Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IFyjVSgUwah_043ZXOiFcZwrwdo.roa
File: IFyjVSgUwah_043ZXOiFcZwrwdo.roa (raw, json)
Hash identifier: GM+dPuL9VyiPIAz4n95Z3E7wrxGSRnaEjYYq/p0qYtQ=
Subject key identifier: 20:5C:A3:55:28:14:C1:A8:7F:D3:8D:D9:5C:E8:85:71:9C:2B:C1:DA
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01898C465640461A7A0D6C78F537614FF869
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IFyjVSgUwah_043ZXOiFcZwrwdo.roa
Signing time: Tue 25 Jul 2023 08:59:27 +0000
ROA not before: Tue 25 Jul 2023 08:59:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 264617
IP address blocks: 45.113.238.0/24 maxlen: 24
147.185.250.0/24 maxlen: 24
43.245.119.0/24 maxlen: 24
193.36.172.0/24 maxlen: 24
193.36.86.0/24 maxlen: 24
147.185.217.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:8c:46:56:40:46:1a:7a:0d:6c:78:f5:37:61:4f:f8:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jul 25 08:59:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=205ca3552814c1a87fd38dd95ce885719c2bc1da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c9:a2:be:64:0b:11:28:58:d4:ae:51:0e:0f:
e4:9a:a3:aa:71:92:5b:2d:fb:00:ed:15:79:a3:f7:
02:be:2c:9b:92:e0:f8:83:2c:8d:11:a5:07:7d:65:
c1:0e:80:a3:b8:aa:20:78:cb:49:cc:0e:d3:8c:27:
27:f6:ab:3f:c9:ab:e1:56:a9:aa:e0:f0:28:c3:f7:
74:9a:1c:02:22:e3:0e:51:71:45:45:a5:fe:38:27:
e8:26:6e:56:28:ce:c7:e9:80:53:24:e6:3d:c4:da:
06:96:31:db:8e:c3:03:85:dd:c9:45:2f:30:53:69:
ec:36:ad:85:48:5f:df:fa:39:11:b5:9a:a2:d0:c6:
4e:12:18:c5:bf:ff:8a:ba:59:15:14:fc:1f:9c:54:
be:21:f1:0f:16:40:5b:8b:76:c9:e5:56:96:7c:ab:
13:f7:09:37:c2:97:db:25:7d:88:ec:52:1f:09:ba:
2c:f0:3b:b8:98:36:b9:95:22:09:42:2e:64:bc:b5:
19:2d:11:a6:e5:11:66:bb:9b:21:33:02:9d:1a:71:
93:92:26:2b:b3:07:e2:8c:62:92:ac:fd:3b:82:20:
db:95:36:83:a3:b5:0c:ce:1d:07:ec:56:99:40:8c:
6b:69:51:80:80:8a:4f:39:6a:d2:47:38:67:92:2e:
fa:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:5C:A3:55:28:14:C1:A8:7F:D3:8D:D9:5C:E8:85:71:9C:2B:C1:DA
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/IFyjVSgUwah_043ZXOiFcZwrwdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.119.0/24
45.113.238.0/24
147.185.217.0/24
147.185.250.0/24
193.36.86.0/24
193.36.172.0/24
Signature Algorithm: sha256WithRSAEncryption
21:45:df:f4:08:b7:5c:4c:2c:aa:82:81:3c:f6:c0:4c:72:a1:
35:76:49:dc:0f:90:58:41:fd:de:17:bf:0c:07:7c:17:99:eb:
e1:e9:e7:b8:05:ff:70:e6:8b:f5:98:82:1b:5c:5a:7f:9f:30:
9e:36:4f:97:c7:42:dd:1a:e7:b3:8a:38:10:6b:91:9f:27:19:
3a:70:c2:ed:0d:13:ee:a2:20:85:28:0b:c6:2e:6d:b7:40:28:
c0:28:e1:85:c0:ac:77:7e:f5:27:76:aa:d4:01:7e:87:db:b3:
d6:75:5c:71:d1:97:43:67:5c:2a:55:e2:11:c3:13:4f:d5:60:
31:7a:18:f7:da:2b:70:5c:88:e2:30:fa:ae:0a:b2:f3:a7:cd:
e7:1d:08:d5:99:51:3d:bc:fd:70:7a:c2:de:06:ad:c9:7e:65:
fd:8b:42:0f:ae:ff:77:d0:67:f8:55:4f:9f:ad:de:27:3b:a5:
38:f7:41:ba:3c:e0:60:d9:5d:73:5c:41:05:93:a1:07:b5:b6:
fe:f3:2b:02:59:ad:a0:19:33:28:4c:ff:e6:32:17:eb:a8:66:
93:37:cf:7c:b2:9f:01:e5:95:9a:1c:53:bc:c4:4f:ba:5a:e1:
2e:80:bd:77:ce:f4:d9:7f:8e:7e:34:b8:21:d8:7b:40:90:a6:
99:e3:83:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:04 2024 by rpki-client on console-ams.rpki-client.org