Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/1-5zrHcJk3qQfwRHhn9Gj1iODfLg.roa
File: 1-5zrHcJk3qQfwRHhn9Gj1iODfLg.roa (raw, json)
Hash identifier: ff9af548MYCLFy+kJYM5I7W9nFlkMluAkzdBYCBcwVA=
Subject key identifier: FB:9C:EB:1D:C2:64:DE:A4:1F:C1:11:E1:9F:D1:A3:D6:23:83:7C:B8
Certificate issuer: /CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Certificate serial: 0188A4D5C159662E0551097C6E4B1B6FA8B5
Authority key identifier: 2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/1-5zrHcJk3qQfwRHhn9Gj1iODfLg.roa
Signing time: Sat 10 Jun 2023 10:24:12 +0000
ROA not before: Sat 10 Jun 2023 10:24:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209273
IP address blocks: 217.145.228.0/24 maxlen: 24
217.145.229.0/24 maxlen: 24
212.15.80.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:a4:d5:c1:59:66:2e:05:51:09:7c:6e:4b:1b:6f:a8:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2d28cfa3fd2da9caaa659284758dee67099934f8
Validity
Not Before: Jun 10 10:24:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb9ceb1dc264dea41fc111e19fd1a3d623837cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:9a:58:35:53:1b:ce:26:ed:3a:48:92:52:54:
cc:fc:7a:ea:3f:f6:dd:07:8e:d2:51:4b:b3:82:90:
63:ed:20:e6:0b:27:e8:6a:00:77:59:f2:df:af:4e:
21:63:a5:bf:14:7a:4b:77:bf:5b:36:61:8b:4b:84:
ec:fa:76:ce:e5:dc:55:fa:d6:35:c4:01:af:cb:2b:
e4:fd:16:5d:93:25:f3:1b:66:04:cb:4e:84:99:fc:
9f:2f:35:cc:48:31:54:c7:c1:e2:63:e3:c8:b9:b1:
f9:08:36:72:e7:37:02:5f:16:c3:2e:f0:e7:c9:28:
2a:90:ce:9e:aa:29:80:d6:e0:6f:3a:40:2c:d9:a7:
2b:4c:33:b9:ae:53:ff:25:ff:3e:22:8e:e9:33:7e:
6b:7d:67:ee:46:fc:c5:fe:83:24:9b:0a:39:8b:53:
ba:15:6b:df:4f:3f:53:85:1e:d3:25:70:b4:f4:09:
37:fb:3f:ac:97:3f:84:35:67:fc:e4:ef:22:f5:7a:
7a:91:d7:93:d7:41:41:ac:d4:e6:54:9e:75:76:51:
8d:b8:0e:77:72:d2:84:23:7a:77:58:1d:ca:d1:24:
7a:8a:d1:17:ef:d3:9e:9d:96:65:0f:5b:c5:fe:a9:
ab:c3:f5:ad:f5:3a:f5:3b:1f:b0:06:1f:70:5e:e6:
23:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:9C:EB:1D:C2:64:DE:A4:1F:C1:11:E1:9F:D1:A3:D6:23:83:7C:B8
X509v3 Authority Key Identifier:
keyid:2D:28:CF:A3:FD:2D:A9:CA:AA:65:92:84:75:8D:EE:67:09:99:34:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LSjPo_0tqcqqZZKEdY3uZwmZNPg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/1-5zrHcJk3qQfwRHhn9Gj1iODfLg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/febab0-d93a-4704-9a71-3ad52e8b9628/1/LSjPo_0tqcqqZZKEdY3uZwmZNPg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.15.80.0/24
217.145.228.0/23
Signature Algorithm: sha256WithRSAEncryption
7d:6c:64:8c:94:de:25:9b:e6:43:13:33:71:06:64:d3:a3:62:
2a:cd:da:54:37:fc:6a:4e:c2:dc:fb:3b:25:88:a4:67:ff:39:
0a:4a:ab:cf:61:a5:4c:6f:fb:c1:0f:9a:f2:12:30:4d:31:98:
ea:a9:c4:13:e1:26:04:b4:99:c7:5d:36:64:ee:90:4e:b2:c8:
23:9b:42:89:08:41:a3:91:ca:d6:4c:d1:83:68:38:d5:e9:ef:
91:30:6d:c9:ee:c2:f9:14:28:3c:b8:84:27:45:c1:7c:85:38:
14:63:46:4a:28:ae:f8:17:d9:d6:10:1a:22:8e:3a:ed:76:3d:
7d:a1:f8:b7:87:12:fc:63:ce:a3:65:b0:9c:af:f6:0f:29:8a:
62:ad:d1:85:cd:d8:93:02:0d:20:d2:0b:70:fd:27:91:d5:5f:
d1:1d:6d:eb:90:2d:51:0e:e9:c5:c5:3c:7f:20:a0:1f:8b:e7:
45:4d:5c:a8:52:48:29:bb:96:d7:6c:90:54:d5:5f:0a:63:28:
fa:7a:04:fb:60:26:1b:9a:0f:94:ae:36:b8:0d:c8:6e:3d:1a:
6e:3d:18:07:3c:b5:69:2f:e5:f5:ce:cf:a6:02:77:1d:1c:14:
ec:e8:af:38:c2:ec:df:3e:a7:da:e8:23:1e:8e:05:d6:b3:f5:
28:a4:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 4 15:21:14 2023 by rpki-client on console-ams.rpki-client.org