Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/CfNG1KQxwPSKAILpELhgQl8BrNY.roa
File: CfNG1KQxwPSKAILpELhgQl8BrNY.roa (raw, json)
Hash identifier: tfYlPpDP6EfTzzX8I+DfiFTCB7ZzS/LnBbaSSQelvS4=
Subject key identifier: 09:F3:46:D4:A4:31:C0:F4:8A:00:82:E9:10:B8:60:42:5F:01:AC:D6
Certificate issuer: /CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Certificate serial: 018872A369591202AD6FC54D45DD10EDC368
Authority key identifier: 43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/CfNG1KQxwPSKAILpELhgQl8BrNY.roa
Signing time: Wed 31 May 2023 16:28:11 +0000
ROA not before: Wed 31 May 2023 16:28:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41327
IP address blocks: 5.183.110.0/24 maxlen: 24
185.198.210.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:72:a3:69:59:12:02:ad:6f:c5:4d:45:dd:10:ed:c3:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4384f6fa6decced5578a85a51e0bd65701ea34ec
Validity
Not Before: May 31 16:28:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=09f346d4a431c0f48a0082e910b860425f01acd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:cf:57:31:0a:b4:a3:5d:a6:9a:24:31:97:08:
6c:2c:51:42:b8:ec:27:ef:4d:0d:b8:39:64:7b:40:
f9:f4:75:c8:f8:6c:92:d5:e7:91:33:73:fa:af:69:
2b:33:c9:33:e1:57:34:69:2a:0f:3c:36:da:c8:d8:
57:67:b7:f4:e5:7d:5b:57:49:08:81:52:6d:ba:ba:
5b:a6:fb:65:bb:35:ff:e1:73:7d:c3:55:be:22:d4:
25:e3:3c:5e:ca:1b:7f:9b:e7:d1:f0:c7:5f:a1:9d:
a8:6a:7d:06:90:79:dc:ee:e0:f7:6c:ba:ad:07:ef:
37:1d:8b:a0:87:88:e8:2b:1b:a7:3e:be:c1:9d:8a:
02:da:e2:76:63:ba:75:77:1a:f9:23:c9:82:30:92:
87:74:2d:10:f8:60:c9:fa:54:c8:25:e1:23:53:4f:
45:bf:8d:f9:1a:e1:8a:f1:50:ea:36:92:32:cb:f8:
6a:45:de:49:b0:13:e9:00:26:ed:57:f1:cb:fb:d5:
f3:dc:e4:5b:b4:5a:7c:6a:38:a6:0f:40:6d:5b:3f:
09:8e:f5:91:33:7b:e5:d6:79:88:65:78:06:a5:94:
4d:af:c6:d7:f7:33:06:ea:22:20:ee:d1:e6:e5:fc:
52:39:ee:e1:8b:03:f5:18:7b:2b:5e:8b:ae:d5:4d:
e0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F3:46:D4:A4:31:C0:F4:8A:00:82:E9:10:B8:60:42:5F:01:AC:D6
X509v3 Authority Key Identifier:
keyid:43:84:F6:FA:6D:EC:CE:D5:57:8A:85:A5:1E:0B:D6:57:01:EA:34:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Q4T2-m3sztVXioWlHgvWVwHqNOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/CfNG1KQxwPSKAILpELhgQl8BrNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/b698bd-8dd2-40be-82a3-1b13bd4566a5/1/Q4T2-m3sztVXioWlHgvWVwHqNOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.110.0/24
185.198.210.0/23
Signature Algorithm: sha256WithRSAEncryption
6e:d8:35:8f:66:c8:05:db:50:38:7f:c2:0d:98:18:9d:3a:bf:
65:43:2a:dc:5f:83:97:39:c0:74:1c:57:b9:6a:2a:6c:c0:6f:
d4:a9:53:3b:59:66:12:0b:f6:42:91:38:95:96:2f:2a:e8:ef:
f4:da:6c:bf:f2:90:60:87:ef:14:7c:df:83:8e:4a:2f:b8:ef:
29:bb:33:0f:7f:60:96:05:08:1d:46:8a:29:2f:6d:b6:f3:ca:
99:51:61:42:7a:0a:aa:a6:0e:60:64:2d:a1:61:d7:04:50:84:
d7:26:07:1a:fd:2f:1a:48:fe:b5:1a:8e:65:69:12:d2:62:8c:
2a:01:da:e8:5c:23:c2:22:f1:30:54:10:41:cd:b1:2a:b4:c1:
d5:0f:c2:06:7d:44:52:59:e4:28:88:11:da:99:5c:ad:8c:31:
c1:fa:d0:4e:13:82:b1:a6:72:c2:e9:0f:f5:73:a4:7e:60:16:
d7:6f:9b:4b:1d:58:5e:8c:fa:f0:b9:77:34:6c:15:f2:5a:ab:
2a:6a:35:37:da:4e:1f:6e:61:d4:85:c0:45:97:78:ec:69:22:
a9:d1:43:37:59:b0:d1:bf:85:29:92:4f:f4:d5:2a:84:7a:c1:
7c:53:11:82:7e:22:70:ab:5f:f6:78:b8:24:70:09:81:a9:b9:
56:e5:52:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:27 2024 by rpki-client on console-fra.rpki-client.org