Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WpgC_tQhdvaUvXqnoo___Ot4v6A.roa
File: WpgC_tQhdvaUvXqnoo___Ot4v6A.roa (raw, json)
Hash identifier: XhuaBhKC7ok85dX3TxlT5npG+eiyUVKeladUdaT//+0=
Subject key identifier: 5A:98:02:FE:D4:21:76:F6:94:BD:7A:A7:A2:8F:FF:FC:EB:78:BF:A0
Certificate issuer: /CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Certificate serial: 018612217BB72295943EE8BFFDE7E00338FE
Authority key identifier: F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WpgC_tQhdvaUvXqnoo___Ot4v6A.roa
Signing time: Thu 02 Feb 2023 12:37:09 +0000
ROA not before: Thu 02 Feb 2023 12:37:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 262287
IP address blocks: 185.48.52.0/22 maxlen: 22
43.229.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:12:21:7b:b7:22:95:94:3e:e8:bf:fd:e7:e0:03:38:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fb32d2266b1f9bce57cac98bc0247f2c9197f2
Validity
Not Before: Feb 2 12:37:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5a9802fed42176f694bd7aa7a28ffffceb78bfa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cf:f5:48:e7:29:46:3e:21:eb:72:d3:30:4d:
5f:e2:68:78:ff:8c:1a:fe:46:dc:0b:64:ee:47:09:
6c:2f:5b:74:e7:09:9e:4f:94:55:36:bd:18:5d:53:
9f:98:36:f1:a4:c4:45:4c:91:6f:94:25:3c:fb:af:
a7:e9:63:78:7e:15:e5:b7:59:45:05:dd:a4:c6:cf:
5a:cf:55:3e:7c:ce:53:64:57:d7:67:ac:d4:ef:f8:
aa:87:1f:88:f0:6f:6d:f0:4f:d7:a4:21:26:21:8d:
bb:17:c5:ad:0f:e0:83:e1:60:f7:a3:8f:0c:6c:39:
0a:84:87:bf:ab:f2:b4:92:02:64:16:fe:d2:9d:5d:
1f:10:a3:5e:2a:28:0a:b2:9c:4f:3e:ba:50:79:8b:
b1:0c:3c:1a:02:3f:63:a5:a6:eb:3d:89:e2:2e:24:
c3:e0:2e:7c:4b:9a:91:a2:c6:91:af:20:4d:01:2f:
a2:cb:33:31:5f:3f:47:e2:eb:c9:43:66:82:22:9e:
5d:80:23:9c:ce:71:26:a4:38:ad:8b:ea:c1:df:0b:
df:bc:e2:d3:c1:4c:5a:06:e9:ab:c9:05:cb:2f:31:
93:f6:e4:0b:73:26:a9:f7:a0:49:6a:1a:e8:91:b1:
37:17:7b:08:12:21:ee:30:ab:da:8c:61:61:36:29:
49:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:98:02:FE:D4:21:76:F6:94:BD:7A:A7:A2:8F:FF:FC:EB:78:BF:A0
X509v3 Authority Key Identifier:
keyid:F5:FB:32:D2:26:6B:1F:9B:CE:57:CA:C9:8B:C0:24:7F:2C:91:97:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fsy0iZrH5vOV8rJi8AkfyyRl_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/WpgC_tQhdvaUvXqnoo___Ot4v6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/fb42ec-10b4-4dcf-bef0-2d143d7b853c/1/9fsy0iZrH5vOV8rJi8AkfyyRl_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.229.8.0/22
185.48.52.0/22
Signature Algorithm: sha256WithRSAEncryption
93:cd:39:75:0d:19:d2:45:82:96:bd:d8:f7:d7:c4:e2:84:66:
fd:89:dc:77:bd:56:24:e8:76:4d:db:6b:1b:96:95:7f:ae:e8:
4d:20:a9:44:14:45:9d:55:cd:cb:8f:68:9e:d8:2c:be:6b:ce:
43:b3:21:35:4a:59:93:90:01:fe:ff:3d:56:09:d0:b7:68:2d:
18:58:56:95:bb:59:ca:3a:b8:94:a4:ca:5c:3a:0d:ad:13:d8:
e5:f9:0c:6f:56:ab:aa:60:bd:43:ad:5c:3d:20:8a:3e:ab:b0:
af:9d:bc:a2:5d:78:b3:5c:5f:c1:e9:0a:c3:92:0d:1d:a8:e8:
b5:08:cd:bb:d1:00:1a:6b:15:7c:4e:41:af:8e:bf:34:3c:c6:
ff:11:f5:b6:1f:20:31:65:e1:b2:b3:ff:2f:48:38:b6:9f:6c:
e7:b1:46:0f:5d:db:88:20:8b:4f:b7:71:4b:5f:a2:47:a4:a4:
b3:50:01:de:62:9f:62:7b:39:9e:f9:85:a0:1e:e8:8e:f0:a8:
81:6e:60:e1:84:93:9c:3b:11:48:df:ed:df:6d:39:34:67:19:
11:12:d7:3a:21:0d:0c:f9:f7:4d:ba:94:3c:32:79:f0:73:ce:
9a:1e:c3:06:38:42:7a:f3:5d:5a:b4:7d:4d:9b:75:4c:ac:e8:
cb:8c:04:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:39 2023 by rpki-client on console-fra.rpki-client.org