Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/_K4i1CbscJQNkUk8tcQb1XiYljs.roa
File: _K4i1CbscJQNkUk8tcQb1XiYljs.roa (raw, json)
Hash identifier: DOWYJNS0xyhs+UkoE2JGiH2ksMY9y+8tQNJo5rjcIGI=
Subject key identifier: FC:AE:22:D4:26:EC:70:94:0D:91:49:3C:B5:C4:1B:D5:78:98:96:3B
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01874D33361DB4204674590DFCBDF573A293
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/_K4i1CbscJQNkUk8tcQb1XiYljs.roa
Signing time: Tue 04 Apr 2023 16:56:54 +0000
ROA not before: Tue 04 Apr 2023 16:56:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203020
IP address blocks: 171.22.248.0/23 maxlen: 23
171.22.251.0/24 maxlen: 24
171.22.250.0/24 maxlen: 24
45.146.204.0/22 maxlen: 24
45.82.223.0/24 maxlen: 24
45.135.18.0/23 maxlen: 24
85.208.32.0/22 maxlen: 24
5.183.94.0/24 maxlen: 24
185.244.8.0/23 maxlen: 23
185.244.10.0/24 maxlen: 24
185.244.11.0/24 maxlen: 24
193.42.226.0/23 maxlen: 23
194.116.250.0/23 maxlen: 23
193.42.224.0/23 maxlen: 23
194.116.248.0/23 maxlen: 23
2.58.12.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:4d:33:36:1d:b4:20:46:74:59:0d:fc:bd:f5:73:a2:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Apr 4 16:56:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fcae22d426ec70940d91493cb5c41bd57898963b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:eb:3b:d1:ad:38:84:ee:6d:d7:c4:ad:1a:57:
e9:73:ec:06:82:e1:3a:95:d3:73:6e:b1:53:de:78:
d0:02:2d:d6:b6:9a:8c:24:04:f6:fd:c5:ff:01:8a:
17:36:d9:bf:75:9d:75:d5:1c:e5:ea:b1:94:56:9b:
4f:81:58:11:e5:75:43:e8:29:5d:d8:87:b7:55:0c:
4c:d8:04:d3:a3:d4:dc:40:ec:47:30:dd:84:f2:76:
44:25:c1:8d:af:57:62:e5:27:c0:69:63:5a:57:eb:
a8:f8:d7:75:11:65:e1:5e:16:51:ca:68:7b:cf:5d:
f2:e7:94:a7:3b:e6:68:90:ad:18:54:da:9f:98:84:
e0:2c:32:7f:d9:8d:4d:9c:61:4e:7f:72:48:14:e5:
b4:47:02:59:0f:78:7d:fe:90:4c:99:09:36:4e:8d:
8f:79:72:8e:a2:00:e2:97:52:0e:ff:a6:d0:65:1a:
b4:95:77:a2:e0:00:59:88:a0:8a:11:2e:cd:ee:20:
d4:8a:d1:62:4d:26:e3:35:f9:ab:5f:f3:ce:01:2d:
e5:0a:9a:cd:fe:c5:78:0f:df:1d:64:da:32:3a:7d:
54:f6:42:f1:0f:38:ce:35:3a:d6:9a:1e:ee:c1:8e:
1e:c7:25:00:85:d4:8d:4d:b3:d9:4f:dc:b1:6b:a6:
5f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:AE:22:D4:26:EC:70:94:0D:91:49:3C:B5:C4:1B:D5:78:98:96:3B
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/_K4i1CbscJQNkUk8tcQb1XiYljs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.12.0/23
5.183.94.0/24
45.82.223.0/24
45.135.18.0/23
45.146.204.0/22
85.208.32.0/22
171.22.248.0/22
185.244.8.0/22
193.42.224.0/22
194.116.248.0/22
Signature Algorithm: sha256WithRSAEncryption
28:78:b2:b8:cd:32:05:35:f7:fc:58:42:7d:29:1e:64:bc:a3:
10:82:86:9b:b7:de:c5:24:ef:5c:37:57:8a:5d:f5:14:99:87:
5c:7b:f3:0d:8b:e2:eb:0d:60:87:91:11:92:df:0f:ab:bf:32:
3c:9d:74:ad:94:29:7c:4e:cf:ec:4a:50:43:7b:51:eb:e6:e3:
e3:5f:46:0e:0d:13:c0:52:9c:1b:de:41:93:1e:85:61:b7:35:
5a:50:66:9b:14:5d:37:dc:e2:57:43:e1:13:f5:48:9c:9a:e8:
05:30:1d:af:62:d6:e6:0e:cd:43:c5:09:5e:6f:86:ac:9d:a7:
d0:c9:88:19:a1:a4:74:d7:8c:28:23:98:a4:5c:8d:f0:7c:e3:
41:a9:4c:0c:cb:1a:cf:31:be:6b:1c:c7:4a:59:18:c1:d5:b5:
18:9d:6b:24:6f:23:0e:f2:d1:d9:91:78:a0:c5:e0:0c:10:04:
7f:6e:b4:aa:5d:9a:f9:f5:b0:0d:50:cd:76:df:0f:ca:4f:7d:
0a:05:8c:14:5f:aa:7b:e4:37:ce:79:11:1a:fc:87:28:81:a3:
d4:a0:f4:f4:ef:f0:af:f1:9e:db:8e:98:b8:fe:69:3a:d5:af:
3e:53:0b:35:54:30:6e:c5:f0:1b:a0:b4:1e:5c:ba:c1:7c:8b:
17:70:ec:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:04:19 2023 by rpki-client on console-fra.rpki-client.org