Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/FTS3on4eNgdWrc3f1Rrt-5ZkU6k.roa
File: FTS3on4eNgdWrc3f1Rrt-5ZkU6k.roa (raw, json)
Hash identifier: wDzUhtf7ADXHsKPYZbtD61Aybv5NI1xMPE/Tu8VuGAU=
Subject key identifier: 15:34:B7:A2:7E:1E:36:07:56:AD:CD:DF:D5:1A:ED:FB:96:64:53:A9
Certificate issuer: /CN=52965547f1096064b6b573c0281714c1f061cd4d
Certificate serial: 01856C0128B575FBB1A342D1790D0DBAB74B
Authority key identifier: 52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/FTS3on4eNgdWrc3f1Rrt-5ZkU6k.roa
Signing time: Sun 01 Jan 2023 06:24:53 +0000
ROA not before: Sun 01 Jan 2023 06:24:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206472
IP address blocks: 185.185.177.0/24 maxlen: 24
185.185.176.0/24 maxlen: 24
185.185.176.0/22 maxlen: 22
185.185.179.0/24 maxlen: 24
185.185.178.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:01:28:b5:75:fb:b1:a3:42:d1:79:0d:0d:ba:b7:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52965547f1096064b6b573c0281714c1f061cd4d
Validity
Not Before: Jan 1 06:24:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1534b7a27e1e360756adcddfd51aedfb966453a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:32:f2:08:0a:96:1c:0b:55:d4:03:26:89:
a7:51:3a:eb:f1:8a:01:11:1d:75:68:4d:b7:05:96:
4e:5d:54:fe:8c:20:0a:36:56:b3:17:47:92:17:4a:
cf:96:80:4d:e2:c3:62:21:f1:0b:35:14:0f:23:95:
19:9c:e5:fe:5e:ff:72:fc:07:31:97:6d:dd:a2:98:
90:03:6c:33:9f:34:37:97:0b:5f:dc:26:f5:f8:8d:
a2:26:29:42:b5:1c:4a:2b:2b:8f:a8:2c:d8:f6:4c:
29:c7:5f:10:2a:20:32:5f:4e:c2:80:b2:7f:67:da:
de:07:8f:80:1a:b2:64:59:95:e2:0e:f2:56:22:99:
15:ea:bf:71:05:a0:46:62:83:28:2b:24:7d:5a:14:
0b:3a:2a:25:48:47:ab:2a:e2:20:1b:ae:c2:4c:66:
13:c9:cc:20:c3:a9:73:18:8e:cf:66:7a:75:59:eb:
21:4b:31:e9:60:0b:d6:57:ec:e8:f4:2a:0c:2f:b6:
53:45:8f:c3:a7:20:b2:6d:a2:0a:4b:92:35:ad:6c:
aa:6b:95:bb:76:a1:26:fe:b2:87:a1:4d:ab:5a:ec:
db:24:33:9c:4f:22:fc:90:66:43:b3:53:c5:09:e4:
d7:0b:cc:f7:dc:40:11:16:de:40:e5:68:55:84:54:
bd:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:34:B7:A2:7E:1E:36:07:56:AD:CD:DF:D5:1A:ED:FB:96:64:53:A9
X509v3 Authority Key Identifier:
keyid:52:96:55:47:F1:09:60:64:B6:B5:73:C0:28:17:14:C1:F0:61:CD:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UpZVR_EJYGS2tXPAKBcUwfBhzU0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/FTS3on4eNgdWrc3f1Rrt-5ZkU6k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/064906-5be3-4ed1-ab74-5da3ec82cc56/1/UpZVR_EJYGS2tXPAKBcUwfBhzU0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.176.0/22
Signature Algorithm: sha256WithRSAEncryption
11:e9:8c:45:ae:bf:25:d9:22:93:8a:aa:46:74:87:78:e5:72:
11:4d:b3:20:19:6e:70:5d:63:e7:5c:bf:83:78:c1:11:07:d7:
c2:2b:8f:f3:db:48:8f:b0:21:3b:fd:12:f7:5a:f0:11:06:9c:
70:f8:45:b5:01:70:d3:35:e3:56:dd:2c:77:d0:06:51:c4:ac:
ea:11:9a:26:b2:df:a3:51:cb:49:49:ce:bc:fc:e2:06:55:9e:
2f:09:41:38:ba:8d:af:a3:92:a2:b2:cc:49:41:7f:5c:a4:7f:
e0:d0:d3:9e:7e:95:92:58:5f:79:b9:58:f7:ba:af:24:5b:25:
54:f7:30:43:56:d3:22:1e:74:6d:79:9b:78:35:da:38:04:bf:
e1:c5:86:4b:7c:4d:59:46:2f:51:a2:38:e1:8b:65:85:e9:c8:
6e:07:fe:da:dd:a4:4e:4f:11:20:e8:fc:93:47:34:e6:f4:ac:
13:1b:7a:dc:1e:49:3e:ec:aa:5a:14:36:0f:4a:fd:1a:c4:d7:
15:ee:19:25:4e:82:74:2b:2b:17:71:ce:13:b0:db:db:b4:ec:
34:26:71:c1:4a:81:fd:42:1e:92:da:6c:88:db:f9:ab:a8:6f:
0f:4a:b9:97:79:aa:7f:fb:dd:b9:ef:fd:f7:38:50:85:13:db:
07:a7:27:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:04 2024 by rpki-client on console-fra.rpki-client.org