d:15:cf:ee:4e:f4:02:02:f9:f2:81:b5:f9:03:
e7:e2:33:d1:39:f3:ab:f4:49:e1:a5:10:36:3a:ed:
a8:02:93:26:78:3f:89:7c:98:1b:ce:75:27:96:e1:
bd:72:99:f4:49:9d:43:67:95:e6:87:00:28:07:92:
fc:78:5d:b8:d8:94:c6:64:6b:e4:d3:48:cb:18:3a:
ac:6d:47:7d:9e:fb:da:0d:d9:88:9a:39:d3:7e:d4:
cf:56:e6:28:89:5e:09:ca:2e:ad:29:4a:2d:62:d9:
62:bf:c7:ff:8f:ff:40:19:32:ea:a4:d8:84:89:31:
83:86:2b:31:77:d0:ea:8f:ac:24:42:82:c1:23:39:
3d:76:7a:c6:f0:3b:b1:bb:2c:5e:97:4a:f2:ec:50:
d2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3D:7D:F9:B6:DC:41:94:0A:3E:95:1E:C7:94:70:B4:81:B7:FF:38
X509v3 Authority Key Identifier:
keyid:FA:A4:EE:A8:6F:9F:3E:6E:78:81:B4:B8:DA:19:A1:D2:72:5E:87:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qTuqG-fPm54gbS42hmh0nJehxA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/tT19-bbcQZQKPpUex5RwtIG3_zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/c2c288-6f56-4c4d-9db5-96e99f794278/1/1-qTuqG-fPm54gbS42hmh0nJehxA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.80.0/21
92.43.0.0/21
185.17.88.0/22
188.93.24.0/21
IPv6:
2a03:7dc0::/32
Signature Algorithm: sha256WithRSAEncryption
6b:ff:cc:54:31:23:d6:aa:d5:07:8e:01:30:86:a5:2c:70:b9:
16:ad:20:1a:22:d1:17:2d:91:dc:43:07:53:3e:52:9b:f4:d7:
fa:71:4d:ee:bb:35:3f:2e:41:51:e1:8f:21:55:88:50:5c:1d:
b6:b6:b9:3c:47:72:63:18:0f:ec:42:19:6f:a1:77:33:61:0c:
c6:d1:a1:44:ec:c2:74:05:a8:af:1f:0c:70:f7:f5:10:74:ed:
1d:64:33:7d:97:86:dc:db:2c:d4:5a:70:e1:fa:67:df:0b:06:
39:c4:9f:92:c2:4c:01:33:e5:80:cc:6e:c3:6d:94:84:e4:35:
fe:98:db:26:26:05:4f:80:b2:fc:99:47:c4:17:21:c9:13:2b:
6f:c6:01:07:7d:60:92:c0:a7:d3:74:4c:43:f3:a6:2f:33:35:
9b:93:43:3d:63:d1:91:b8:b0:3c:d6:4f:ea:37:ea:33:50:ca:
2a:07:52:ef:03:86:12:fb:08:69:2a:d0:cd:7a:b9:93:53:c9:
7b:ef:4a:55:10:e6:42:96:ed:6e:08:70:c9:76:c1:cf:cc:dc:
dc:93:c2:40:6a:86:6c:0b:cc:e5:b6:83:db:99:2f:4c:fa:98:
46:cf:8b:f0:44:9d:2a:af:4a:26:51:56:59:1d:4b:6d:d6:1e:
ed:e0:db:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:10:46 2024 by rpki-client on console-ams.rpki-client.org