Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/K4p6lNFeE4LOLgIm8UNiyXRQbCI.roa
File: K4p6lNFeE4LOLgIm8UNiyXRQbCI.roa (raw, json)
Hash identifier: q8P8ARzsr4Pf1amNVfQrpaLDIPSBaOrmeFVYEXow7VI=
Subject key identifier: 2B:8A:7A:94:D1:5E:13:82:CE:2E:02:26:F1:43:62:C9:74:50:6C:22
Certificate issuer: /CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Certificate serial: 01856BC1207FDF60D2F83671BDD8795686D8
Authority key identifier: 02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/K4p6lNFeE4LOLgIm8UNiyXRQbCI.roa
Signing time: Sun 01 Jan 2023 05:14:56 +0000
ROA not before: Sun 01 Jan 2023 05:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206124
IP address blocks: 185.194.48.0/24 maxlen: 24
185.194.51.0/24 maxlen: 24
185.194.49.0/24 maxlen: 24
185.194.50.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:c1:20:7f:df:60:d2:f8:36:71:bd:d8:79:56:86:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02fbd8d72bffbbcd77076a6a6cc994d364284916
Validity
Not Before: Jan 1 05:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2b8a7a94d15e1382ce2e0226f14362c974506c22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:91:74:39:1c:9d:59:34:5c:0e:59:dd:4a:90:
3a:25:48:f7:cd:20:e0:b0:b8:6d:12:51:8f:2b:5d:
8a:29:14:d7:4a:42:17:38:3d:34:72:72:17:4b:62:
67:b9:de:90:e7:29:a8:8b:07:e5:74:ee:74:d4:38:
e0:12:e2:b9:fa:66:7b:1d:63:ad:c6:0c:56:da:92:
4d:eb:91:27:80:87:bf:5a:00:e6:9f:dd:6d:19:48:
b9:21:b0:10:6a:31:2b:27:32:eb:a1:db:3e:96:fa:
be:11:b8:e3:77:ef:d0:02:c8:b5:dc:96:97:51:61:
f7:a1:9e:0c:54:38:cc:6f:f1:15:79:62:5f:3c:a2:
1a:25:62:dc:57:63:56:60:93:12:4f:ee:02:2e:29:
ce:a0:35:b5:44:ae:34:c3:8b:4b:6b:42:bb:b9:b8:
c7:ac:d6:1c:0b:9a:25:b7:37:3d:f1:60:9c:c1:3d:
7c:1b:96:1b:73:3b:ac:8b:8a:49:10:4a:ad:8c:30:
b3:53:18:56:1f:9c:83:1e:d3:2a:cb:5f:69:bb:d3:
eb:b5:5c:31:8f:81:cc:df:8e:00:13:ca:10:80:74:
10:74:a4:83:b1:dd:84:29:89:d4:38:03:64:45:e7:
82:e4:f5:b2:93:c6:99:8c:9f:3d:84:cf:0c:77:ab:
45:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:8A:7A:94:D1:5E:13:82:CE:2E:02:26:F1:43:62:C9:74:50:6C:22
X509v3 Authority Key Identifier:
keyid:02:FB:D8:D7:2B:FF:BB:CD:77:07:6A:6A:6C:C9:94:D3:64:28:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvvY1yv_u813B2pqbMmU02QoSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/K4p6lNFeE4LOLgIm8UNiyXRQbCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/aecab1-1de9-4bdf-9a10-23af55e0190d/1/AvvY1yv_u813B2pqbMmU02QoSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.48.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:8e:54:f1:5e:16:44:ce:45:65:33:db:4e:ff:c0:b7:17:46:
f3:60:9c:c3:96:28:ad:6a:fd:ef:0d:7a:0d:df:ca:c6:c9:6c:
44:dd:7c:51:fd:17:be:20:e6:08:05:f0:8d:a4:22:9a:41:0e:
c2:4a:37:b9:5c:18:7c:35:07:6b:15:87:40:a4:e5:71:22:5d:
25:38:a6:ec:89:a3:bf:bc:4f:4d:8e:a5:5d:d6:43:dc:ed:33:
df:b4:a8:01:78:fb:12:c0:c4:81:27:df:6c:73:79:00:74:56:
36:11:6f:4a:69:34:19:ae:0f:64:91:e0:e4:26:33:57:da:9a:
c9:18:1f:92:2c:61:25:f7:8c:18:a4:6f:0f:04:10:2a:8c:22:
ec:f5:57:fb:19:10:bf:78:8a:81:ac:e8:5f:11:9e:eb:7e:62:
87:0c:75:7f:76:32:ee:2f:13:18:1a:15:6d:0b:ca:a3:8e:06:
9a:85:95:7d:4e:1d:6c:3e:dc:42:3d:d7:aa:23:78:f5:ad:04:
08:76:49:8f:e9:84:00:56:56:7a:d6:a8:c8:ce:35:da:04:66:
13:54:aa:51:29:37:5e:8d:a4:fb:a3:c1:66:17:2a:b6:e5:74:
90:97:65:98:b2:32:b3:d0:28:bb:86:18:c1:70:17:c5:90:e1:
a7:5b:ac:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:53:02 2024 by rpki-client on console-fra.rpki-client.org