Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/1-FJFsUAAcBDEPj1fDHcOb6cYi-U.roa
File: 1-FJFsUAAcBDEPj1fDHcOb6cYi-U.roa (raw, json)
Hash identifier: 9UP32m4nHn/JE2l5dS33f1yiSflpehCmjZk3jF3AZ0o=
Subject key identifier: F8:52:45:B1:40:00:70:10:C4:3E:3D:5F:0C:77:0E:6F:A7:18:8B:E5
Certificate issuer: /CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Certificate serial: 01857270F2C4E38B46E9CC3AEA85BB16C1D8
Authority key identifier: FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/1-FJFsUAAcBDEPj1fDHcOb6cYi-U.roa
Signing time: Mon 02 Jan 2023 12:24:42 +0000
ROA not before: Mon 02 Jan 2023 12:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 56567
IP address blocks: 185.114.148.0/22 maxlen: 22
185.220.192.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:70:f2:c4:e3:8b:46:e9:cc:3a:ea:85:bb:16:c1:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff1f615b91839f51ed3a5b53753b27b02c76da95
Validity
Not Before: Jan 2 12:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85245b140007010c43e3d5f0c770e6fa7188be5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ab:ef:6e:e1:da:f2:a8:4b:05:7c:22:7d:fd:
8e:7e:17:33:80:fc:6d:40:14:2a:26:f4:70:73:aa:
6f:e5:74:d4:be:32:87:54:a0:ef:d3:0c:26:98:88:
b1:70:e6:50:1a:2b:38:56:1b:11:5f:d1:90:e1:4e:
4c:a3:83:72:59:fc:85:38:a1:be:e8:54:39:4f:bd:
86:fb:48:fb:4f:53:78:db:e5:70:27:54:84:f0:63:
dc:fc:7d:13:80:f2:c1:8f:5c:ae:16:49:34:49:5d:
62:80:02:37:b8:dd:c3:bd:4e:5f:1f:81:f3:e6:60:
80:32:8d:25:f6:1c:a6:3a:dd:3a:17:8c:97:ca:5b:
d6:4d:6e:69:f4:d7:3c:e6:49:be:c5:28:ba:dc:cd:
e8:23:07:dd:31:4f:89:b9:e7:4f:cf:9f:1d:37:5b:
a2:ef:16:fb:91:4d:5b:80:21:3d:eb:f5:81:89:ad:
32:00:fe:ce:45:2a:6e:45:7d:94:81:65:1d:48:ef:
22:51:9a:fb:b2:90:57:33:07:00:f3:2a:64:12:ae:
fc:0b:0d:39:15:67:18:a1:31:b3:95:ef:6a:94:d9:
0f:9b:1b:d4:10:6c:27:0a:0c:6d:ca:bc:c2:f4:b3:
03:b0:c0:08:8f:d5:d7:96:90:34:be:38:7c:56:57:
af:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:52:45:B1:40:00:70:10:C4:3E:3D:5F:0C:77:0E:6F:A7:18:8B:E5
X509v3 Authority Key Identifier:
keyid:FF:1F:61:5B:91:83:9F:51:ED:3A:5B:53:75:3B:27:B0:2C:76:DA:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_x9hW5GDn1HtOltTdTsnsCx22pU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/1-FJFsUAAcBDEPj1fDHcOb6cYi-U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/b416a5-ee4f-4cc7-b0c4-7475f70df9fa/1/_x9hW5GDn1HtOltTdTsnsCx22pU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.114.148.0/22
185.220.192.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:39:c2:8d:0f:d8:1f:07:fb:3a:9e:a8:55:49:79:ce:2f:b2:
0e:9e:36:78:f8:e0:79:1d:e6:da:0c:90:e6:26:c4:ca:28:b8:
85:8f:f7:88:0f:e9:ac:e2:11:aa:18:7e:27:48:bb:20:f7:53:
20:e7:ac:c9:cc:45:f4:d6:71:f4:3f:d1:19:2a:57:69:f7:52:
9b:d3:96:2c:3c:63:a0:70:33:e1:34:f6:21:86:38:1f:f8:94:
d2:10:db:6f:8a:82:9d:ca:ac:03:ec:a3:1b:fd:e9:81:e9:80:
c7:5a:0a:ea:20:e9:94:00:64:54:66:5a:d4:87:98:7f:a3:10:
c7:80:e8:23:e5:65:e1:f0:85:79:b0:80:d5:44:27:c5:6e:ae:
03:3f:37:70:9f:44:c4:ed:81:05:d6:08:57:2b:02:d6:77:3f:
04:8e:e1:1f:51:12:39:1d:d1:83:c8:91:9c:62:92:ae:9c:c1:
08:f0:5a:b0:c6:a5:28:3b:e7:fc:11:bc:4d:3d:99:9f:85:f6:
0f:3c:71:d5:57:8f:91:24:fa:d8:ec:02:5f:dc:8e:d7:6a:a3:
fd:a4:d2:38:45:c7:99:a2:49:c7:0b:b7:2c:7f:28:9b:dd:31:
1b:63:8e:7a:38:30:93:75:c2:53:f7:ac:e6:fe:b6:cd:31:33:
64:74:0c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:15:09 2024 by rpki-client on console.sobornost.net