Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/SlUf2LmOL54trDKaRtvKzTN62EQ.roa
File: SlUf2LmOL54trDKaRtvKzTN62EQ.roa (raw, json)
Hash identifier: x5B6qvxtFufEP1SBgJn04ky1ctE4V9KlEHreGDyetWk=
Subject key identifier: 4A:55:1F:D8:B9:8E:2F:9E:2D:AC:32:9A:46:DB:CA:CD:33:7A:D8:44
Certificate issuer: /CN=0f47ec73bceecedd541efb73525d61232fa80219
Certificate serial: 01856F94D7ACD2CB2DB2B44EDB65A728723F
Authority key identifier: 0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/SlUf2LmOL54trDKaRtvKzTN62EQ.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6799
IP address blocks: 185.44.144.0/22 maxlen: 22
178.146.0.0/16 maxlen: 16
178.146.0.0/15 maxlen: 15
178.147.0.0/16 maxlen: 16
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d7:ac:d2:cb:2d:b2:b4:4e:db:65:a7:28:72:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f47ec73bceecedd541efb73525d61232fa80219
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4a551fd8b98e2f9e2dac329a46dbcacd337ad844
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:62:79:9a:5f:00:06:28:43:7c:dd:e2:34:89:
ab:5a:20:cc:3a:85:36:6d:df:ee:e3:cb:39:43:7e:
7a:29:1a:e7:a8:a9:6c:d7:ba:b0:36:86:ce:9f:ff:
ea:7a:d3:c3:31:1a:48:27:ef:9b:07:e3:6e:c6:89:
45:3c:10:5f:30:7a:db:95:00:0c:de:0c:82:d8:bd:
ee:77:24:4d:a6:74:1e:7b:4a:b3:d7:4d:17:22:f8:
1b:d8:6d:20:4e:e9:8f:dd:ea:a8:32:48:65:76:e4:
93:f1:1f:8b:b2:f2:76:34:8f:24:62:d7:23:85:25:
02:f5:54:ff:c5:46:3f:af:e0:06:fe:9b:a0:e9:85:
1c:f0:b8:7b:c3:4f:c9:3d:7f:18:29:bf:79:02:f3:
4f:24:a6:a8:7b:8d:50:12:f4:4f:c9:2a:3c:7f:cb:
ad:09:96:23:22:c2:ac:6b:5b:85:5c:66:79:33:c0:
72:a0:7b:ae:57:cb:a3:24:2d:f3:52:b1:45:de:2d:
53:59:ca:8f:dc:de:a1:9b:79:7e:96:3d:ea:6d:6b:
5e:48:44:68:e8:ee:ca:b0:25:ed:27:35:87:09:0c:
38:e4:8e:c1:19:6b:6c:1d:c5:25:ac:3c:87:5d:94:
c9:a9:62:04:e4:8d:32:d2:e6:a1:a0:4d:ac:5d:76:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:55:1F:D8:B9:8E:2F:9E:2D:AC:32:9A:46:DB:CA:CD:33:7A:D8:44
X509v3 Authority Key Identifier:
keyid:0F:47:EC:73:BC:EE:CE:DD:54:1E:FB:73:52:5D:61:23:2F:A8:02:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D0fsc7zuzt1UHvtzUl1hIy-oAhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/SlUf2LmOL54trDKaRtvKzTN62EQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/094180-0171-4252-afea-923546ed3e8a/1/D0fsc7zuzt1UHvtzUl1hIy-oAhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.146.0.0/15
185.44.144.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:41:9d:45:e1:66:29:c0:31:07:c3:fa:81:46:37:1c:10:86:
15:26:bc:29:42:72:e1:d1:57:8b:82:bb:78:89:96:47:60:50:
9a:35:d3:1f:84:51:5b:25:d3:d3:05:f1:ac:d8:2c:44:ea:89:
6a:a4:4d:ca:00:f2:5e:f7:c9:00:ce:38:10:84:e4:0d:be:de:
5c:d3:49:17:fc:41:b3:9d:11:8c:b3:ed:03:b4:5c:5f:92:b3:
66:f2:b6:af:e1:c4:c7:2a:2f:94:9d:4d:24:26:bb:c9:36:79:
eb:91:ad:3d:52:86:66:24:01:b3:e5:40:28:48:2f:12:b7:67:
db:c6:b6:53:02:f9:81:ee:41:bd:64:17:84:f4:fb:7d:0d:01:
9c:ff:dd:13:83:e4:bf:a2:6b:d6:78:9f:52:21:1f:6e:63:f5:
00:f6:8f:1a:91:16:2f:0f:23:96:d3:8f:83:72:5d:0a:3b:9f:
10:3f:ab:0e:75:1f:85:ce:40:32:c4:06:83:25:32:8a:4d:2a:
e5:48:40:f9:95:1a:99:0c:ff:82:41:a0:b2:94:a2:70:7e:35:
5f:2e:cb:7f:58:d2:09:00:61:f7:92:ed:52:60:dd:88:1d:5f:
6a:8a:80:47:3a:51:0a:22:82:b5:7c:ef:e2:3b:b7:83:34:27:
82:3e:40:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 13:26:40 2023 by rpki-client on console-ams.rpki-client.org