Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/FvRJu5A9sjn17vbeqp2O4ptfxtg.roa
File: FvRJu5A9sjn17vbeqp2O4ptfxtg.roa (raw, json)
Hash identifier: fjI3oOUT/1rBnTNwTjqhU7h2xlo06zzaKnLwSXCsrhQ=
Subject key identifier: 16:F4:49:BB:90:3D:B2:39:F5:EE:F6:DE:AA:9D:8E:E2:9B:5F:C6:D8
Certificate issuer: /CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Certificate serial: 018735FF45141BFF86F330C7EA8FD859A2C1
Authority key identifier: 83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/FvRJu5A9sjn17vbeqp2O4ptfxtg.roa
Signing time: Fri 31 Mar 2023 04:48:54 +0000
ROA not before: Fri 31 Mar 2023 04:48:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44180
IP address blocks: 185.146.196.0/22 maxlen: 24
193.34.116.0/22 maxlen: 24
185.144.204.0/22 maxlen: 24
46.227.88.0/21 maxlen: 24
185.98.56.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:35:ff:45:14:1b:ff:86:f3:30:c7:ea:8f:d8:59:a2:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83ad289621833dae86fdda62e4b9b09e29e078a0
Validity
Not Before: Mar 31 04:48:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f449bb903db239f5eef6deaa9d8ee29b5fc6d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:17:43:84:ba:42:87:6a:6c:11:92:8e:a0:74:
99:a3:2f:68:4f:fc:0b:19:81:31:7b:24:89:d0:28:
83:87:ad:c8:bf:22:dd:90:97:8d:85:24:09:5b:8e:
75:0a:04:de:cf:58:3c:29:79:42:b2:7b:d7:6b:f4:
cb:65:9f:e3:7c:34:3b:92:47:8e:f9:a9:d4:5e:07:
ed:8d:c6:35:92:e4:e0:76:6c:ea:13:4b:66:9e:81:
33:41:5c:43:7e:5d:1d:8a:bc:b2:c8:82:e4:31:f8:
70:fe:70:35:ed:04:03:80:ef:2f:a1:68:3f:af:40:
89:b6:40:6c:91:26:d9:8b:f7:74:ba:f2:f2:fd:e5:
81:1c:f3:f4:f2:78:79:1b:39:15:69:84:20:21:95:
7d:5b:de:ef:63:ba:2d:9a:a2:d4:99:b9:4d:4a:3a:
a9:a7:7f:78:06:47:f3:92:4c:c3:62:3d:28:86:65:
1b:54:1b:a9:d6:f4:45:a4:63:a5:60:c9:49:0f:25:
15:70:d3:83:5b:f5:ed:82:03:f3:ce:04:e9:ac:26:
7e:6f:4f:b0:70:35:65:a7:7b:8f:bb:d7:be:60:8a:
ba:d1:3c:9c:c0:15:d1:ab:28:1e:bb:60:0b:94:7c:
83:a8:4d:ff:90:06:de:ca:0e:a7:d0:f9:88:60:52:
ec:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F4:49:BB:90:3D:B2:39:F5:EE:F6:DE:AA:9D:8E:E2:9B:5F:C6:D8
X509v3 Authority Key Identifier:
keyid:83:AD:28:96:21:83:3D:AE:86:FD:DA:62:E4:B9:B0:9E:29:E0:78:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g60oliGDPa6G_dpi5LmwningeKA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/FvRJu5A9sjn17vbeqp2O4ptfxtg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e1870f-9cb6-4339-aa38-0af4231da79a/1/g60oliGDPa6G_dpi5LmwningeKA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.227.88.0/21
185.98.56.0/22
185.144.204.0/22
185.146.196.0/22
193.34.116.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:d4:24:ec:64:1a:cf:3e:2a:f3:ba:78:80:21:f5:26:f5:21:
9b:a7:61:29:c1:cc:7f:37:3c:ff:bb:f7:31:fe:86:dc:2e:29:
f6:bd:61:fb:75:11:f7:85:fb:db:d2:cb:a5:9c:3b:ba:77:8c:
fe:f0:65:d2:9a:44:dd:c8:f6:b8:1e:90:a4:1c:f6:55:01:a8:
12:07:a4:97:80:27:da:86:ca:06:30:b9:78:4a:74:7f:3d:89:
f8:eb:c2:e4:a0:f6:be:16:df:ef:4c:7a:ca:12:66:a4:de:2a:
7d:d7:8e:b7:b4:d8:a6:0e:bc:60:42:25:85:ba:ba:49:35:c3:
76:11:2e:d9:d9:6d:ef:d6:3c:bf:77:12:1f:89:b5:70:80:f1:
cb:0b:21:87:d4:28:18:96:61:65:d9:8e:46:26:e0:19:39:15:
c3:32:83:d0:fc:e4:c1:d4:35:41:ba:39:0f:d3:71:6d:9f:4e:
54:a0:23:d4:92:a9:a6:8c:73:c9:69:0f:a0:d4:fb:98:98:1b:
a5:57:e3:1d:6c:d4:b3:fd:d1:fe:9b:a8:bf:bd:b3:79:ef:7f:
72:83:0b:d2:91:25:1a:75:40:b8:2d:3e:3d:02:54:8a:96:ee:
44:9c:e2:73:6d:83:d3:24:b3:cb:0a:2e:be:b9:1b:c4:dd:d8:
9b:df:d8:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 08:59:37 2024 by rpki-client on console-ams.rpki-client.org