Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/FPRk5Kf828S92w8oXuTaFkC9gq4.roa
File: FPRk5Kf828S92w8oXuTaFkC9gq4.roa (raw, json)
Hash identifier: hqfyeWbmFTGKxw+e1oXyFh1xZ5r1+JLax/YxmVace4E=
Subject key identifier: 14:F4:64:E4:A7:FC:DB:C4:BD:DB:0F:28:5E:E4:DA:16:40:BD:82:AE
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 0185737A74D29A5D07D76C558D619F82EE70
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/FPRk5Kf828S92w8oXuTaFkC9gq4.roa
Signing time: Mon 02 Jan 2023 17:14:43 +0000
ROA not before: Mon 02 Jan 2023 17:14:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207155
IP address blocks: 185.183.212.0/23 maxlen: 23
185.183.214.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:74:d2:9a:5d:07:d7:6c:55:8d:61:9f:82:ee:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 2 17:14:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14f464e4a7fcdbc4bddb0f285ee4da1640bd82ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:56:9f:7a:00:0d:32:0a:60:99:5e:dc:2c:c9:
7d:b8:f0:87:c6:be:f7:d3:8b:4e:80:10:e5:d6:57:
b0:85:ac:10:72:bf:75:ea:fa:75:dc:c7:f7:e3:64:
83:43:6f:c3:f7:b0:46:e7:0b:0f:c5:a4:4c:bd:17:
62:48:af:5d:e9:2a:2e:2d:37:6b:d3:fe:5d:81:71:
d2:f5:bf:e6:8a:c0:21:6e:84:3f:a5:fc:90:d0:7d:
4f:38:0f:d0:9d:6f:86:81:3d:6b:b9:0e:7e:e9:b1:
1f:ff:b3:c8:9c:33:14:de:86:98:9c:d4:7f:71:5c:
7c:3a:d0:32:0f:d1:d0:b4:fa:0e:bd:d8:75:fa:37:
93:5d:4c:4e:5a:51:2d:0c:57:c3:a3:d9:1a:86:78:
7a:fa:22:2e:93:73:e0:54:94:db:35:04:18:62:0e:
55:5c:aa:51:b2:50:62:b0:b7:0b:16:5a:7c:09:1e:
a1:3d:70:fc:e9:b7:62:55:62:19:97:91:75:41:4e:
20:90:5a:16:1e:2f:81:30:b2:18:9c:88:18:db:85:
74:fb:54:2b:25:26:84:de:fb:b4:a1:c4:3d:9a:b8:
9b:de:37:68:bb:81:9f:2a:b1:0c:be:5e:21:3f:9c:
fe:8f:82:f6:b1:36:0d:4f:59:37:61:56:4f:37:79:
19:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:F4:64:E4:A7:FC:DB:C4:BD:DB:0F:28:5E:E4:DA:16:40:BD:82:AE
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/FPRk5Kf828S92w8oXuTaFkC9gq4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.212.0/22
Signature Algorithm: sha256WithRSAEncryption
77:05:68:94:18:83:8d:f0:3a:d6:a5:89:60:4d:b7:6a:9c:c1:
8c:c8:f8:da:f1:bc:9a:9a:b0:c1:b7:59:d4:40:af:aa:66:8d:
1c:66:30:d8:45:86:4a:3e:ce:91:8b:6f:18:3a:53:4f:e1:05:
a0:b3:c1:ad:14:e3:05:a2:9b:53:a9:4f:70:95:f9:b7:a7:aa:
a7:26:c6:a1:0f:8b:6b:fa:d0:ee:23:2a:7c:81:04:35:6d:c6:
17:f4:43:68:26:75:39:b8:64:c4:91:18:f6:fa:d1:2b:e6:ea:
ae:4c:1e:47:8f:1c:5e:9a:91:47:66:1d:79:6b:b6:05:d6:63:
a9:41:e0:e9:85:66:62:36:4d:84:9d:72:6f:61:06:e7:2d:b8:
04:40:fb:08:ab:f7:54:80:64:1b:b6:a6:34:3c:39:cc:a8:63:
01:46:f3:17:3e:d5:43:a7:65:2c:b2:3a:ab:77:72:4d:29:6e:
41:5a:52:8d:f9:d0:dd:4e:08:c2:75:55:ee:41:3a:3b:92:5b:
1e:81:1d:35:39:14:62:1d:f4:a6:30:b9:d8:5e:99:fa:1c:52:
96:3a:21:d8:67:24:77:a1:0d:f7:34:60:3e:1f:10:fe:47:96:
cb:41:78:88:b9:8e:0b:f0:f1:a5:f6:fb:52:f5:fe:78:56:5e:
0e:fa:21:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:44 2023 by rpki-client on console-fra.rpki-client.org