Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/nFQ_4f0Y150biBwWzMR2QqXuLDg.roa
File: nFQ_4f0Y150biBwWzMR2QqXuLDg.roa (raw, json)
Hash identifier: Bpjrp9KKgy7l2jd0gfMUAH3FwFtIANTwgPVDKb2fq+k=
Subject key identifier: 9C:54:3F:E1:FD:18:D7:9D:1B:88:1C:16:CC:C4:76:42:A5:EE:2C:38
Certificate issuer: /CN=1594f00471e248abe394d521e96cba9630d8520e
Certificate serial: 01856E0AD8E9315095DE250B1F614238FFC8
Authority key identifier: 15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/nFQ_4f0Y150biBwWzMR2QqXuLDg.roa
Signing time: Sun 01 Jan 2023 15:54:42 +0000
ROA not before: Sun 01 Jan 2023 15:54:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49619
IP address blocks: 185.252.128.0/22 maxlen: 31
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:d8:e9:31:50:95:de:25:0b:1f:61:42:38:ff:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1594f00471e248abe394d521e96cba9630d8520e
Validity
Not Before: Jan 1 15:54:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c543fe1fd18d79d1b881c16ccc47642a5ee2c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8a:28:01:0b:91:d9:72:9f:a1:55:3a:c1:66:
ab:3d:46:16:8c:e0:27:70:5f:fa:07:1e:22:92:bc:
82:38:d6:9f:92:b8:52:eb:47:cc:07:2c:25:ba:55:
ec:23:f4:56:21:97:c0:d4:13:88:9c:76:fd:c1:0f:
fa:89:aa:92:49:2d:0a:5d:41:5c:99:28:95:dd:07:
5f:36:27:dc:f0:2a:65:75:29:43:19:ff:ee:b0:0b:
5b:2c:87:b5:64:b5:5f:98:02:a4:ec:13:35:80:1f:
e0:3c:56:32:ec:3c:a7:bc:b0:72:d9:a5:13:71:04:
86:ec:c9:02:02:6c:3e:8f:ba:fb:f9:02:38:5d:15:
0c:bd:11:ad:bb:71:83:38:4f:df:54:08:e3:24:fb:
8a:10:17:87:94:66:3f:45:e4:f9:99:c6:ee:30:01:
d9:25:b4:ca:ad:b7:43:4e:68:b3:47:77:23:b0:80:
b5:3a:99:84:d8:6a:92:71:45:2a:73:81:de:24:1b:
b4:96:93:ca:1a:55:80:11:c0:ab:57:51:8d:c8:71:
e7:27:a6:7e:f8:02:32:21:99:3d:05:17:fb:07:08:
07:21:4f:2d:bb:ea:f4:60:fb:6f:25:e8:d8:db:06:
79:46:1b:6a:fb:d9:69:c7:55:16:43:66:07:e3:15:
e3:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:54:3F:E1:FD:18:D7:9D:1B:88:1C:16:CC:C4:76:42:A5:EE:2C:38
X509v3 Authority Key Identifier:
keyid:15:94:F0:04:71:E2:48:AB:E3:94:D5:21:E9:6C:BA:96:30:D8:52:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/nFQ_4f0Y150biBwWzMR2QqXuLDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/79a64e-069f-499d-a631-8cd42cede220/1/FZTwBHHiSKvjlNUh6Wy6ljDYUg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.128.0/22
Signature Algorithm: sha256WithRSAEncryption
9f:84:1a:dd:9c:19:7f:34:3f:b5:b8:51:81:c7:4e:68:dd:f0:
0b:c4:fa:f5:a1:cf:68:c7:f1:41:c1:34:6b:dd:c6:dd:1c:f3:
77:16:f4:fb:43:d7:1c:3d:d1:16:31:b5:72:d7:04:99:dd:8d:
9e:08:56:59:7a:b6:03:69:51:06:1a:1e:b7:0c:b5:9f:d2:9c:
63:dc:02:e0:bd:20:0e:d0:aa:6c:df:6c:eb:2c:4d:a3:47:94:
ae:6c:ee:85:fc:46:08:9d:59:8f:30:7e:9c:43:a4:9a:80:c4:
e4:0e:67:dc:ec:fa:d3:67:7a:28:f1:e5:96:ce:2e:ca:ef:5e:
23:87:d2:b6:45:58:4e:3e:3e:6b:1d:27:73:0d:99:e6:ba:d8:
25:cf:2e:1f:3d:34:89:3a:58:2d:c0:a4:4d:56:d6:f7:6a:4d:
eb:15:59:d6:40:6d:fd:00:58:be:3b:cc:0d:1b:4f:99:9c:da:
2e:9b:e6:b2:39:0a:8d:de:c9:82:0b:32:51:4a:f1:05:88:10:
7c:30:2e:88:3d:ed:1c:5f:b8:77:5e:9c:fd:d7:64:fd:cb:6b:
2d:15:42:8e:09:89:a3:26:39:e2:31:33:04:c4:03:73:1c:a9:
71:39:12:11:9b:be:1d:15:77:50:4d:be:09:6b:e6:9f:d0:9e:
75:96:fa:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:25 2024 by rpki-client on console-ams.rpki-client.org