Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/Ak5CuB4fmPrHtU1nna-dlR4lfdM.roa
File: Ak5CuB4fmPrHtU1nna-dlR4lfdM.roa (raw, json)
Hash identifier: dbTufQ6PlA7dXZmUoeWbwP/wFXNAZH358rMFNoXNHas=
Subject key identifier: 02:4E:42:B8:1E:1F:98:FA:C7:B5:4D:67:9D:AF:9D:95:1E:25:7D:D3
Certificate issuer: /CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Certificate serial: 0185F3B3D9423B6DA1E32B2FCF315CC9A292
Authority key identifier: FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/Ak5CuB4fmPrHtU1nna-dlR4lfdM.roa
Signing time: Fri 27 Jan 2023 14:48:48 +0000
ROA not before: Fri 27 Jan 2023 14:48:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 195.12.224.0/19 maxlen: 19
80.239.128.0/19 maxlen: 19
195.12.248.0/24 maxlen: 24
195.12.248.0/23 maxlen: 23
195.12.249.0/24 maxlen: 24
62.115.128.0/22 maxlen: 22
80.91.240.0/20 maxlen: 20
80.91.248.0/21 maxlen: 21
213.248.64.0/18 maxlen: 18
80.239.224.0/19 maxlen: 19
2.255.248.0/21 maxlen: 21
80.239.160.0/19 maxlen: 19
62.115.0.0/16 maxlen: 16
213.155.128.0/19 maxlen: 19
80.239.192.0/19 maxlen: 19
2.255.192.0/18 maxlen: 18
2001:2030:c005::/48 maxlen: 48
2001:2030::/28 maxlen: 28
2001:2030:c004::/48 maxlen: 48
2001:2030:c004::/47 maxlen: 47
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:f3:b3:d9:42:3b:6d:a1:e3:2b:2f:cf:31:5c:c9:a2:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0ed92ec94321dcb219d37f38d907e183244bd
Validity
Not Before: Jan 27 14:48:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=024e42b81e1f98fac7b54d679daf9d951e257dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:93:6d:d7:27:99:08:6a:a4:0a:98:66:ad:64:
76:46:68:20:81:3e:2e:59:fd:94:7e:f0:75:39:81:
fd:a6:af:c4:06:d2:8a:e7:05:c7:06:33:4b:b0:91:
c6:4f:07:9f:33:fe:30:c8:b1:aa:0a:12:cc:b7:eb:
89:fd:e5:ae:9b:c4:62:4a:04:7e:07:91:d8:94:82:
4f:87:81:9d:78:54:39:57:7d:a5:3a:cf:1c:0f:a2:
d1:4b:f5:e9:9b:12:48:4e:c6:c6:0c:39:6b:62:29:
32:5e:92:2a:97:6c:e0:53:a1:90:ce:ce:d3:1f:7f:
37:32:a5:1c:2f:5e:5d:4b:44:e0:95:3b:5a:4e:30:
8e:d4:ca:d5:a6:a7:4f:fc:26:9c:8f:e0:a7:92:7d:
5a:5a:39:c9:14:a5:61:3a:fd:14:d1:7a:66:28:9c:
20:30:4b:9d:ec:6f:8b:05:b0:3c:d7:7d:b9:05:5b:
e7:b5:94:72:15:11:ea:0f:3b:cc:ff:36:e2:e5:d8:
a2:9b:96:95:54:fd:7d:ca:eb:f4:31:b6:1f:a9:10:
69:b0:13:d2:38:47:72:d9:c2:5b:d8:d6:d0:36:f7:
95:b4:46:6e:f7:16:80:d7:07:23:cf:4e:f8:5e:ee:
bb:35:98:33:e0:99:06:7e:dd:6a:70:f5:44:b6:41:
14:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:4E:42:B8:1E:1F:98:FA:C7:B5:4D:67:9D:AF:9D:95:1E:25:7D:D3
X509v3 Authority Key Identifier:
keyid:FB:A0:ED:92:EC:94:32:1D:CB:21:9D:37:F3:8D:90:7E:18:32:44:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6DtkuyUMh3LIZ03842QfhgyRL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/Ak5CuB4fmPrHtU1nna-dlR4lfdM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/593482-d762-4409-b850-20c44a81f977/1/1-6DtkuyUMh3LIZ03842QfhgyRL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.255.192.0/18
62.115.0.0/16
80.91.240.0/20
80.239.128.0/17
195.12.224.0/19
213.155.128.0/19
213.248.64.0/18
IPv6:
2001:2030::/28
Signature Algorithm: sha256WithRSAEncryption
2f:48:ae:fe:02:07:e1:8b:44:00:1b:41:4a:7e:88:29:15:31:
06:f5:a5:95:72:86:71:6b:5b:62:ae:35:4e:1a:6b:63:66:eb:
1d:4b:30:7a:10:cd:b2:74:e9:91:f8:21:1f:fb:eb:08:14:68:
55:60:33:60:ad:6d:dd:0a:ce:64:89:ff:f5:12:eb:29:13:f4:
ef:39:0e:b0:9b:62:1a:33:8c:13:99:2f:c0:58:73:01:4e:28:
e5:2d:d1:5b:3a:8c:1e:68:d9:83:bd:4a:6f:71:35:d5:e0:f1:
05:0a:55:7b:8c:37:5e:21:32:ab:27:ee:c2:2a:0f:37:09:19:
c7:5f:7d:eb:5b:b3:7c:e1:f0:2e:b9:86:82:ba:6d:5c:77:01:
bb:94:59:c2:5e:6d:ad:38:01:53:7b:cf:8a:a1:c7:df:d1:46:
53:56:87:99:b9:be:70:f6:ad:c9:9d:27:e9:99:4f:5e:08:6b:
54:5a:2b:2b:bc:5f:0e:c0:6d:56:9e:fb:23:8b:eb:69:db:4d:
99:41:e4:05:a1:a1:54:8e:e9:09:80:fb:83:5e:3b:55:ac:cc:
12:87:65:b1:15:41:ca:90:87:3b:a1:8e:a4:4d:54:28:52:da:
68:f9:af:c6:7c:cb:0e:e6:03:3c:2f:6b:31:cc:ae:2c:e9:fa:
df:14:3f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:32:19 2024 by rpki-client on console-ams.rpki-client.org