Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1O6EMHVlqoAe9LYh-2ohqLWaqJA.roa
File: 1O6EMHVlqoAe9LYh-2ohqLWaqJA.roa (raw, json)
Hash identifier: zOn2axiH+w4xtkPFQGOM2EBFip6k/ZZ/53GuH9lRoNg=
Subject key identifier: D4:EE:84:30:75:65:AA:80:1E:F4:B6:21:FB:6A:21:A8:B5:9A:A8:90
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 0186129EE8FCBCB540F241D5E72A970CC0E3
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1O6EMHVlqoAe9LYh-2ohqLWaqJA.roa
Signing time: Thu 02 Feb 2023 14:54:09 +0000
ROA not before: Thu 02 Feb 2023 14:54:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 396356
IP address blocks: 185.48.52.0/22 maxlen: 22
43.229.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:9e:e8:fc:bc:b5:40:f2:41:d5:e7:2a:97:0c:c0:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 2 14:54:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4ee84307565aa801ef4b621fb6a21a8b59aa890
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cd:bf:32:a6:f5:b1:88:a0:0d:f8:d5:f2:c6:
1b:fa:1f:5f:bf:27:c2:7b:62:d4:09:5d:c2:fa:bb:
34:a2:95:6d:e7:39:91:a9:90:f4:68:9b:c7:d5:ff:
a7:6a:dd:da:06:c7:b3:f3:e3:05:3a:96:4b:3e:5c:
9d:26:ac:f8:a9:dd:78:ac:57:82:90:a3:68:e1:7e:
e0:a7:7c:a2:3d:65:ce:5e:70:91:9a:1f:52:52:f1:
8d:88:b0:12:f7:98:5d:58:19:b0:fc:05:ff:a3:d4:
bf:3c:7b:87:98:a6:3c:65:49:9d:ea:fa:d3:bc:3f:
c4:e2:4c:01:49:46:5e:d2:8e:ed:61:6f:15:aa:90:
a8:2f:df:c2:9c:73:93:a1:b6:af:74:bb:30:7d:a8:
94:e4:ba:3b:1b:9f:64:68:0e:f7:2b:2e:47:1a:5f:
36:38:11:73:0f:01:6d:72:54:13:23:a2:7f:78:23:
3f:b0:09:97:63:72:78:59:bf:92:9d:1f:e5:75:f3:
db:f8:95:e1:0b:87:48:76:a4:28:f3:a8:a5:64:96:
e2:f2:00:c6:c0:8f:8b:68:ef:91:72:58:64:5a:29:
78:6b:ce:b2:92:3f:c0:84:03:81:20:69:61:a2:82:
f0:5e:fa:7a:a9:d3:1e:8f:35:70:55:28:0e:a8:cc:
9d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:EE:84:30:75:65:AA:80:1E:F4:B6:21:FB:6A:21:A8:B5:9A:A8:90
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/1O6EMHVlqoAe9LYh-2ohqLWaqJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.229.8.0/22
185.48.52.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:b2:81:77:e0:19:44:28:b1:a4:9e:33:6c:c0:36:e6:80:83:
1b:07:20:18:b4:fe:41:11:82:d3:4b:b1:a0:72:94:45:2a:86:
ce:20:e1:7b:8b:37:27:6b:2f:15:d4:fd:29:76:03:db:dc:9a:
95:d5:a4:a6:6d:54:83:d4:68:65:9a:e8:4e:5b:fb:e1:c6:c8:
f1:2f:3b:bd:fe:0c:fc:e5:f9:90:18:ea:01:33:c7:52:e5:7e:
33:32:20:19:ef:2d:ca:18:70:a3:5a:01:c2:c1:1f:d5:62:c5:
25:98:e7:e9:e2:ba:63:c4:12:89:d3:e6:d3:43:80:8a:16:9b:
ba:be:34:08:21:2e:cf:92:93:2f:13:9c:24:c5:9d:d8:a2:40:
eb:4e:e0:84:13:a8:d9:d6:3c:3b:15:c1:43:2b:de:4d:c2:31:
9c:7d:ac:fa:2d:15:5d:ff:f5:ba:8d:a0:ca:7f:be:f7:a0:44:
59:97:10:ab:5a:d7:6b:f6:73:73:1d:3a:8d:70:2a:04:f9:86:
25:9d:03:ef:6c:e9:bb:9d:29:c8:dc:94:28:81:2d:8d:fd:5e:
2e:9d:b9:24:cd:48:af:16:d4:72:25:bb:5d:fa:da:af:4a:80:
23:ce:44:31:c1:b5:a5:ea:cc:06:a6:97:69:e9:0e:ac:a5:d4:
10:da:4b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:28 2024 by rpki-client on console-fra.rpki-client.org