Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/_rYQ2tyQvKa7IKSHfMTm4vj6prs.roa
File: _rYQ2tyQvKa7IKSHfMTm4vj6prs.roa (raw, json)
Hash identifier: dIzz+PzR9G3xPdtv0JUICd1a0sPVxcV7qXzf84l6Wjg=
Subject key identifier: FE:B6:10:DA:DC:90:BC:A6:BB:20:A4:87:7C:C4:E6:E2:F8:FA:A6:BB
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01856B8A27916158738065238744F8B87724
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/_rYQ2tyQvKa7IKSHfMTm4vj6prs.roa
Signing time: Sun 01 Jan 2023 04:14:54 +0000
ROA not before: Sun 01 Jan 2023 04:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41911
IP address blocks: 176.110.32.0/19 maxlen: 19
46.250.96.0/19 maxlen: 19
176.110.0.0/19 maxlen: 19
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:8a:27:91:61:58:73:80:65:23:87:44:f8:b8:77:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Jan 1 04:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=feb610dadc90bca6bb20a4877cc4e6e2f8faa6bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:f6:58:0b:97:dd:a6:c3:e3:cb:b4:67:4b:fa:
cf:7a:73:a7:23:bd:44:f7:70:ec:19:e4:05:0c:e3:
b4:f9:5e:da:c1:e7:25:fe:c0:d2:95:44:09:63:ae:
10:09:66:19:5c:5c:0a:fc:27:14:0a:04:4a:77:b7:
d0:4c:7c:30:95:f3:a3:04:16:d8:9a:3e:d0:78:5c:
66:c9:ce:ae:c1:32:9f:50:e4:91:3a:77:51:b3:08:
aa:7a:44:82:98:1e:32:e9:00:2a:c8:9a:b7:2f:22:
e4:f5:7b:01:3c:69:d5:c3:26:3a:99:e6:b2:3c:fb:
61:b3:30:f9:55:94:c3:d4:f2:87:7a:7c:a1:6e:4b:
0b:25:16:22:74:94:fb:66:b7:1f:52:3e:8b:87:cc:
0a:c6:f9:62:84:a4:cf:51:a6:fd:fd:7d:f2:fe:f2:
8e:be:16:67:f4:6e:d6:97:17:36:19:28:c4:2f:c9:
0f:f4:0b:85:35:b7:b2:ce:fd:4e:13:e4:47:c9:a6:
87:80:30:06:cf:9d:ab:bf:02:c7:63:0c:23:72:54:
e2:58:52:75:68:82:26:5f:17:4e:68:d7:20:7d:ba:
ad:59:f6:7e:4a:29:98:e1:6a:fc:a3:db:61:03:e4:
96:a7:e0:55:d2:59:16:d9:b7:3f:f2:9b:9b:bc:f9:
4d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B6:10:DA:DC:90:BC:A6:BB:20:A4:87:7C:C4:E6:E2:F8:FA:A6:BB
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/_rYQ2tyQvKa7IKSHfMTm4vj6prs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.250.96.0/19
176.110.0.0/18
Signature Algorithm: sha256WithRSAEncryption
36:2f:8c:4f:6f:d2:6f:42:9c:a0:df:d9:a5:db:50:81:5c:c5:
a1:93:ff:0f:36:47:b6:d7:97:58:fb:03:a4:1c:03:ee:d1:ed:
01:9a:4c:bf:52:d8:b5:65:10:41:e5:1b:a1:aa:b2:df:6c:0e:
54:cb:b1:3d:3c:ed:7d:35:0a:df:bc:64:bd:e7:01:4e:39:73:
b0:45:ad:da:e8:e2:96:12:d7:9c:ed:0e:44:21:70:e1:5b:58:
36:70:04:a5:1c:af:c4:81:c5:d0:8f:b7:ef:56:53:d3:2a:30:
5c:61:3e:1d:9a:e6:82:4c:b7:d7:ee:6b:eb:65:b9:c0:6a:3b:
ad:25:97:62:b0:f5:65:80:97:f3:13:af:30:25:cb:39:2b:5a:
e8:d2:e6:8b:0b:01:a1:ce:92:76:4f:1e:e4:73:32:64:be:ce:
11:18:04:66:65:86:dd:4d:b6:f9:f2:d0:8f:8c:8b:18:18:15:
a5:da:69:f3:f6:8e:df:08:c8:65:14:9f:18:e6:18:e8:e4:d7:
a9:62:54:8c:62:9c:8c:5c:2e:42:e2:47:27:d3:7d:2d:e5:2a:
01:eb:47:24:7a:bb:23:84:5d:55:11:01:d0:79:cc:75:b2:a3:
78:d4:1f:39:82:2f:ee:07:d5:67:05:e5:a4:2a:ce:7a:2e:b9:
8c:7e:43:53
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 30 16:28:39 2023 by rpki-client on console-ams.rpki-client.org