Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/MyA4B2vcZjDE-2FokKTO7t_WSrM.roa
File: MyA4B2vcZjDE-2FokKTO7t_WSrM.roa (raw, json)
Hash identifier: asKSoHs3ZbJo6Zfuuhd6FU8vI8cjW0Dt8kLQBmYbwqs=
Subject key identifier: 33:20:38:07:6B:DC:66:30:C4:FB:61:68:90:A4:CE:EE:DF:D6:4A:B3
Certificate issuer: /CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Certificate serial: 01857246EE3384059251125EDF7C9E81695E
Authority key identifier: 54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/MyA4B2vcZjDE-2FokKTO7t_WSrM.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204440
IP address blocks: 185.248.248.0/24 maxlen: 24
185.248.248.0/23 maxlen: 24
185.248.251.0/24 maxlen: 24
185.248.250.0/24 maxlen: 24
185.248.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ee:33:84:05:92:51:12:5e:df:7c:9e:81:69:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e5d6917dc2dabfb5caf907c3e745149502c90e
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=332038076bdc6630c4fb616890a4ceeedfd64ab3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:14:1d:c1:a3:bb:f1:a0:bf:fe:3d:4f:ca:38:
4b:8e:ce:a6:b3:db:e2:ab:2f:58:c5:68:a5:43:2d:
42:6a:b2:eb:ba:2c:97:64:c5:78:62:ce:a6:38:46:
5c:fc:6b:ca:94:e0:17:61:e8:fe:11:9c:8b:f2:1c:
49:58:1b:b6:b3:2a:39:c4:34:2f:0d:e7:f1:01:ce:
bb:d9:93:bf:fd:33:25:86:95:58:b1:7b:8a:0a:0f:
8d:2d:ed:87:85:b8:85:36:50:74:b6:79:40:a0:1f:
22:00:ed:83:82:11:fb:a3:8e:11:d4:63:ae:2b:45:
d6:99:75:25:e3:7f:db:4e:a4:8d:af:a1:10:e8:e6:
73:11:1d:ad:95:d1:51:e0:d8:a3:2b:31:a0:7e:4e:
37:f2:9a:69:b6:92:ba:45:ed:e5:e5:12:15:13:ed:
b4:ee:30:2e:48:dc:15:af:b8:1a:14:35:5f:24:a1:
bd:c9:42:29:c5:5c:b0:ad:3b:8c:8a:f9:58:70:bf:
a0:bf:c1:fb:7f:2b:b3:b4:7e:95:c8:c2:65:a9:34:
d7:4f:5f:ae:7f:b7:02:d3:51:a1:be:b8:70:f1:d1:
e2:bd:f0:9e:29:34:6f:dd:aa:07:77:85:d7:c9:3f:
49:63:be:ff:eb:52:96:ee:c9:d3:60:49:c9:dd:69:
22:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:20:38:07:6B:DC:66:30:C4:FB:61:68:90:A4:CE:EE:DF:D6:4A:B3
X509v3 Authority Key Identifier:
keyid:54:E5:D6:91:7D:C2:DA:BF:B5:CA:F9:07:C3:E7:45:14:95:02:C9:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/MyA4B2vcZjDE-2FokKTO7t_WSrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/479d06-9e84-4f76-8ae0-131d2916488c/1/VOXWkX3C2r-1yvkHw-dFFJUCyQ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.248.248.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:56:9b:bb:88:27:8d:07:8b:8c:c7:4b:aa:e2:ee:ac:1a:63:
24:fa:c5:ec:3e:e6:b6:98:5c:0e:68:aa:56:17:08:fb:72:93:
84:d9:6b:85:84:41:15:bd:5b:39:5f:5b:92:ae:02:b7:60:89:
62:1c:c8:be:7c:61:dd:aa:6b:88:b7:c4:a0:59:33:b1:f8:1b:
f0:bb:c6:7f:51:76:f1:90:6e:ac:9a:d9:d4:dd:31:11:da:a1:
6d:30:bf:99:f6:11:5e:d6:f5:52:0a:c5:9a:f2:77:bd:17:9c:
e8:97:5d:3c:bd:67:19:dd:c9:be:c0:76:34:f1:ca:f4:62:f5:
27:e5:9f:ec:ac:5c:7c:d7:ff:cd:4c:26:04:58:c7:91:9e:c4:
5a:e8:45:fa:71:8e:55:18:aa:53:5c:c1:0a:a0:42:b8:e5:1e:
34:24:10:67:1c:d5:cb:28:7f:12:e8:88:3a:3c:b4:44:d2:45:
58:06:b5:15:6d:24:c7:54:5e:24:07:e2:a7:ce:f4:87:95:4e:
8a:0b:de:ac:89:06:bf:5a:80:b4:e0:40:ba:d6:bc:35:df:76:
46:b3:f0:08:61:2d:e8:6e:84:3b:29:20:96:8a:31:22:17:28:
0c:5c:07:cc:f2:9b:a6:a5:ae:3d:b4:eb:ae:03:ea:01:1f:c4:
e6:45:20:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:38 2024 by rpki-client on console-ams.rpki-client.org