Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l_iFld0p0IPEQayDbDwTQiW6lE.roa
File: 1-l_iFld0p0IPEQayDbDwTQiW6lE.roa (raw, json)
Hash identifier: RwfIARlRMk9b16O6qRnSEu7rIw/O+uEf6n7ciRmSHlI=
Subject key identifier: FA:5F:E2:16:57:74:A7:42:0F:11:06:B2:0D:B0:F0:4D:08:96:EA:51
Certificate issuer: /CN=5fbe65ae23f207fa695255f55a907ac1608be094
Certificate serial: 0187F5CDEC6D781DE097FE4B814C5D9B7FD8
Authority key identifier: 5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l_iFld0p0IPEQayDbDwTQiW6lE.roa
Signing time: Sun 07 May 2023 10:42:06 +0000
ROA not before: Sun 07 May 2023 10:42:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 79.133.180.0/24 maxlen: 24
185.244.48.0/24 maxlen: 24
5.253.63.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:f5:cd:ec:6d:78:1d:e0:97:fe:4b:81:4c:5d:9b:7f:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fbe65ae23f207fa695255f55a907ac1608be094
Validity
Not Before: May 7 10:42:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa5fe2165774a7420f1106b20db0f04d0896ea51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:13:79:58:dd:f9:90:e7:cd:0a:a2:45:21:66:
96:26:58:b0:83:58:f9:64:bf:3a:07:5f:3d:70:5a:
fd:12:cc:24:53:85:d0:dd:cb:8e:b4:1f:63:89:01:
18:2a:e3:c6:5b:e0:c8:c2:da:22:af:86:ab:d4:ec:
a8:17:60:6b:f4:73:ce:90:97:3f:55:d0:18:da:56:
3e:da:ce:57:ce:5e:a2:be:ab:1f:4e:a9:95:dd:49:
95:43:fe:b8:92:db:c2:79:f2:4b:6b:db:1c:89:29:
f0:57:69:d6:10:52:c4:41:cd:09:a2:4e:7f:21:b5:
9e:b7:6a:ad:65:18:7d:02:2f:ea:83:0e:70:93:06:
3b:dd:1a:ea:8a:aa:4a:dc:5d:16:59:20:c9:33:11:
b2:65:2a:e3:c9:d6:8c:06:cf:51:41:d5:e1:7c:24:
d9:de:17:c3:9d:7b:3f:e3:3c:47:ab:1e:0a:c6:60:
33:e5:f5:fe:9f:53:45:08:aa:e7:f7:db:e9:c3:05:
d0:05:45:60:be:cd:a2:33:4a:44:a3:20:3f:20:e0:
d2:07:53:59:f9:15:15:8d:77:2c:f4:35:a9:24:cf:
a1:c2:65:a2:f8:44:2f:93:f1:ce:6d:c9:c9:0a:59:
2a:5c:d1:c9:b2:aa:76:90:cc:72:fe:c5:7b:72:98:
16:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5F:E2:16:57:74:A7:42:0F:11:06:B2:0D:B0:F0:4D:08:96:EA:51
X509v3 Authority Key Identifier:
keyid:5F:BE:65:AE:23:F2:07:FA:69:52:55:F5:5A:90:7A:C1:60:8B:E0:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X75lriPyB_ppUlX1WpB6wWCL4JQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/1-l_iFld0p0IPEQayDbDwTQiW6lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/f4319f-3dfb-42ea-ba95-492ab372689d/1/X75lriPyB_ppUlX1WpB6wWCL4JQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.63.0/24
79.133.180.0/24
185.244.48.0/24
Signature Algorithm: sha256WithRSAEncryption
63:25:5e:b2:1e:f2:52:c1:e3:a1:c5:98:b3:f0:a3:3a:82:e4:
43:f7:6a:0c:6a:c0:66:3c:0e:15:6e:d3:5b:73:36:33:4e:f6:
00:40:c3:9e:7d:ce:b7:a5:7f:87:d3:0b:fa:0d:2d:b8:fa:d3:
a5:3a:a2:aa:2f:12:d1:36:35:64:a1:3b:62:5a:10:29:ca:63:
8e:30:89:04:9f:48:c8:ed:d3:55:48:88:2b:6f:4c:c2:70:17:
3e:b0:bb:d0:97:ea:ae:69:3a:3e:e4:cf:1e:a5:f4:92:fe:2b:
d1:ba:8d:52:f4:46:e4:00:73:12:ea:d6:70:4d:95:cc:26:cd:
e7:ff:94:10:dc:c6:63:03:a9:88:6b:f3:ed:0b:09:ae:16:09:
e2:09:34:50:d4:31:7d:96:db:92:c7:5f:1b:3f:72:ad:8d:dd:
49:81:f2:aa:71:fb:0f:0a:0a:5e:6e:d5:98:c1:3a:a6:67:15:
35:ae:d9:9d:0f:f6:dd:de:bd:e9:b9:cb:25:33:1a:32:34:49:
00:a3:1d:b7:f9:5f:49:15:ce:5c:e7:79:b0:9c:10:f2:e4:93:
f0:dc:22:38:2e:ea:30:96:ee:66:76:49:ad:36:c2:28:6f:0a:
57:b1:02:de:cd:cb:cb:33:15:01:6a:40:d9:c9:24:f3:b3:c9:
db:cc:01:0b
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Sep 21 10:51:37 2023 by rpki-client on console-ams.rpki-client.org