Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/RbEAXHoELCL2S6_myYeWkD4_Fms.roa
File: RbEAXHoELCL2S6_myYeWkD4_Fms.roa (raw, json)
Hash identifier: F+E2LKZd24CvQUn0AskTRUn4oma7wOcsuLm0/zzfemA=
Subject key identifier: 45:B1:00:5C:7A:04:2C:22:F6:4B:AF:E6:C9:87:96:90:3E:3F:16:6B
Certificate issuer: /CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Certificate serial: 018572CCA6E07021D0D114152D4C51024205
Authority key identifier: 1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/RbEAXHoELCL2S6_myYeWkD4_Fms.roa
Signing time: Mon 02 Jan 2023 14:04:52 +0000
ROA not before: Mon 02 Jan 2023 14:04:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61194
IP address blocks: 46.245.208.0/21 maxlen: 21
5.159.40.0/21 maxlen: 21
185.61.60.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a6:e0:70:21:d0:d1:14:15:2d:4c:51:02:42:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f504b1bb7168e680b19542f8f730386144c8a5f
Validity
Not Before: Jan 2 14:04:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45b1005c7a042c22f64bafe6c98796903e3f166b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e3:cc:f0:7d:35:58:83:27:cb:4b:05:5a:4a:
4d:ae:7f:e1:96:7f:24:1c:d5:44:80:95:76:f8:78:
86:57:90:59:41:d6:a3:ab:3e:ef:77:fd:26:fc:c1:
0b:b0:98:3b:bd:51:c3:67:fe:c6:7d:e7:6f:ba:2c:
0c:a0:a9:10:9f:6d:ee:de:fe:eb:4c:ee:7a:c8:21:
e0:5c:25:ab:29:9f:15:66:17:02:38:44:6b:06:97:
5a:42:fa:5b:a3:20:7e:16:2c:24:41:b5:fe:9b:26:
74:e7:1f:14:2a:0f:c8:a9:18:db:b2:12:0d:28:ba:
7c:3e:70:86:77:b4:9c:5a:a9:ab:e3:65:e2:e2:8e:
15:02:08:bb:5c:57:08:ee:62:38:96:17:75:90:ea:
6b:a4:11:01:9c:65:bf:fa:d5:37:49:26:41:40:a7:
73:f3:46:77:71:05:6b:1c:21:ef:ba:da:1d:16:7b:
c5:45:8d:4a:39:df:21:7f:da:21:88:c5:e8:55:fe:
4c:28:bf:88:f0:e4:33:8f:02:c3:92:a1:72:01:31:
af:86:bd:7f:58:fc:d0:ea:95:31:c4:4a:4f:cf:bf:
84:9f:e8:0c:bc:73:0f:7f:91:a7:95:8c:7d:c0:fc:
8e:47:e9:dd:9d:e4:76:1a:cc:66:c5:be:71:69:8c:
fa:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:B1:00:5C:7A:04:2C:22:F6:4B:AF:E6:C9:87:96:90:3E:3F:16:6B
X509v3 Authority Key Identifier:
keyid:1F:50:4B:1B:B7:16:8E:68:0B:19:54:2F:8F:73:03:86:14:4C:8A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H1BLG7cWjmgLGVQvj3MDhhRMil8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/RbEAXHoELCL2S6_myYeWkD4_Fms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/3c74a8-9f72-4c06-b516-35bb60ea07c1/1/H1BLG7cWjmgLGVQvj3MDhhRMil8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.159.40.0/21
46.245.208.0/21
185.61.60.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:de:be:78:c1:bf:26:96:e6:8d:84:6b:c6:a9:98:f4:28:91:
3b:e8:1c:f8:be:4b:56:ff:2d:5a:68:39:1a:f0:69:45:68:be:
bc:b8:4c:12:a4:db:32:bc:55:ce:b0:ee:93:5f:ea:c9:ed:8d:
3f:c6:a4:7f:ec:54:81:3e:05:a6:a0:67:e1:11:69:a6:25:ae:
c9:86:e6:7a:7e:c9:0b:d4:df:dc:e7:21:03:da:4d:fd:82:80:
0a:e5:09:6b:b3:a6:7d:95:d1:31:c6:83:5e:a6:59:77:b4:52:
86:1e:b2:0d:22:3e:d1:ae:30:c6:27:ba:a1:48:f2:52:d1:31:
59:f8:17:47:df:3c:3f:b6:6f:67:4a:e3:24:ab:a9:40:a9:a4:
9c:f1:44:65:00:94:41:f4:ce:c7:f6:10:43:f2:ad:af:27:f2:
58:33:95:dc:d8:a0:a3:80:54:48:41:9e:3a:68:f2:22:00:50:
97:07:5a:8c:5c:b3:d2:cd:a0:35:10:98:0d:d0:ee:9d:d5:72:
9d:eb:cb:00:66:19:3c:d0:2d:8d:c6:e2:4d:ce:f8:bc:df:7e:
73:8d:3e:0d:c4:f3:07:8e:a6:7d:28:2d:c1:9d:89:3a:5c:15:
72:af:80:b8:f6:81:83:c4:9c:19:42:a6:bb:d1:30:82:a7:61:
a9:5c:18:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:50:21 2024 by rpki-client on console-fra.rpki-client.org