Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JyIrmkHHoZ1pJ93ai3RZVAAyvMM.roa
File: JyIrmkHHoZ1pJ93ai3RZVAAyvMM.roa (raw, json)
Hash identifier: HfsPtOq0xtPtsnoeZqtWk1XlSsVOOfSJlYxqSX6wbEc=
Subject key identifier: 27:22:2B:9A:41:C7:A1:9D:69:27:DD:DA:8B:74:59:54:00:32:BC:C3
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 01856C1C9FA49E51D10B2F37AB84F00C8C42
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JyIrmkHHoZ1pJ93ai3RZVAAyvMM.roa
Signing time: Sun 01 Jan 2023 06:54:53 +0000
ROA not before: Sun 01 Jan 2023 06:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 149428
IP address blocks: 147.185.226.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:9f:a4:9e:51:d1:0b:2f:37:ab:84:f0:0c:8c:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Jan 1 06:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=27222b9a41c7a19d6927ddda8b7459540032bcc3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:91:1a:75:c4:cc:c4:a8:d0:b2:25:e3:a2:ad:
10:f5:4d:98:67:24:fb:a4:31:81:50:04:fa:bc:20:
50:87:33:b6:66:7b:e5:3d:e3:d7:68:f8:c7:d7:06:
2e:6d:45:e3:7d:62:bf:82:27:1f:1c:87:e0:55:b0:
d9:5c:1d:df:c2:f6:60:ef:7d:fa:fd:0a:dc:ca:4b:
1b:4d:64:97:c8:7e:ee:c6:c3:07:63:ea:fe:5a:06:
3d:c2:cc:c6:16:96:cf:83:4b:53:01:41:76:ab:de:
c9:c8:3c:a6:7d:53:97:10:15:de:e8:ef:67:7e:27:
63:97:8c:3b:7b:06:27:44:51:00:4b:c9:07:cd:18:
0e:a0:85:d5:fc:ac:0a:5d:25:7d:2e:76:b6:1e:24:
9e:a6:ea:15:81:1e:34:01:eb:f0:9e:61:76:85:ff:
83:2b:3a:91:ef:47:2a:c8:c2:d9:ad:2c:0a:0d:20:
8e:fe:01:54:c0:3a:3a:dd:b1:95:75:4c:aa:63:84:
8b:bd:0a:25:f0:4d:c0:9e:9c:33:8a:a5:da:6f:99:
75:a0:d9:38:62:d7:ba:44:ad:5b:d9:61:44:b6:02:
8a:2e:65:0d:06:06:cc:bb:9e:2e:3f:e8:ae:ed:f4:
9a:38:c7:2e:1e:92:d0:25:1c:28:87:3f:7f:a9:7a:
f8:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:22:2B:9A:41:C7:A1:9D:69:27:DD:DA:8B:74:59:54:00:32:BC:C3
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/JyIrmkHHoZ1pJ93ai3RZVAAyvMM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.185.226.0/24
Signature Algorithm: sha256WithRSAEncryption
0a:4b:f5:f4:b9:07:c0:05:22:8a:c3:6d:19:22:23:d4:39:d5:
39:3c:5a:94:59:fb:34:76:54:97:7c:ef:05:0a:d8:3f:84:24:
bc:d2:eb:70:6e:ac:62:16:90:c1:70:1f:dc:bd:fe:6a:5f:22:
09:a9:31:5e:e0:ae:b7:fe:19:87:bf:6e:a1:4e:d4:ed:d4:fa:
c3:a3:9c:b3:08:4d:e3:bc:72:63:b2:f1:f5:c3:e2:b7:a8:ae:
5d:e0:07:29:cf:0b:14:b0:84:fe:e2:c5:fd:8a:c6:6b:bc:d9:
aa:33:62:98:e1:52:0f:50:de:a5:1f:3d:d8:a3:8d:55:73:64:
61:ef:44:58:b3:13:44:87:ce:49:e3:d0:bf:45:c4:5b:72:ce:
87:1c:42:bc:49:e3:da:1b:f9:4b:5c:91:3f:06:8d:dd:0a:43:
f0:6d:e5:7d:ee:9b:e7:9e:f5:c2:5a:f7:ce:07:fd:fd:f9:33:
ef:cc:e7:2c:50:f5:f3:5b:58:e4:76:76:2c:dd:b5:ad:14:4e:
88:38:0f:4d:21:6a:41:f5:c4:68:e5:40:a9:67:c2:a2:5e:b5:
01:62:ae:69:c0:35:b9:75:d6:c9:97:cd:76:93:98:ae:a4:c5:
f3:3b:c5:ad:4c:9c:d7:fa:18:9a:9e:c9:e4:b1:7b:13:7c:87:
e5:59:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:28 2024 by rpki-client on console-fra.rpki-client.org