Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/FnKNlagjzC8Qu5mwz5tHNyr0_yo.roa
File: FnKNlagjzC8Qu5mwz5tHNyr0_yo.roa (raw, json)
Hash identifier: oLm+p+5baJAK9jgQuN2jKs2bzNnyCYYunC6ScziWgQI=
Subject key identifier: 16:72:8D:95:A8:23:CC:2F:10:BB:99:B0:CF:9B:47:37:2A:F4:FF:2A
Certificate issuer: /CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Certificate serial: 0185712770C35F59E565736B04165953F5F0
Authority key identifier: 2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/FnKNlagjzC8Qu5mwz5tHNyr0_yo.roa
Signing time: Mon 02 Jan 2023 06:24:48 +0000
ROA not before: Mon 02 Jan 2023 06:24:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202113
IP address blocks: 185.52.244.0/22 maxlen: 22
185.52.244.0/24 maxlen: 24
185.52.247.0/24 maxlen: 24
2a04:c9c0::/29 maxlen: 29
2a04:c9c7::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:27:70:c3:5f:59:e5:65:73:6b:04:16:59:53:f5:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2ba7088e39e7ad8817b7d10ea2a5b8a098a47a0b
Validity
Not Before: Jan 2 06:24:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16728d95a823cc2f10bb99b0cf9b47372af4ff2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:34:07:51:6f:32:8d:22:6d:ce:eb:83:c1:0d:
ab:52:27:b6:c3:f4:ca:ae:ed:e0:9e:17:93:65:03:
ff:12:37:ff:8f:ae:a2:e3:ac:a9:2d:ac:b6:a4:8f:
dc:2a:3c:56:d7:9d:1b:9c:e3:e9:02:0a:ca:80:07:
97:2d:5d:cc:7f:46:77:01:e7:4f:d0:ff:b8:b1:08:
28:c6:ba:cb:f8:3f:0b:0a:51:83:e6:9d:fd:89:22:
f9:33:55:7c:e9:41:95:97:94:2a:3b:6e:7a:09:76:
ad:a3:4a:99:0d:0f:1b:13:8e:9a:e8:9c:5e:56:57:
5a:0e:47:31:0d:9c:3d:f0:ff:7b:1a:a6:91:5f:2b:
88:51:f7:e4:24:22:7f:96:50:fe:58:aa:2f:a5:c0:
ec:da:e1:51:33:7b:a7:e0:27:b6:d6:76:b6:a0:3a:
82:e3:05:15:19:00:23:5f:f2:0f:10:58:a4:01:7b:
4f:75:41:ff:a7:c0:55:f7:70:f0:81:b2:89:e2:c9:
73:15:18:bf:57:cd:02:16:f6:72:d0:12:7c:3a:df:
68:e7:f6:d7:d3:b7:71:6f:dd:48:32:38:13:12:93:
22:81:fb:f8:bb:71:16:7a:8e:67:5e:40:b1:0c:92:
0c:55:9d:a7:cb:a3:c8:fc:e3:84:6d:66:c4:50:51:
14:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:8D:95:A8:23:CC:2F:10:BB:99:B0:CF:9B:47:37:2A:F4:FF:2A
X509v3 Authority Key Identifier:
keyid:2B:A7:08:8E:39:E7:AD:88:17:B7:D1:0E:A2:A5:B8:A0:98:A4:7A:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/K6cIjjnnrYgXt9EOoqW4oJikegs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/FnKNlagjzC8Qu5mwz5tHNyr0_yo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/bf58c5-f3e2-41ac-a216-4a67e4d056ab/1/K6cIjjnnrYgXt9EOoqW4oJikegs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.244.0/22
IPv6:
2a04:c9c0::/29
Signature Algorithm: sha256WithRSAEncryption
18:f3:c2:2c:8f:6a:a1:de:c7:ea:39:1f:3a:3d:89:d0:52:2e:
d8:2d:26:fe:38:bf:72:18:ea:c6:5f:6b:7d:ab:f6:2f:27:5c:
60:f8:d0:04:8c:1e:07:23:94:02:bc:48:99:d4:52:0c:08:34:
17:fe:6e:75:04:4b:40:0c:01:5f:89:ae:13:64:7a:87:d5:9b:
71:3a:e7:c9:b6:40:ab:16:fd:cb:6e:e5:5c:26:6d:39:34:4c:
e0:2c:82:5d:eb:8e:12:1d:fb:fb:b4:11:fd:06:97:9e:c7:ad:
9e:ce:d8:c5:6f:04:5b:7f:84:1f:95:33:7d:4d:b5:53:39:30:
f0:1c:e6:77:66:9b:31:d6:c3:e7:39:44:29:00:43:5e:04:37:
4c:ae:7f:63:c0:bc:d2:51:2e:4a:96:ad:76:40:14:40:0c:68:
a2:82:23:71:72:37:d3:c6:2b:99:bd:09:de:58:e3:1f:82:93:
44:c3:9c:1c:10:be:d2:ca:6a:92:a4:a7:71:3c:f6:b5:ce:37:
02:ac:a8:0c:01:77:35:a6:1c:00:53:bf:0d:7f:bd:c8:5e:a3:
2a:24:29:02:df:e4:18:ea:45:c0:a1:a8:df:35:8f:7a:42:9e:
b8:50:99:90:e2:0a:1c:98:d8:73:ce:71:69:05:62:bd:2a:b4:
9b:5f:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:23:59 2024 by rpki-client on console-fra.rpki-client.org