Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/5d0zPqjq755ygggQ_B90nQfF2-8.roa
File: 5d0zPqjq755ygggQ_B90nQfF2-8.roa (raw, json)
Hash identifier: 6tf0i2XMh1AX/bcao2k93+EgcRUFVUH2IYBuyCBhZzA=
Subject key identifier: E5:DD:33:3E:A8:EA:EF:9E:72:82:08:10:FC:1F:74:9D:07:C5:DB:EF
Certificate issuer: /CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Certificate serial: 0185713092673A5BEE5B110AAA941BE9C334
Authority key identifier: FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/5d0zPqjq755ygggQ_B90nQfF2-8.roa
Signing time: Mon 02 Jan 2023 06:34:46 +0000
ROA not before: Mon 02 Jan 2023 06:34:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12859
IP address blocks: 185.214.148.0/22 maxlen: 22
46.182.182.0/23 maxlen: 23
46.182.180.0/23 maxlen: 23
2a04:e1c0:1::/48 maxlen: 48
2a0b:9cc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:30:92:67:3a:5b:ee:5b:11:0a:aa:94:1b:e9:c3:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa067162e2209dc6c216ba6cfcd8be6d7386179
Validity
Not Before: Jan 2 06:34:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e5dd333ea8eaef9e72820810fc1f749d07c5dbef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:51:8d:cc:ce:68:c1:cb:e7:56:d0:3c:e9:31:
a9:9d:4c:83:b2:23:62:09:03:bf:04:37:4f:1c:83:
d9:fa:95:15:2b:12:06:cf:60:6c:4e:0e:35:a1:33:
e2:76:62:44:4f:12:a8:19:1e:d6:57:29:94:34:16:
bc:a7:ab:35:58:fe:45:db:ca:db:c7:85:ef:24:22:
1d:be:df:f9:f2:a8:ce:d7:70:07:83:b3:e7:49:f6:
ca:73:29:73:31:ca:33:78:8f:31:42:0e:c2:68:34:
c5:d7:80:ae:3e:5f:9c:21:59:76:b6:1b:67:a4:08:
40:75:60:3e:69:13:3c:89:74:8d:8a:2c:b0:70:d9:
af:51:1c:03:1c:66:12:fb:f9:ab:b4:08:ad:c7:b5:
c8:36:af:cc:9e:d4:9f:a9:3b:ac:f2:04:de:ab:32:
69:c7:76:06:8e:fd:1d:28:19:99:db:1c:b8:d5:a8:
db:cc:80:db:43:93:c2:92:8a:57:c6:91:bd:28:09:
f7:48:2a:32:76:80:2b:a8:02:ca:93:24:8b:25:c9:
e1:31:f5:29:48:3c:4b:8d:c7:09:47:74:d5:29:1d:
8e:52:6f:e0:61:b0:36:43:b0:54:c2:24:60:42:95:
82:9d:86:42:73:df:58:1e:c0:62:a6:ed:76:cf:a3:
3a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:DD:33:3E:A8:EA:EF:9E:72:82:08:10:FC:1F:74:9D:07:C5:DB:EF
X509v3 Authority Key Identifier:
keyid:FA:A0:67:16:2E:22:09:DC:6C:21:6B:A6:CF:CD:8B:E6:D7:38:61:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qBnFi4iCdxsIWumz82L5tc4YXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/5d0zPqjq755ygggQ_B90nQfF2-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b79a00-ade4-4776-a334-29da87323a2d/1/1-qBnFi4iCdxsIWumz82L5tc4YXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.182.180.0/22
185.214.148.0/22
IPv6:
2a04:e1c0:1::/48
2a0b:9cc0::/29
Signature Algorithm: sha256WithRSAEncryption
08:fd:eb:e9:48:7b:fc:bc:6c:39:ba:32:eb:10:ec:a2:f2:95:
df:25:1f:56:41:cd:8a:21:2c:40:3c:f2:2d:13:e2:b1:83:ea:
e9:bc:ad:bc:22:52:8c:ce:23:04:bc:b8:e6:16:b5:bb:f3:e8:
f9:c2:77:ce:fe:ed:ff:11:46:9d:32:2a:b5:2d:fc:65:8b:ef:
08:b1:84:d5:52:d2:e4:87:57:b1:42:c7:c7:ae:04:5a:18:1a:
fa:20:bc:82:9d:60:bf:7f:c3:3a:13:30:6a:86:91:bb:0f:6e:
8d:a6:ce:89:dc:83:63:5a:a9:ea:27:10:57:f5:c0:78:e0:40:
04:c5:87:b3:14:e0:29:7e:ef:c4:f8:59:a8:eb:51:94:1f:4a:
ed:4b:94:e0:ae:07:b8:c9:79:c0:4f:62:df:4f:4d:92:f2:0c:
ec:f4:55:7a:69:0d:ce:59:02:ef:cb:b3:6a:c5:ec:b2:8a:90:
79:3d:e4:5b:89:10:f8:dd:af:ec:c0:f7:23:22:d1:d3:57:ff:
03:8f:d0:ca:ee:01:27:e1:b5:1e:84:d8:2e:6d:f8:fc:9d:b1:
9a:4e:4b:35:5d:18:90:32:ea:d6:a0:a8:76:cc:5b:70:a1:1b:
77:61:ac:c6:3f:b4:59:6c:ee:06:e4:25:99:37:3f:9c:0a:6c:
e3:61:3f:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:40 2023 by rpki-client on console-ams.rpki-client.org