Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fK-ii4JiAv8sfb6W2peUROIKLPk.roa
File: fK-ii4JiAv8sfb6W2peUROIKLPk.roa (raw, json)
Hash identifier: xL/DrtNNdCMI/OehfmIKuNKrNIamDTq5YPG8ew4ySAw=
Subject key identifier: 7C:AF:A2:8B:82:62:02:FF:2C:7D:BE:96:DA:97:94:44:E2:0A:2C:F9
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018C7E857DC0F40340F2D5D21A236205E493
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fK-ii4JiAv8sfb6W2peUROIKLPk.roa
Signing time: Mon 18 Dec 2023 20:02:06 +0000
ROA not before: Mon 18 Dec 2023 20:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 45.148.116.0/22 maxlen: 24
185.238.188.0/22 maxlen: 24
2a0e:b107:1870::/48 maxlen: 48
2a0c:3b87:ff00::/40 maxlen: 48
2a0e:b107:9f4::/48 maxlen: 48
2a0c:3b87:ffff::/48 maxlen: 48
2a0e:97c0:791::/48 maxlen: 48
2a10:ccc0:110::/44 maxlen: 48
2a06:de01:d0::/44 maxlen: 48
2a0e:b107:1b9e::/48 maxlen: 48
2a10:ccc3:ccce::/48 maxlen: 48
2a0e:97c4:ac00::/38 maxlen: 48
2a0e:97c0:792::/48 maxlen: 48
2a0e:97c0:750::/48 maxlen: 48
2a0e:b107:df2::/48 maxlen: 48
2a10:ccc7:9000::/38 maxlen: 48
2a0e:b107:9f6::/48 maxlen: 48
2a0e:b107:278b::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7e:85:7d:c0:f4:03:40:f2:d5:d2:1a:23:62:05:e4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Dec 18 20:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cafa28b826202ff2c7dbe96da979444e20a2cf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:53:97:37:c7:f7:53:9e:a4:57:1c:ce:c9:cb:
d4:c5:02:f1:5d:5a:be:5f:20:45:5c:c7:0e:1c:21:
90:94:82:96:a9:42:11:15:7f:ce:9c:0b:a3:92:cb:
8f:76:81:b1:ca:43:da:82:16:db:5a:3a:0e:10:24:
85:b8:30:df:60:02:88:b9:3c:05:b9:81:ed:59:37:
4a:f9:8a:a4:82:7b:95:7e:e8:3e:a9:52:a6:51:d0:
d6:a8:5a:ac:7f:3e:96:8b:45:7a:a4:a2:6c:ea:b3:
58:63:d4:b0:c4:2f:5a:65:32:ed:22:83:87:59:88:
59:36:3c:28:d2:83:4e:4a:a1:14:37:42:73:9f:88:
0f:b4:d2:4e:7b:4a:f0:07:a2:24:7d:a0:49:bd:e7:
cf:58:77:48:52:2e:fe:30:51:b1:d8:40:32:9d:77:
f8:1d:75:08:e5:1f:b9:0c:13:95:04:55:a6:4e:de:
e1:6d:6f:01:2a:df:61:2c:a4:13:e4:7c:cc:71:2f:
ef:8e:dc:23:7e:21:63:a5:ef:25:16:2f:5f:b3:b0:
72:bc:8f:6a:51:4b:f0:23:ee:d4:47:0b:e9:b6:31:
86:5d:f7:19:de:ba:4f:16:d4:dd:93:4e:ff:d4:96:
74:83:50:0d:0d:65:93:5a:4e:63:f2:c8:8c:7a:50:
ba:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:AF:A2:8B:82:62:02:FF:2C:7D:BE:96:DA:97:94:44:E2:0A:2C:F9
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/fK-ii4JiAv8sfb6W2peUROIKLPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.116.0/22
185.238.188.0/22
IPv6:
2a06:de01:d0::/44
2a0c:3b87:ff00::/40
2a0e:97c0:750::/48
2a0e:97c0:791::-2a0e:97c0:792:ffff:ffff:ffff:ffff:ffff
2a0e:97c4:ac00::/38
2a0e:b107:9f4::/48
2a0e:b107:9f6::/48
2a0e:b107:df2::/48
2a0e:b107:1870::/48
2a0e:b107:1b9e::/48
2a0e:b107:278b::/48
2a10:ccc0:110::/44
2a10:ccc3:ccce::/48
2a10:ccc7:9000::/38
Signature Algorithm: sha256WithRSAEncryption
30:25:b0:ba:47:1e:fe:6f:b3:60:98:e9:c9:a0:fe:5c:95:fb:
64:61:4c:22:da:74:c6:cd:84:91:e6:97:a9:1b:d3:09:80:99:
99:2a:e2:7b:7e:dd:02:bc:4e:d6:93:2b:1e:26:b4:bb:e2:fd:
2a:bc:4a:7d:92:85:8d:75:ab:e6:df:41:95:99:47:87:8d:c3:
26:2b:8d:35:2d:61:0c:71:98:3d:6c:38:f3:eb:61:9f:e8:1b:
06:74:fc:84:ae:cf:11:07:c5:7b:d7:f2:23:c0:d4:19:06:fe:
13:d7:35:fe:c9:4b:4f:11:a5:d4:ae:f6:a6:77:cb:75:5e:52:
a3:e9:29:2b:00:4e:2b:7a:2f:00:2e:cf:43:04:06:1e:e8:dd:
2d:b6:ba:d5:97:dd:bd:af:8f:fe:ff:83:53:ed:b4:95:0d:f8:
ec:79:8e:a9:d4:ef:b9:2e:a2:70:1c:9b:2f:07:91:75:02:50:
84:1c:ae:9f:fb:6e:d0:0f:18:69:9e:3a:4a:5a:2e:79:e8:71:
bd:35:4c:96:33:47:e4:59:45:84:41:0f:60:06:87:dc:ab:4b:
8e:9e:4b:db:b5:19:92:f5:e9:6e:6c:a2:b3:a7:5a:ce:89:64:
7d:5b:04:b9:55:75:57:7a:bf:fb:1e:5b:61:de:50:62:bb:81:
a7:66:55:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:29:34 2023 by rpki-client on console-fra.rpki-client.org