Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/FRwzcGRWYpE-WrNU0GA0N0HJSqo.roa
File: FRwzcGRWYpE-WrNU0GA0N0HJSqo.roa (raw, json)
Hash identifier: oHWf9yOcuTgQxnphgK5U45xy7fP/fT4goxrPmY9bVyk=
Subject key identifier: 15:1C:33:70:64:56:62:91:3E:5A:B3:54:D0:60:34:37:41:C9:4A:AA
Certificate issuer: /CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Certificate serial: 01866F45980F972E70F9FC8D3D5CAEACF22F
Authority key identifier: A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/FRwzcGRWYpE-WrNU0GA0N0HJSqo.roa
Signing time: Mon 20 Feb 2023 14:41:17 +0000
ROA not before: Mon 20 Feb 2023 14:41:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 185.252.212.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6f:45:98:0f:97:2e:70:f9:fc:8d:3d:5c:ae:ac:f2:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a385c3cba312a078c4d0a712af5316dd1e41c466
Validity
Not Before: Feb 20 14:41:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=151c3370645662913e5ab354d060343741c94aaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:46:35:49:3c:a7:ab:37:0d:51:41:e4:7a:bd:
b7:3f:47:b8:8f:bc:f5:b8:65:2b:f3:85:7e:9e:22:
68:dd:36:3a:78:b3:db:9e:12:33:57:3d:0d:bf:11:
7e:d4:71:4c:1e:4f:f1:b8:83:ac:d8:ed:08:57:2b:
40:b0:63:8b:50:54:7f:15:ad:d6:cb:23:94:34:e6:
70:18:19:09:fe:7f:44:3d:ce:fa:65:f9:ee:55:d1:
08:0d:5e:15:c3:a0:3e:e4:49:25:97:24:a5:08:f0:
80:da:5a:22:ba:47:20:03:b0:18:4f:75:18:cd:d3:
e3:18:eb:22:c6:3c:bf:47:6f:76:d2:ef:5b:e3:a8:
07:be:33:52:2a:e6:d6:2b:f6:6a:0f:c7:c8:39:b1:
1a:c6:cf:93:b5:f5:9f:69:a0:08:56:99:c9:a2:b7:
49:cc:88:ab:2a:f8:9d:18:bf:f5:51:55:85:8f:4d:
12:f8:2e:08:3a:7b:9d:3d:b3:b8:33:4e:cf:43:bd:
17:5f:51:d3:49:db:1f:71:dc:30:d1:0f:4a:ea:70:
dd:ac:84:50:a8:cd:04:95:4e:26:f6:1c:99:50:aa:
0a:7e:a3:89:5c:f6:33:43:ee:50:ac:6f:06:87:27:
03:1e:fb:e8:8a:ec:64:1e:89:cd:8b:56:85:17:e5:
08:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1C:33:70:64:56:62:91:3E:5A:B3:54:D0:60:34:37:41:C9:4A:AA
X509v3 Authority Key Identifier:
keyid:A3:85:C3:CB:A3:12:A0:78:C4:D0:A7:12:AF:53:16:DD:1E:41:C4:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o4XDy6MSoHjE0KcSr1MW3R5BxGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/FRwzcGRWYpE-WrNU0GA0N0HJSqo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/4c8dd0-af96-44e3-b0fe-4d89397d9898/1/o4XDy6MSoHjE0KcSr1MW3R5BxGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.212.0/24
Signature Algorithm: sha256WithRSAEncryption
29:93:a2:51:a7:45:ff:ef:2a:f6:fd:61:4b:a0:93:70:85:0e:
b3:cd:08:ce:44:6c:4b:d9:a6:1a:ce:7d:4a:5d:ef:47:9b:fe:
74:a0:a4:64:bf:77:c6:27:93:8e:13:56:42:2c:09:a7:88:2d:
55:14:49:c0:8e:3a:7d:c5:53:9d:1a:d3:53:d4:a3:da:5e:2c:
58:3f:47:12:7c:10:10:73:2f:57:48:4e:b7:7d:8b:87:e8:f6:
06:db:28:25:98:71:14:47:e8:ea:c0:7e:de:6c:98:e0:0f:78:
30:61:4f:98:7c:8e:da:fe:e5:af:a5:6e:7c:73:8b:61:93:29:
72:ed:cf:47:f4:23:09:8f:f1:23:0f:4a:dd:ab:e2:31:b0:f6:
85:44:28:e5:8d:03:18:55:7e:8a:e3:0b:04:70:43:72:95:4f:
07:b8:54:02:8e:14:0d:a1:02:1d:92:e6:d3:66:dc:4a:36:ae:
ec:37:2c:ca:ed:91:38:5c:1a:ec:b5:30:5b:7c:6b:ec:7a:4d:
7a:e6:c0:9a:9c:ca:3d:bf:ba:40:fe:79:3b:70:47:65:b0:c1:
86:09:61:fe:31:f3:96:94:33:fe:2c:d0:34:93:e3:f0:86:fa:
fe:3d:36:49:ff:e9:f8:2f:df:66:c6:85:0d:a6:c2:8b:c6:f4:
cc:ec:1b:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 17 05:47:48 2023 by rpki-client on console-ams.rpki-client.org