Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/FlQN5Qk4lmfAm76Lq9MeNAPWEho.roa
File: FlQN5Qk4lmfAm76Lq9MeNAPWEho.roa (raw, json)
Hash identifier: seLcQuU7QxqXwqvcNlnDWlEmUw/+SWwnXxhNvlj+Tqk=
Subject key identifier: 16:54:0D:E5:09:38:96:67:C0:9B:BE:8B:AB:D3:1E:34:03:D6:12:1A
Certificate issuer: /CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Certificate serial: 018A28D199AA4BDAC0BDE86DF8E4DDC368C8
Authority key identifier: 9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/FlQN5Qk4lmfAm76Lq9MeNAPWEho.roa
Signing time: Thu 24 Aug 2023 18:32:19 +0000
ROA not before: Thu 24 Aug 2023 18:32:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25198
IP address blocks: 85.204.107.0/24 maxlen: 24
185.104.63.0/24 maxlen: 24
195.74.93.0/24 maxlen: 24
46.229.243.0/24 maxlen: 24
46.229.253.0/24 maxlen: 24
83.229.61.0/24 maxlen: 24
2a12:3200:1000::/36 maxlen: 36
2a12:3200::/36 maxlen: 36
2a12:3200:2000::/36 maxlen: 36
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:28:d1:99:aa:4b:da:c0:bd:e8:6d:f8:e4:dd:c3:68:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb50e5386c809a0fae6530aa5e8d9825251ded0
Validity
Not Before: Aug 24 18:32:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16540de509389667c09bbe8babd31e3403d6121a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:49:f1:c3:2d:a0:ee:e8:3d:77:c2:8f:dd:c3:
57:0c:f2:af:44:4a:53:c6:d5:f1:97:ce:68:10:17:
0d:37:a2:21:f2:df:2e:6b:5d:83:2d:f6:5a:de:36:
42:b9:ef:bc:b3:83:5d:65:b4:08:49:54:fb:b7:62:
b9:50:1e:97:1c:49:53:e8:8f:b4:fa:83:b2:37:01:
54:06:2a:cd:b4:88:c2:a3:ad:50:1f:85:0f:13:63:
7a:1e:78:bb:bc:a0:c7:97:c7:3c:15:bb:6d:66:b5:
ab:b4:f9:f4:b0:bc:7e:15:d9:20:84:22:35:a0:19:
ff:d6:83:10:a6:4d:d6:89:7d:06:c5:df:9d:73:25:
49:5d:9b:19:12:3d:44:1e:be:94:e1:30:ae:fc:df:
e2:da:c1:3c:a5:2d:72:8a:e5:cb:bf:d9:a5:f5:0e:
50:5c:9e:a4:bf:17:c6:63:be:76:3d:ed:fe:38:11:
ac:77:54:9f:29:db:5a:ee:72:7a:d8:20:2e:03:03:
7e:3c:a0:11:c5:30:07:55:f7:0c:1f:8d:e1:da:85:
6a:60:9d:e3:8e:99:cf:94:b6:00:62:e7:f6:64:da:
17:c8:f9:ea:ef:32:11:81:09:cd:36:9d:c0:24:1f:
3e:4f:a5:d2:a5:cb:f2:93:f0:7d:1c:0c:9a:59:f8:
42:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:54:0D:E5:09:38:96:67:C0:9B:BE:8B:AB:D3:1E:34:03:D6:12:1A
X509v3 Authority Key Identifier:
keyid:9E:B5:0E:53:86:C8:09:A0:FA:E6:53:0A:A5:E8:D9:82:52:51:DE:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrUOU4bICaD65lMKpejZglJR3tA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/FlQN5Qk4lmfAm76Lq9MeNAPWEho.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/b54641-a95a-4add-a45e-1cada6e8b1a9/1/nrUOU4bICaD65lMKpejZglJR3tA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.229.243.0/24
46.229.253.0/24
83.229.61.0/24
85.204.107.0/24
185.104.63.0/24
195.74.93.0/24
IPv6:
2a12:3200::-2a12:3200:2fff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
1c:5a:a7:83:54:49:da:4d:f4:01:1d:16:68:76:90:26:31:58:
56:a1:71:21:d3:40:e3:9b:c4:42:08:24:27:94:fc:e7:11:a2:
5e:df:7b:35:88:bd:cb:8e:b0:1f:43:51:40:18:31:01:12:16:
81:a0:a3:b8:11:51:5b:43:f0:27:2c:01:50:b9:3e:86:03:dd:
78:94:e5:71:2a:0f:b1:40:51:8f:01:05:44:a2:0e:95:f6:53:
96:6a:7f:49:7c:69:df:37:7a:5c:e5:5a:89:0a:0f:a2:4e:59:
e9:43:94:3d:4c:8e:5d:0b:12:cb:00:15:17:3a:30:d6:b2:35:
5e:8b:e5:9b:de:d2:7f:12:5c:ec:62:79:f4:d5:d5:19:dc:8c:
14:18:af:b8:87:94:29:72:9c:f6:63:5b:45:fc:3f:ee:10:a0:
5d:30:c5:6d:f4:b9:66:ed:d9:95:f7:7a:1f:47:2e:c2:b2:cb:
c3:8b:92:f4:5f:09:f3:61:28:dc:dd:2d:26:ef:65:2a:cd:3d:
8f:1a:3a:a8:59:0c:32:44:0d:ed:5e:7f:bb:75:22:78:94:4d:
ec:67:2f:22:5b:3f:62:7e:4a:33:bb:96:47:74:e4:3c:e3:b4:
3a:c0:37:8a:95:d4:40:8e:75:cb:d5:16:c0:bd:d7:0f:f8:5e:
b5:19:7a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 26 04:50:03 2023 by rpki-client on console-fra.rpki-client.org