Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/4dOkJCFPueLuF8ihs5bW9YxLX3s.roa
File: 4dOkJCFPueLuF8ihs5bW9YxLX3s.roa (raw, json)
Hash identifier: B/yqgSHDD0zvIASjtlRunnqQ4I0l0Tz/snOz+IK254g=
Subject key identifier: E1:D3:A4:24:21:4F:B9:E2:EE:17:C8:A1:B3:96:D6:F5:8C:4B:5F:7B
Certificate issuer: /CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Certificate serial: 01856EEFF6876BD5266D414D23B0D85D280D
Authority key identifier: F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/4dOkJCFPueLuF8ihs5bW9YxLX3s.roa
Signing time: Sun 01 Jan 2023 20:04:58 +0000
ROA not before: Sun 01 Jan 2023 20:04:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205269
IP address blocks: 185.247.216.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:f6:87:6b:d5:26:6d:41:4d:23:b0:d8:5d:28:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65e7423d3f7b1b2e7acc1ba1cee0240b7d679d6
Validity
Not Before: Jan 1 20:04:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1d3a424214fb9e2ee17c8a1b396d6f58c4b5f7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2c:64:6f:3a:2b:cb:bd:13:91:37:51:0d:71:
52:38:d3:d9:bc:9d:06:04:e5:52:cd:0a:c2:a6:7d:
95:fb:d0:4f:d3:42:6f:8f:68:f3:50:45:ce:fe:58:
2b:4c:be:74:f6:7f:64:d0:da:4c:35:35:78:e9:59:
5a:f9:8a:b4:00:02:d1:95:ee:d3:ee:6a:32:e6:13:
4d:d4:c6:c1:8e:35:e1:8b:95:20:98:c6:7a:86:b0:
44:ff:3c:86:82:51:28:2a:0a:97:b1:f3:86:de:ba:
62:45:07:b8:cf:8d:0f:0f:ca:45:73:b0:fe:87:c6:
f3:36:17:31:bb:54:a6:a7:33:fa:45:4e:87:2e:d9:
63:40:fa:93:fc:da:98:fe:4a:6e:05:9c:66:7a:39:
4b:e2:bf:80:17:23:a0:80:3d:8e:26:02:42:75:f0:
a1:8e:bc:14:b8:e8:ec:61:05:d5:2c:3a:50:94:5a:
0b:3c:20:c9:9d:b0:13:b4:81:3c:4a:eb:9e:ea:fe:
0d:f7:fd:a6:d2:84:97:ec:d0:fb:80:34:72:c5:9f:
d4:90:66:5e:f1:24:a5:4e:a6:13:ff:9f:07:cc:e9:
22:a2:ef:2f:1a:5a:2c:27:26:57:46:87:48:70:f3:
7f:cd:bd:bc:6c:87:2f:ee:03:5b:3c:6c:52:5d:2b:
3b:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D3:A4:24:21:4F:B9:E2:EE:17:C8:A1:B3:96:D6:F5:8C:4B:5F:7B
X509v3 Authority Key Identifier:
keyid:F6:5E:74:23:D3:F7:B1:B2:E7:AC:C1:BA:1C:EE:02:40:B7:D6:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l50I9P3sbLnrMG6HO4CQLfWedY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/4dOkJCFPueLuF8ihs5bW9YxLX3s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/013153-b63b-4074-ac5c-f4dd6639f875/1/9l50I9P3sbLnrMG6HO4CQLfWedY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.216.0/22
Signature Algorithm: sha256WithRSAEncryption
b5:3e:89:76:18:81:06:ca:4e:a3:26:d9:fa:64:27:24:70:1f:
d4:5a:a1:9b:46:cf:0a:4c:68:76:27:69:b7:00:c0:27:a4:06:
df:4d:8f:76:b8:c6:e3:6e:a9:c7:c5:91:86:d7:61:a7:35:9c:
73:7a:9f:62:6e:95:ee:33:3c:db:aa:03:c2:fa:86:af:09:94:
76:20:d0:eb:d4:1e:25:25:0f:51:9f:4e:88:79:f6:b7:fc:48:
16:19:04:c0:76:7c:c9:4f:07:09:17:cd:14:2e:3d:63:dc:6c:
17:a0:c6:96:35:f3:f4:df:3e:76:1c:a7:3d:bd:71:5f:8f:e6:
3e:06:24:74:84:59:be:68:84:07:e5:f6:9b:bf:61:05:0f:23:
1e:f8:1a:f9:d5:26:97:24:73:e4:0c:9c:79:9f:7e:06:3f:c3:
d4:7d:4a:00:1a:05:ec:cf:79:52:9b:ee:23:9b:a0:e3:a3:01:
1a:ba:08:8e:66:26:d0:ad:05:8b:8b:61:32:47:02:d4:fd:74:
a5:4d:28:ec:7a:de:99:2f:a8:86:be:26:de:59:b5:50:3a:0a:
4e:46:78:5f:09:59:e6:fe:f5:ed:ac:c3:3e:3f:79:89:89:65:
a4:52:1c:cf:90:94:bd:fd:56:e8:a6:53:69:9b:41:1c:ed:89:
ec:e3:e3:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:35 2024 by rpki-client on console-fra.rpki-client.org