Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa
File: Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa (raw, json)
Hash identifier: vrkyBPYnVXr6rsFGh4r9frOanGaV1UMDRQy1W2mkdnc=
Subject key identifier: 15:BF:00:9F:1F:15:C1:B3:DB:72:BF:08:AB:E5:FD:6F:6A:E0:BD:72
Certificate issuer: /CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Certificate serial: 0186783AFDEAE66DD64476E2B7108DE59663
Authority key identifier: 5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa
Signing time: Wed 22 Feb 2023 08:26:17 +0000
ROA not before: Wed 22 Feb 2023 08:26:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 46.226.125.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:78:3a:fd:ea:e6:6d:d6:44:76:e2:b7:10:8d:e5:96:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5b0b3e4fbf236cf1651ba734da1b47f62f4aba44
Validity
Not Before: Feb 22 08:26:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15bf009f1f15c1b3db72bf08abe5fd6f6ae0bd72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:99:a4:4b:e6:54:81:20:b9:5f:22:69:e6:f1:
7e:00:29:92:ef:eb:57:8e:61:73:d1:f8:20:32:b8:
0b:a5:45:f0:f3:4c:fb:b9:0d:42:52:39:65:5b:eb:
0c:8b:35:62:aa:89:f0:f6:97:38:8f:2d:97:84:11:
54:86:95:9b:4f:a6:5f:ec:57:79:54:90:25:8a:c2:
b6:cc:ca:07:c8:27:52:74:b7:93:68:a5:2a:b3:9f:
d0:26:dd:99:66:99:fd:24:c8:1e:34:31:ab:00:43:
06:59:9f:b7:09:98:1e:5b:90:74:71:2e:47:7c:89:
b1:eb:98:fd:70:ec:b3:57:76:a7:26:29:0f:3f:98:
c9:fb:cf:dc:d5:92:c3:0f:e6:4d:ab:d5:e9:d3:72:
9d:1a:ed:64:02:6e:13:4f:c9:d0:66:73:dc:37:ec:
e6:c0:41:39:13:e6:cb:3a:be:e1:aa:23:b2:2b:05:
74:cf:40:2b:67:11:7e:25:85:25:96:ba:ad:74:96:
76:b5:1a:20:02:e3:80:0c:eb:c7:8a:fa:e0:6c:ff:
a0:c1:c6:9b:2e:97:4b:4a:5d:dd:2b:a5:65:11:3f:
3c:48:78:90:df:2b:38:50:f3:f0:3e:d5:aa:22:04:
ab:99:67:4b:f3:8b:c1:8b:ac:f1:2a:e2:87:3f:65:
60:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BF:00:9F:1F:15:C1:B3:DB:72:BF:08:AB:E5:FD:6F:6A:E0:BD:72
X509v3 Authority Key Identifier:
keyid:5B:0B:3E:4F:BF:23:6C:F1:65:1B:A7:34:DA:1B:47:F6:2F:4A:BA:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Wws-T78jbPFlG6c02htH9i9KukQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Fb8Anx8VwbPbcr8Iq-X9b2rgvXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/327687-a356-49e1-8f8e-e4f625842d21/1/Wws-T78jbPFlG6c02htH9i9KukQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.226.125.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0d:24:73:71:b3:f2:f2:a9:91:52:00:e8:ac:55:47:ce:1d:
ca:86:8d:fa:b0:4b:2a:dd:90:5a:bb:a2:8a:c6:65:9c:f2:78:
0d:ff:66:85:f4:e2:7b:91:e1:8f:db:92:3d:f2:28:df:49:ab:
7d:b3:96:5b:13:2b:f9:ef:6a:ac:b0:ed:bb:e9:c5:03:08:8a:
e1:61:65:af:a3:03:7a:8f:26:42:e4:82:cf:5d:ab:e4:04:00:
58:72:e0:9c:97:d0:65:80:81:ff:ac:0d:7f:05:d7:0b:8a:2f:
7d:e6:47:0f:85:3b:ef:3a:3d:6e:b2:72:4a:c9:1d:0e:c1:cf:
8c:73:99:87:3e:88:4c:d4:8c:f0:49:62:10:54:87:80:cd:5f:
65:ba:de:c3:a9:59:f5:c0:15:bd:84:16:21:1c:80:00:ab:17:
55:f0:27:c6:a1:29:14:4f:d0:59:f6:f9:6d:6a:a8:d7:7b:d6:
5b:12:02:7d:7c:83:c4:6e:67:4f:a7:63:63:c1:ed:3d:38:65:
75:bd:5e:c8:ef:08:a6:0e:c9:eb:c7:f4:6d:e7:95:a2:bc:48:
dc:ca:f8:cd:c1:91:1c:39:6d:19:b2:78:df:26:a6:d0:45:e6:
93:c4:66:4f:25:01:f2:1d:27:07:2d:e1:a4:7b:32:73:e5:8b:
c6:27:79:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:48 2023 by rpki-client on console-fra.rpki-client.org