Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/V-1IDwOWyu8qHxHbCTWsdd91VuA.roa
File: V-1IDwOWyu8qHxHbCTWsdd91VuA.roa (raw, json)
Hash identifier: Jfn2tUaIXNhqd9Fep8fOJ2KdXgV7nvvyYtyBgv080mo=
Subject key identifier: 57:ED:48:0F:03:96:CA:EF:2A:1F:11:DB:09:35:AC:75:DF:75:56:E0
Certificate issuer: /CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Certificate serial: 01857295BC2E2F6EFCE70E51C9459F89D343
Authority key identifier: B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/V-1IDwOWyu8qHxHbCTWsdd91VuA.roa
Signing time: Mon 02 Jan 2023 13:04:53 +0000
ROA not before: Mon 02 Jan 2023 13:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29050
IP address blocks: 46.182.152.0/21 maxlen: 24
185.14.76.0/22 maxlen: 24
213.243.192.0/18 maxlen: 24
5.43.232.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:bc:2e:2f:6e:fc:e7:0e:51:c9:45:9f:89:d3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4810d7c9bfc58b9e0a1e59169c3dd322de9f737
Validity
Not Before: Jan 2 13:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=57ed480f0396caef2a1f11db0935ac75df7556e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:02:72:79:01:af:15:0a:a0:05:29:84:10:58:
0e:fb:ca:c8:a0:e1:ec:cb:ab:d0:52:03:65:a5:75:
66:9a:4a:42:c8:57:c5:36:55:66:16:ea:a0:4f:df:
db:09:c6:0a:79:c2:14:4c:3b:ad:81:05:a2:72:28:
90:c8:b7:9a:04:3d:c1:fe:b1:31:2e:0a:1e:9c:b4:
bd:b3:42:da:87:77:5d:8e:b9:ca:7e:8f:83:4e:1d:
b1:13:2a:d3:bd:f7:54:d9:65:bd:1a:2d:d5:c5:5e:
04:9a:4f:30:d6:78:62:1b:cc:c8:09:a3:3b:02:8c:
d8:be:cd:7a:f3:64:35:44:22:54:48:7d:d6:d4:05:
b8:0b:ef:42:a1:61:1b:eb:9c:56:5e:4a:fa:a1:be:
ec:a0:e4:ef:4a:5a:8e:71:aa:b0:dd:be:4a:95:4f:
2f:04:f6:86:37:42:13:99:64:cf:b8:d3:6f:9a:07:
83:b6:cc:3a:41:15:b7:a7:50:1c:66:7e:f4:66:e4:
cd:53:7f:f1:0f:ae:d0:19:eb:b9:a7:c1:a3:49:b7:
c3:d7:44:5c:59:2b:3a:9a:64:97:53:25:5c:d6:85:
a9:97:80:7e:ac:8e:0c:c7:0c:69:72:3f:a7:75:77:
f2:6c:31:ec:b9:c6:8f:70:6d:76:49:44:91:72:a5:
bc:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:ED:48:0F:03:96:CA:EF:2A:1F:11:DB:09:35:AC:75:DF:75:56:E0
X509v3 Authority Key Identifier:
keyid:B4:81:0D:7C:9B:FC:58:B9:E0:A1:E5:91:69:C3:DD:32:2D:E9:F7:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIENfJv8WLngoeWRacPdMi3p9zc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/V-1IDwOWyu8qHxHbCTWsdd91VuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/3d4c46-7545-4b3d-8f1c-2a63402bec66/1/tIENfJv8WLngoeWRacPdMi3p9zc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.43.232.0/21
46.182.152.0/21
185.14.76.0/22
213.243.192.0/18
Signature Algorithm: sha256WithRSAEncryption
12:ab:c6:01:b0:c8:fb:5e:60:4a:d0:b0:ba:ca:13:c6:fd:69:
12:2d:73:4f:a6:30:aa:89:9e:9b:54:f3:35:c0:a7:5e:be:db:
df:da:5b:0c:00:4d:cd:b9:76:97:9a:d1:9b:71:77:77:03:8f:
9c:b5:ee:e6:3d:64:78:60:51:86:de:8f:e2:20:08:aa:24:55:
bb:6e:e7:94:fc:6d:59:fb:5e:a2:78:de:12:5e:21:08:a4:09:
c0:d7:0e:98:61:db:d9:b2:c9:c0:91:c4:7f:87:43:32:ca:0d:
3d:49:58:49:85:2c:b4:63:90:c4:9f:4f:58:fa:3c:6c:48:06:
d7:ec:d6:88:11:66:d6:d5:fb:7b:21:83:08:44:0f:1d:64:9b:
6f:ad:f9:70:a2:52:15:4a:42:63:30:67:b9:c5:87:f2:ef:7e:
cb:e3:86:06:b4:ca:f9:f3:43:dc:27:b6:b8:a1:c4:42:e4:90:
73:4b:f3:af:d2:cf:46:71:7a:35:d6:66:d8:db:bd:83:13:b4:
bd:2a:bd:20:e9:80:f5:7e:24:67:26:fd:31:be:50:49:a9:8b:
e2:21:22:c0:ba:9e:cf:d9:74:61:4e:4b:ea:d7:7e:5f:23:8d:
eb:3a:eb:8c:68:d0:c2:cc:28:5a:ca:12:2d:b0:cd:3b:20:65:
eb:93:8b:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:11:40 2024 by rpki-client on console-ams.rpki-client.org