Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/J4EUd3bravmc7xhBTPfIahXRPmk.roa
File: J4EUd3bravmc7xhBTPfIahXRPmk.roa (raw, json)
Hash identifier: q0NbirvtZnrWVIyRNMZ/Uu5d2W6N81HimdhTIVcfliU=
Subject key identifier: 27:81:14:77:76:EB:6A:F9:9C:EF:18:41:4C:F7:C8:6A:15:D1:3E:69
Certificate issuer: /CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Certificate serial: 01859FFD0DEB381DAB2538583B438D890288
Authority key identifier: 5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/J4EUd3bravmc7xhBTPfIahXRPmk.roa
Signing time: Wed 11 Jan 2023 08:40:39 +0000
ROA not before: Wed 11 Jan 2023 08:40:39 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43479
IP address blocks: 185.248.93.0/24 maxlen: 24
185.248.92.0/24 maxlen: 24
185.248.95.0/24 maxlen: 24
185.248.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:9f:fd:0d:eb:38:1d:ab:25:38:58:3b:43:8d:89:02:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a52945d231f5f8a974be712e8718ab50f04cffa
Validity
Not Before: Jan 11 08:40:39 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2781147776eb6af99cef18414cf7c86a15d13e69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:90:ff:34:eb:57:13:3b:78:f6:5e:c3:af:53:
cc:d1:7c:5b:8d:22:7c:23:d9:7e:36:d5:07:0c:80:
82:fb:2d:8f:16:1d:d2:b8:54:60:a2:d1:73:81:9e:
c4:11:f1:0b:8b:65:d8:20:7c:7b:80:12:67:42:51:
bc:8e:cd:11:9a:2d:df:ac:7e:fa:41:28:0f:c4:01:
bb:da:bc:ff:eb:b0:03:66:46:3a:15:df:fd:26:48:
cf:b6:4a:8a:af:53:99:52:ad:8d:6a:ba:34:8c:ee:
16:d7:7e:bf:83:3a:26:05:3a:61:0e:08:7b:4b:d1:
cf:2b:ad:f3:b0:37:56:54:9c:dc:e9:53:eb:6f:f8:
74:e7:c9:98:52:63:2e:54:e4:d7:62:ca:61:a6:5b:
68:ec:c4:28:3e:0f:02:5a:a9:4e:c6:35:46:6e:7e:
fe:d5:e2:ba:0a:68:7d:04:d2:fe:4a:7e:7b:e1:a2:
f8:a3:98:0e:df:20:c9:a1:9d:d7:99:aa:fc:6f:de:
20:bf:36:3d:1a:5f:37:f1:a4:8a:18:27:28:35:25:
cc:cc:1d:2b:1c:09:47:70:63:ea:d8:ea:87:0e:8b:
c3:05:d5:43:ca:7f:cc:e6:b4:62:08:01:8a:27:72:
d7:24:1b:48:b9:9a:a3:64:2c:59:4e:83:79:48:d2:
ce:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:81:14:77:76:EB:6A:F9:9C:EF:18:41:4C:F7:C8:6A:15:D1:3E:69
X509v3 Authority Key Identifier:
keyid:5A:52:94:5D:23:1F:5F:8A:97:4B:E7:12:E8:71:8A:B5:0F:04:CF:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/J4EUd3bravmc7xhBTPfIahXRPmk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f107d6-58fd-4323-8f51-2e41ff3e0a6f/1/WlKUXSMfX4qXS-cS6HGKtQ8Ez_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.92.0/22
Signature Algorithm: sha256WithRSAEncryption
0c:02:c6:eb:45:f5:cf:25:a3:98:d2:69:34:5a:57:2d:ee:6f:
c9:e8:7e:ab:f4:c1:fa:17:ba:e9:d6:17:dd:d2:20:64:f6:4d:
8e:b8:8f:35:e9:4f:ca:d9:99:e9:34:81:3d:1f:80:5c:cc:19:
73:d7:72:01:7d:e9:fb:14:8e:7c:da:f6:9e:7d:cc:2f:cb:30:
67:20:d4:0e:db:73:8e:4d:18:58:63:5a:7e:2e:58:3c:dc:87:
59:f8:b8:eb:52:6d:4f:f6:45:3c:93:06:8b:db:54:21:2f:a2:
b1:5e:75:1a:0e:09:34:98:79:43:ff:a5:df:a0:93:f7:73:55:
c3:27:b6:6f:ec:fe:d4:81:2b:b5:92:01:25:b0:5f:2f:77:2a:
75:fd:24:96:ec:74:86:94:ba:42:87:35:ef:ec:0f:7e:3e:d4:
00:51:8b:53:4c:dd:ec:76:95:74:f1:f0:80:c6:a4:01:a3:02:
94:eb:7c:81:57:5b:a5:d8:2c:c3:e0:57:86:d7:8b:cb:6b:d5:
b4:4f:1c:8b:08:04:6d:a4:8c:51:a5:2a:00:9a:6b:6a:8a:ee:
e3:f2:92:05:ca:3b:6a:bd:7f:40:67:70:ac:b0:fc:d6:de:83:
d3:93:d2:e1:15:5e:ae:12:e9:5f:b7:29:17:93:36:50:2b:a0:
32:4f:dd:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:53:56 2024 by rpki-client on console-ams.rpki-client.org