Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/4x7YFaZVEDf0wf53QbDl54xnrR0.roa
File: 4x7YFaZVEDf0wf53QbDl54xnrR0.roa (raw, json)
Hash identifier: hqVoror00ebP8MatRKPNAFA4zYGLaaHdWLGzc2Ribv0=
Subject key identifier: E3:1E:D8:15:A6:55:10:37:F4:C1:FE:77:41:B0:E5:E7:8C:67:AD:1D
Certificate issuer: /CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Certificate serial: 01856B00A3D288C7C59E22102C70CB04A56D
Authority key identifier: 1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/4x7YFaZVEDf0wf53QbDl54xnrR0.roa
Signing time: Sun 01 Jan 2023 01:44:42 +0000
ROA not before: Sun 01 Jan 2023 01:44:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49100
IP address blocks: 185.153.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:00:a3:d2:88:c7:c5:9e:22:10:2c:70:cb:04:a5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f896cd3d8d1a0699da521055dfb58dc06dddf35
Validity
Not Before: Jan 1 01:44:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e31ed815a6551037f4c1fe7741b0e5e78c67ad1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:83:5d:81:5b:6d:83:9c:d8:07:84:a8:11:f8:
54:b4:b2:f5:59:60:2d:a2:57:bb:47:31:62:f6:5b:
9c:75:71:fd:f3:8e:7a:ef:5a:c9:b5:88:21:82:c8:
a1:82:f4:0a:40:55:b7:55:f8:02:37:00:87:7f:e6:
60:d9:69:6b:15:c7:fd:31:b9:c1:e8:e0:51:1e:f3:
55:15:d9:58:df:ce:20:d2:74:b9:f9:dc:fb:36:ff:
e6:b6:1f:96:9b:0b:e1:15:a8:27:0a:2a:fc:e7:d2:
a2:8a:df:c6:72:e6:b3:d5:a6:1e:2c:7f:85:ce:68:
6b:e7:50:44:e9:64:86:0a:9d:7a:6c:8f:34:3e:26:
23:0f:41:ca:be:25:6a:47:4e:43:32:d1:a4:d2:42:
d5:a0:a2:c4:b8:92:d9:6e:2b:24:70:16:9b:55:8c:
25:4e:18:2d:3a:cb:8e:7c:67:d5:7c:ec:be:3e:f5:
c8:69:3d:97:79:61:25:7b:48:96:86:aa:22:a6:69:
a6:96:85:83:18:84:d0:9c:24:ca:de:34:42:d3:49:
0e:94:ef:e2:22:54:2d:b5:1d:88:63:fa:7b:b3:70:
c1:a7:6d:9b:9e:ca:5a:08:31:53:e2:e7:24:a9:78:
7e:d8:e0:4d:36:c8:15:b5:6c:27:c6:96:63:45:81:
b7:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:1E:D8:15:A6:55:10:37:F4:C1:FE:77:41:B0:E5:E7:8C:67:AD:1D
X509v3 Authority Key Identifier:
keyid:1F:89:6C:D3:D8:D1:A0:69:9D:A5:21:05:5D:FB:58:DC:06:DD:DF:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H4ls09jRoGmdpSEFXftY3Abd3zU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/4x7YFaZVEDf0wf53QbDl54xnrR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/fab49a-91f4-460c-827b-c3327822a138/1/H4ls09jRoGmdpSEFXftY3Abd3zU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.153.208.0/22
Signature Algorithm: sha256WithRSAEncryption
0a:ed:a2:85:76:44:d6:0f:bd:70:f3:cb:55:3a:fc:d0:6d:9a:
5c:44:65:c4:37:2c:58:bf:c5:ee:97:43:2a:ee:d9:aa:0b:64:
6f:6a:cc:f1:cc:65:61:53:5f:3b:09:64:e8:e7:f8:bd:3d:76:
58:cc:cb:82:e4:4b:2c:e4:65:28:8b:6f:c2:a4:c8:49:32:5b:
37:1a:be:b6:e4:f7:5c:7a:13:65:c4:66:9f:43:e1:df:6b:9a:
53:37:70:2e:cb:4d:4c:b0:00:63:02:aa:94:d1:3b:c7:bc:b5:
8c:b2:f8:4d:30:15:dd:e4:bc:be:b3:bc:6e:43:d9:10:1d:04:
35:3d:d1:50:45:38:68:9f:4a:6e:28:eb:bd:e5:cb:02:6d:84:
6f:79:0c:d8:b5:98:1a:5b:04:bd:81:c0:9b:ab:0c:7d:0e:c0:
ae:c8:bc:23:da:f6:5c:42:1b:95:0d:0b:81:b8:a6:53:c5:db:
b5:f9:5a:9f:83:47:39:f1:08:1e:65:fc:f2:d2:22:06:09:ff:
dc:87:9c:1e:b5:71:9d:bd:58:73:68:de:38:9f:12:a9:9a:9d:
73:d7:4d:82:a1:3e:4d:10:a6:92:b2:4f:c9:a7:28:e4:4f:a4:
e3:32:13:a6:58:07:f2:ba:e4:66:06:71:8d:92:f5:52:ef:75:
4d:00:8a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:00 2024 by rpki-client on console-ams.rpki-client.org