Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/_Uqf1EZtR3nFRMrlaXx7fnB35LI.roa
File: _Uqf1EZtR3nFRMrlaXx7fnB35LI.roa (raw, json)
Hash identifier: YLKzdAZPhk/cYwXdk7BGZhXtK021nAKopWKaYJ8iwjk=
Subject key identifier: FD:4A:9F:D4:46:6D:47:79:C5:44:CA:E5:69:7C:7B:7E:70:77:E4:B2
Certificate issuer: /CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Certificate serial: 01876A923FF142ED1F3FDBDFEBD623B5D216
Authority key identifier: 1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/_Uqf1EZtR3nFRMrlaXx7fnB35LI.roa
Signing time: Mon 10 Apr 2023 09:49:42 +0000
ROA not before: Mon 10 Apr 2023 09:49:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206673
IP address blocks: 185.185.148.0/22 maxlen: 24
185.174.128.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:6a:92:3f:f1:42:ed:1f:3f:db:df:eb:d6:23:b5:d2:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a421ace46c5dd58a29d46cd91fb28fc39c56fee
Validity
Not Before: Apr 10 09:49:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fd4a9fd4466d4779c544cae5697c7b7e7077e4b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:77:f3:39:a2:c8:cd:f9:31:64:df:cb:8d:93:
3c:16:90:73:0d:e1:50:36:c5:c4:b3:bc:d5:b7:9a:
05:ab:cc:78:59:43:78:55:2b:f9:28:2b:d8:7d:b2:
fd:13:5d:85:13:99:87:17:8d:be:62:2d:c9:5d:db:
94:98:be:e3:ed:10:ac:04:03:06:42:60:32:54:42:
af:28:ca:52:af:2a:68:a9:47:7c:ab:3f:8d:b7:71:
3a:3b:fa:ec:67:25:51:d2:34:c6:c0:06:17:13:2e:
d0:6c:75:4a:91:0e:70:48:30:f0:cd:f2:0e:52:d9:
30:42:e7:c4:c0:c7:30:0d:00:c3:b4:94:dc:3e:67:
07:63:17:43:fb:76:26:5b:b8:28:5d:2e:9e:74:1a:
cc:72:61:e9:31:5f:6b:f3:b9:5a:54:81:c4:52:a0:
59:69:34:52:59:63:f1:87:dd:4d:80:7e:90:8c:05:
f1:5e:55:7e:6e:00:0a:07:13:e5:b1:41:8d:22:7e:
47:74:42:0a:01:7f:36:17:61:af:78:99:90:a9:ec:
04:ed:27:c5:9e:53:93:88:ea:b9:f7:c9:94:de:ae:
53:eb:49:b5:b5:7a:91:ba:49:ce:c8:0b:1e:bc:47:
a9:69:8c:88:0d:f7:10:e0:0a:18:db:59:a2:7c:03:
97:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:4A:9F:D4:46:6D:47:79:C5:44:CA:E5:69:7C:7B:7E:70:77:E4:B2
X509v3 Authority Key Identifier:
keyid:1A:42:1A:CE:46:C5:DD:58:A2:9D:46:CD:91:FB:28:FC:39:C5:6F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GkIazkbF3ViinUbNkfso_DnFb-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/_Uqf1EZtR3nFRMrlaXx7fnB35LI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9c48a0-d3cd-44b3-9ae6-7dffce1d6e2d/1/GkIazkbF3ViinUbNkfso_DnFb-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.174.128.0/22
185.185.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:28:c9:bd:cd:d1:e2:be:68:09:47:9a:6e:3d:3c:8e:f3:cf:
ab:68:4c:d7:69:b6:6d:47:ad:65:7e:42:1e:77:33:94:ca:54:
47:31:e8:80:e0:6e:d6:85:6d:f2:90:8e:1d:32:a7:54:f0:cd:
6a:2d:5b:e7:9a:6c:e6:08:13:af:d6:44:51:71:90:10:56:40:
20:a5:74:70:36:7b:9c:15:38:9d:1b:42:58:e1:2d:78:33:12:
58:99:2f:9e:97:ad:1d:73:62:bd:a3:e7:82:c5:1e:3e:2a:c4:
41:21:03:9b:10:2d:d2:41:96:60:fc:d4:84:f5:4f:ca:b5:57:
89:b7:84:22:ac:df:69:f7:4c:98:60:71:9f:37:dd:5d:99:1d:
86:85:b7:c6:a0:1f:3c:b9:2f:60:68:75:9e:c9:84:54:05:69:
1f:93:db:b1:f3:64:2c:7f:e1:f4:11:7a:ce:82:f3:2e:60:95:
f7:93:82:0f:ea:ea:32:7b:49:08:2c:2a:5f:e0:d1:56:5f:27:
cf:38:2e:60:81:bf:47:2c:1e:53:52:97:90:ef:e6:48:68:41:
b6:98:d2:97:79:a5:69:2e:84:ca:29:79:65:50:e9:a4:7c:3c:
c9:72:e3:07:4e:20:e2:da:8f:6d:37:c9:9d:f4:bf:8b:a3:03:
d5:ec:54:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:30:56 2024 by rpki-client on console-fra.rpki-client.org