Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F5x_WVt8UGBEnwdQRX1A-HiuSm8.roa
File: F5x_WVt8UGBEnwdQRX1A-HiuSm8.roa (raw, json)
Hash identifier: NOpjLFXN7naliieum5X3wzc/Y+BoBUuDKWo5CHW55VQ=
Subject key identifier: 17:9C:7F:59:5B:7C:50:60:44:9F:07:50:45:7D:40:F8:78:AE:4A:6F
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB83EEA99DC2DB508B3B3A54103D2E6
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F5x_WVt8UGBEnwdQRX1A-HiuSm8.roa
Signing time: Sun 01 Jan 2023 09:44:52 +0000
ROA not before: Sun 01 Jan 2023 09:44:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15962
IP address blocks: 90.64.0.0/16 maxlen: 24
92.180.192.0/18 maxlen: 24
2a01:c840::/28 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:3e:ea:99:dc:2d:b5:08:b3:b3:a5:41:03:d2:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=179c7f595b7c5060449f0750457d40f878ae4a6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:cc:a4:e5:4b:70:ec:36:d8:2b:a5:d6:7b:da:
2f:5c:95:6a:06:ab:9c:0c:7b:4a:ee:36:16:06:70:
0a:52:99:b5:22:35:cb:e6:1d:42:0b:b6:51:50:48:
27:90:b2:fc:62:74:d3:91:41:35:84:ff:ae:fb:00:
f4:dc:d2:cd:3c:f9:05:c3:ba:f9:be:04:8a:fe:6a:
c1:05:a3:7e:5e:0c:24:8b:bf:96:22:a6:10:45:27:
48:06:a5:b8:ae:76:78:c4:53:ea:8e:5e:98:09:8a:
57:ea:a1:84:96:c9:79:fd:41:f5:92:7f:09:c9:2f:
06:c0:9e:01:60:05:5c:50:8f:6b:9b:7a:b3:bf:19:
b2:22:0b:d1:7d:b4:f7:27:72:cf:64:09:de:8a:74:
d8:ce:5c:5f:76:b0:08:fc:9f:30:0d:32:0f:a0:49:
1e:30:07:10:e7:eb:24:df:af:2c:ba:d2:f3:f9:15:
97:e2:04:53:26:94:bd:c0:9c:dc:1a:1b:ab:ea:29:
a5:2e:60:ce:9d:0a:08:6f:89:86:bd:86:f6:1e:53:
87:52:4c:fb:1f:72:e5:65:2c:a4:76:77:37:7c:d6:
17:97:4b:72:c3:88:98:d4:d9:fc:8c:61:dc:f8:c6:
34:c9:0f:e5:23:80:0d:19:98:7b:38:64:72:ab:db:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:9C:7F:59:5B:7C:50:60:44:9F:07:50:45:7D:40:F8:78:AE:4A:6F
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/F5x_WVt8UGBEnwdQRX1A-HiuSm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.64.0.0/16
92.180.192.0/18
IPv6:
2a01:c840::/28
Signature Algorithm: sha256WithRSAEncryption
2a:23:6b:f7:d8:b9:40:80:5f:57:79:5b:00:73:74:b5:00:a5:
03:f9:33:71:31:21:0b:c9:4c:cf:67:8f:2f:69:2e:29:23:1e:
75:1f:00:c6:59:83:e8:53:af:24:09:50:0c:84:aa:81:bb:27:
bd:7a:69:62:cc:dd:be:a1:dd:4c:08:d8:67:6f:61:98:5a:8d:
b8:85:a5:10:d9:b4:ae:71:82:a4:ec:6c:d0:39:a5:43:a5:1a:
d2:a1:7b:f6:ad:1e:d8:a5:83:ac:b3:f1:a0:bd:30:eb:51:fc:
54:7c:6f:46:57:07:a1:5f:82:2d:b9:4d:92:c8:b9:45:52:0e:
c3:f7:64:a2:4f:06:09:4b:3f:7c:c2:4d:c9:e6:67:d0:62:c6:
6c:c3:70:8e:ed:9c:bf:30:9e:17:ae:7d:52:9c:e3:b8:17:d8:
d1:61:b4:33:81:92:50:88:80:a5:96:b1:33:77:f2:49:32:0f:
c4:0b:2d:3e:56:b6:9b:c7:e3:53:df:17:fc:3e:56:4d:ca:72:
83:19:f7:48:0f:06:d1:01:87:be:23:00:7d:81:ee:1a:09:e9:
95:d6:55:65:ed:4f:b9:13:82:5e:77:1e:cc:18:a5:57:83:37:
2d:39:25:50:4a:42:f5:c7:91:23:ff:46:57:69:fb:75:f5:72:
ff:30:3a:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org