Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-hdeXO2u3w6yNDPjtrLuOPl7aH8.roa
File: 1-hdeXO2u3w6yNDPjtrLuOPl7aH8.roa (raw, json)
Hash identifier: rxCFHRI0TEmIITdRUyIWmlWQqv9e0N/sAsnaCjLiyos=
Subject key identifier: FA:17:5E:5C:ED:AE:DF:0E:B2:34:33:E3:B6:B2:EE:38:F9:7B:68:7F
Certificate issuer: /CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Certificate serial: 018570F0A467DB2ADCCA37617CC97EF1BA30
Authority key identifier: 82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-hdeXO2u3w6yNDPjtrLuOPl7aH8.roa
Signing time: Mon 02 Jan 2023 05:24:57 +0000
ROA not before: Mon 02 Jan 2023 05:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 46261
IP address blocks: 91.201.140.0/23 maxlen: 23
91.201.142.0/23 maxlen: 23
139.28.136.0/24 maxlen: 24
5.182.101.0/24 maxlen: 24
195.206.111.0/24 maxlen: 24
195.206.110.0/24 maxlen: 24
92.119.181.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:f0:a4:67:db:2a:dc:ca:37:61:7c:c9:7e:f1:ba:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=821a3f21fb0c294d6d4a529b2f1dbd4bd1119bd7
Validity
Not Before: Jan 2 05:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa175e5cedaedf0eb23433e3b6b2ee38f97b687f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e5:a4:f4:8a:ea:3d:50:0b:33:76:16:13:4f:
fd:2a:2d:ed:c6:7c:84:f6:10:af:95:4d:02:c4:4f:
78:1e:74:3a:20:38:b8:53:12:3d:ae:ad:48:2b:a6:
43:df:0d:5d:4b:4c:b7:b0:ff:3a:8a:7a:99:2f:b9:
c0:6d:18:be:ba:b0:91:71:9c:c3:34:c5:cf:f4:8b:
5b:30:18:2f:02:a5:ca:5e:d1:57:6e:39:03:ab:16:
06:fe:8b:73:85:6e:14:29:22:93:6c:b3:79:f7:60:
aa:4d:75:11:38:7d:b5:d7:c1:4e:86:71:ff:28:08:
f9:81:bb:98:45:03:8d:a3:70:20:b2:55:57:97:33:
51:4f:6a:17:0c:b4:fa:3d:e7:35:de:81:f3:26:eb:
63:42:a2:08:a5:85:75:d2:8d:2e:38:0c:ff:c3:56:
48:88:a1:eb:f7:3e:11:6f:8d:1b:f6:97:13:f5:4c:
59:54:68:68:ce:18:59:33:82:6d:21:09:25:08:d9:
fc:71:3b:bf:46:67:ed:2c:a9:82:bb:36:32:86:06:
36:16:49:75:15:64:15:d6:de:bb:3e:14:52:28:3e:
a8:ac:35:07:e0:da:df:92:a4:c4:0d:1e:67:5e:b3:
c8:ca:7e:0e:ec:31:3a:02:63:87:70:d9:9b:dd:15:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:5E:5C:ED:AE:DF:0E:B2:34:33:E3:B6:B2:EE:38:F9:7B:68:7F
X509v3 Authority Key Identifier:
keyid:82:1A:3F:21:FB:0C:29:4D:6D:4A:52:9B:2F:1D:BD:4B:D1:11:9B:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gho_IfsMKU1tSlKbLx29S9ERm9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/1-hdeXO2u3w6yNDPjtrLuOPl7aH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/edc855-f2bc-4e9c-8c0c-b6f2ac86ef27/1/gho_IfsMKU1tSlKbLx29S9ERm9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.182.101.0/24
91.201.140.0/22
92.119.181.0/24
139.28.136.0/24
195.206.110.0/23
Signature Algorithm: sha256WithRSAEncryption
34:0c:26:1e:27:2e:71:2f:ca:e8:57:02:23:72:45:f0:e4:57:
ee:bf:5e:cc:50:cf:f4:71:ea:54:7b:ac:35:63:2a:7b:39:ef:
7e:e0:f7:2c:de:c9:a4:2c:f1:e9:78:f2:93:0a:c1:93:3f:dc:
c9:6a:8c:de:69:b6:7c:53:b2:93:ac:8e:87:84:45:6a:70:ae:
32:17:1d:56:07:80:3a:22:e2:92:e2:36:e0:f0:63:bd:04:b3:
70:f5:d3:c5:94:29:4a:5e:b4:23:e0:65:51:d7:4e:98:b2:43:
59:ea:67:ed:d9:2d:4e:cd:35:ef:91:55:fb:e8:50:ae:b1:60:
4d:0a:9c:2e:ce:c1:55:d8:81:fe:74:55:c3:4c:79:cd:86:d0:
71:2f:db:02:ea:9f:06:85:19:88:8d:48:70:9f:b3:c7:f9:f0:
7a:3c:2d:a4:12:69:61:ad:5d:11:50:ea:f0:03:0f:9f:12:a8:
71:b3:95:a1:88:1f:47:36:91:24:51:e4:12:c9:c7:bc:57:d7:
e3:67:da:96:06:21:5c:da:7a:a2:f1:b7:bd:e8:a1:ce:bb:50:
08:b8:1b:8e:23:58:06:0d:a7:51:22:b1:29:c5:27:1e:b1:36:
6f:51:ab:c4:f3:c7:1c:a5:14:8f:65:26:d2:0f:d3:08:fa:b9:
02:95:8d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:06 2023 by rpki-client on console-ams.rpki-client.org