Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/fkRXBgMhSn7co8dqrLv_hCw281A.roa
File: fkRXBgMhSn7co8dqrLv_hCw281A.roa (raw, json)
Hash identifier: nIT4ioizGwWaLcGDwLiJgXrzsPJt9GX9kzLk7HoLzUA=
Subject key identifier: 7E:44:57:06:03:21:4A:7E:DC:A3:C7:6A:AC:BB:FF:84:2C:36:F3:50
Certificate issuer: /CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Certificate serial: 018570D5274A78F7D2EE7BEB9E579F327B6E
Authority key identifier: E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/fkRXBgMhSn7co8dqrLv_hCw281A.roa
Signing time: Mon 02 Jan 2023 04:54:55 +0000
ROA not before: Mon 02 Jan 2023 04:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59474
IP address blocks: 185.253.110.0/24 maxlen: 24
2a10:adc0::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:d5:27:4a:78:f7:d2:ee:7b:eb:9e:57:9f:32:7b:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e17524c2a6f24d7e6794b00c09634dcad2310434
Validity
Not Before: Jan 2 04:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e44570603214a7edca3c76aacbbff842c36f350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:32:61:45:ed:4e:56:55:4f:3a:ef:63:25:1b:
5d:16:61:77:73:ff:a8:a2:3e:5e:72:a6:ca:cc:f3:
63:b5:4b:7b:f3:e8:db:2b:63:ba:89:d2:23:a0:52:
3a:9f:97:61:32:62:10:55:4c:4b:ba:fd:51:aa:ff:
50:05:13:1f:29:6b:19:9d:e3:4d:77:04:3a:78:5c:
97:cb:ee:b5:a9:14:05:c8:f0:cb:f3:d5:28:d6:33:
e2:5a:b9:1e:65:b9:12:53:63:28:2a:66:f2:2a:ca:
52:52:e7:d4:4a:24:df:4d:b2:07:37:22:ce:c9:36:
3f:cb:7c:2a:f2:4b:79:46:12:39:65:f5:ba:98:0a:
d2:5b:9a:d8:5d:2c:a6:60:c9:d5:fc:d5:36:2c:0b:
5f:37:80:ac:c0:46:22:b2:db:aa:de:85:6d:4f:f1:
ee:96:31:b1:0a:3b:dd:b3:74:f0:24:b7:6e:75:ef:
50:88:75:dc:2b:e9:17:25:29:db:14:9e:a9:1b:fe:
75:6d:c2:10:d5:29:dc:f8:0f:a9:ae:0e:e8:02:12:
2e:ab:a3:c6:79:ef:dd:b9:1e:8f:a1:bf:9c:90:1d:
e9:9f:d6:79:77:b0:23:b2:8b:0a:b0:d9:35:09:bd:
55:0f:d3:43:b8:3a:f9:8c:3e:ae:dc:27:6b:5a:36:
3d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:44:57:06:03:21:4A:7E:DC:A3:C7:6A:AC:BB:FF:84:2C:36:F3:50
X509v3 Authority Key Identifier:
keyid:E1:75:24:C2:A6:F2:4D:7E:67:94:B0:0C:09:63:4D:CA:D2:31:04:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4XUkwqbyTX5nlLAMCWNNytIxBDQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/fkRXBgMhSn7co8dqrLv_hCw281A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/2d9f68-83d1-4d1f-a211-22de4eed80eb/1/4XUkwqbyTX5nlLAMCWNNytIxBDQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.110.0/24
IPv6:
2a10:adc0::/29
Signature Algorithm: sha256WithRSAEncryption
5b:ab:a8:bc:17:b8:57:dc:dc:8b:a1:c6:27:85:a8:a4:d2:b1:
1e:21:46:cb:b4:36:a3:97:5b:d6:c7:a8:c3:a0:53:35:df:b7:
70:4b:9a:02:aa:5d:09:95:40:61:e6:44:3f:2e:69:eb:8a:64:
33:f8:4a:1e:14:94:ea:03:a6:5b:18:9f:78:af:b8:d7:d8:c4:
18:59:69:5c:1f:53:e0:34:34:95:19:d5:b2:57:74:ec:ba:4c:
a9:26:45:76:f2:0c:e7:5c:d1:38:8e:bd:b1:c9:f5:dd:09:34:
ca:54:c9:93:be:1f:14:0d:4a:90:a8:e9:14:22:45:c1:a6:c4:
fd:e4:7b:d3:92:65:67:72:59:e1:33:fa:f5:4b:9f:cc:b0:b0:
c2:04:98:d0:2d:18:3a:38:f5:5f:67:7c:ca:08:53:23:7a:a4:
88:da:96:67:d8:02:6c:fd:a3:91:35:e3:99:7b:59:8c:f8:c2:
d8:b4:82:c9:0d:61:ae:8e:90:b6:a4:05:b0:5d:ee:75:e8:e9:
74:f0:2b:cc:30:df:56:4c:1d:44:a0:96:00:39:f3:c2:ee:c9:
97:ff:4e:4f:fd:28:86:2f:51:8b:95:ba:82:55:16:81:67:2a:
d8:81:42:40:9b:c2:2a:ba:8e:48:6e:34:68:4c:bc:d5:19:d1:
12:e4:55:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:57:12 2024 by rpki-client on console-fra.rpki-client.org