Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JDNVQPej0MGj9VbfypvlQgpHtn8.roa
File: JDNVQPej0MGj9VbfypvlQgpHtn8.roa (raw, json)
Hash identifier: OKZO54atndHDTeSh1acuEnaazaIDqbrJVENOyRkUFcY=
Subject key identifier: 24:33:55:40:F7:A3:D0:C1:A3:F5:56:DF:CA:9B:E5:42:0A:47:B6:7F
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018635523FB32A475A357A72DA5371F859CB
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JDNVQPej0MGj9VbfypvlQgpHtn8.roa
Signing time: Thu 09 Feb 2023 08:37:08 +0000
ROA not before: Thu 09 Feb 2023 08:37:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 133944
IP address blocks: 207.244.216.0/22 maxlen: 22
45.141.80.0/22 maxlen: 22
43.245.116.0/23 maxlen: 23
209.35.4.0/23 maxlen: 23
209.35.113.0/24 maxlen: 24
193.148.92.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:35:52:3f:b3:2a:47:5a:35:7a:72:da:53:71:f8:59:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 9 08:37:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=24335540f7a3d0c1a3f556dfca9be5420a47b67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c4:38:11:d0:24:7f:79:02:fa:5c:90:2d:ca:
27:6b:5a:0b:d4:4f:06:70:c8:d6:2b:1e:ad:cb:41:
37:82:f7:02:96:e9:1f:21:99:eb:d2:95:6b:d0:c4:
9e:76:8f:a2:de:4b:38:c7:d0:56:82:ca:08:ab:02:
46:c1:5d:d8:b2:6a:da:97:0d:6a:41:be:cc:3c:19:
f8:a1:4e:2d:78:82:f3:05:09:37:3d:e3:65:29:27:
70:9a:ea:2a:93:68:89:58:8c:f1:27:6e:68:ea:27:
54:8a:fa:50:75:b4:11:74:f8:56:53:cc:76:f4:3d:
9a:b5:fe:d9:28:c0:2a:19:47:fa:c7:43:78:5c:8f:
8f:26:8c:1e:6e:20:39:06:18:0f:01:82:c8:e9:63:
e8:42:d1:ff:d0:f4:47:5c:88:86:18:3b:37:0e:59:
27:0c:18:84:6d:d2:1a:c0:8b:96:ff:62:80:55:c9:
ec:5c:9d:6a:ed:bb:5a:ef:56:ad:c5:6e:fa:cc:91:
23:b5:db:15:49:7a:f2:eb:7e:b7:7e:f9:c5:8d:d2:
6a:ac:a8:fe:35:7b:3e:ee:27:dc:ec:2a:21:76:35:
14:05:5e:d8:37:3d:93:f9:9d:fe:06:f7:56:41:11:
b5:8b:ac:09:d4:4a:e1:73:1c:87:65:3c:d2:09:f6:
35:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:33:55:40:F7:A3:D0:C1:A3:F5:56:DF:CA:9B:E5:42:0A:47:B6:7F
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JDNVQPej0MGj9VbfypvlQgpHtn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.116.0/23
45.141.80.0/22
193.148.92.0/23
207.244.216.0/22
209.35.4.0/23
209.35.113.0/24
Signature Algorithm: sha256WithRSAEncryption
d1:ae:ee:d3:95:e7:d4:67:ad:68:e4:c7:21:4b:e3:bd:84:05:
54:9f:49:09:9c:e7:6c:66:d6:a4:0c:4b:72:83:93:a2:40:57:
d9:3b:18:30:b7:fd:a9:e6:71:14:c3:ae:24:ed:e3:fc:3b:eb:
bd:b4:84:31:97:52:11:77:15:df:a9:7e:ee:36:0d:9d:0f:97:
e9:ea:69:68:71:89:3e:b9:e3:35:a9:e8:e4:34:74:87:0a:b1:
40:11:61:17:fe:cf:d4:32:1a:fa:23:08:0c:3e:4e:94:8d:5f:
a0:a0:2a:76:5a:42:aa:96:b7:33:5e:d0:ef:af:6e:0d:63:02:
43:22:8a:53:3e:54:32:cb:45:dc:ee:58:7a:a2:d3:82:c8:a3:
aa:57:7d:a8:54:a1:6d:03:59:d0:2b:a1:08:e0:76:23:27:e0:
56:fe:54:6f:00:a5:99:f2:63:51:42:08:7e:1f:f5:e4:c8:49:
8a:92:f4:4d:a9:85:2a:72:e9:80:35:7e:78:04:73:05:da:65:
bc:9d:a5:a3:2b:df:44:98:b2:3a:d9:df:ca:a7:35:b9:f1:11:
1c:b2:f9:9a:f3:1b:2f:5f:aa:34:0b:e5:e7:b0:6a:08:a0:55:
0f:2b:1c:3e:13:36:73:31:f5:66:a9:31:e8:95:d0:39:3b:a1:
11:11:45:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:04 2024 by rpki-client on console-ams.rpki-client.org