Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/f7LxV15kvdZtsKnxMTT6DkYddPY.roa
File: f7LxV15kvdZtsKnxMTT6DkYddPY.roa (raw, json)
Hash identifier: i7WmMlYp01NuJ5/1+dikeIGbYXdUR8FYe4Yq+XGahaA=
Subject key identifier: 7F:B2:F1:57:5E:64:BD:D6:6D:B0:A9:F1:31:34:FA:0E:46:1D:74:F6
Certificate issuer: /CN=80fab550d827a2def0d4d2616061425c2f694c84
Certificate serial: 018AF4CB3194B2848ACE2B240099DC72A18D
Authority key identifier: 80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/f7LxV15kvdZtsKnxMTT6DkYddPY.roa
Signing time: Tue 03 Oct 2023 09:07:51 +0000
ROA not before: Tue 03 Oct 2023 09:07:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13631
IP address blocks: 194.59.56.0/23 maxlen: 24
2a13:bb80::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:33:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f4:cb:31:94:b2:84:8a:ce:2b:24:00:99:dc:72:a1:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80fab550d827a2def0d4d2616061425c2f694c84
Validity
Not Before: Oct 3 09:07:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fb2f1575e64bdd66db0a9f13134fa0e461d74f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:d5:2b:aa:fc:0c:55:28:c7:07:58:9c:59:d9:
b5:29:6d:3c:49:a6:af:a8:5f:3a:bc:66:7e:b5:1e:
63:84:f0:4d:d1:41:d5:df:d5:2a:08:53:41:fd:c5:
6f:16:51:bd:4b:ba:e8:4d:34:13:ef:f4:ad:91:96:
18:e3:fb:4a:d6:2e:08:d0:94:f9:96:24:c7:08:78:
93:8c:a5:a2:dd:f3:69:7f:e6:05:16:83:f7:1b:05:
ea:58:e5:5a:3c:9b:f0:5a:c5:0a:bc:f3:59:10:90:
bd:bc:12:17:ba:73:b3:38:f1:c8:ab:c5:36:b1:1d:
21:7f:8a:a1:24:88:dc:f5:c5:8e:eb:06:d6:02:1b:
c9:a2:7c:fe:da:ff:56:51:74:2a:25:14:2d:5c:78:
a4:2a:91:3c:9f:97:35:0c:7d:f9:cc:23:56:4d:f0:
c3:85:12:a8:e9:26:78:a0:35:4d:21:23:e1:12:0d:
35:ad:ad:46:f1:a3:16:4c:5a:af:dc:30:c0:c7:ac:
2a:54:a6:40:2a:8f:13:68:51:84:d5:97:aa:93:1a:
c3:6a:99:a5:a3:f4:35:7e:6f:be:00:b1:b9:49:d1:
37:b1:b7:e1:c1:37:8a:76:70:a6:5c:e3:2e:48:13:
3d:2c:70:b7:27:32:57:83:b5:dc:ac:8d:d9:86:25:
04:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:B2:F1:57:5E:64:BD:D6:6D:B0:A9:F1:31:34:FA:0E:46:1D:74:F6
X509v3 Authority Key Identifier:
keyid:80:FA:B5:50:D8:27:A2:DE:F0:D4:D2:61:60:61:42:5C:2F:69:4C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gPq1UNgnot7w1NJhYGFCXC9pTIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/f7LxV15kvdZtsKnxMTT6DkYddPY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/4ba5ff-562e-4354-9600-f762929f1f08/1/gPq1UNgnot7w1NJhYGFCXC9pTIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.56.0/23
IPv6:
2a13:bb80::/29
Signature Algorithm: sha256WithRSAEncryption
61:45:12:c1:4c:71:5c:6c:8e:4a:f7:b1:95:af:80:29:f5:ef:
a2:8f:18:86:ba:45:43:19:9a:5c:dc:3f:59:30:84:b2:fa:28:
ab:17:79:63:3d:1a:ce:db:6e:15:5d:b3:e0:f9:4c:e7:da:a8:
a4:02:4f:32:c9:86:0c:19:e0:2d:a0:29:26:41:8e:07:c3:fd:
1d:55:ba:59:41:ad:00:4c:23:b6:e6:70:c0:21:41:0e:ff:16:
2c:89:30:fe:a5:ef:5a:ce:86:42:46:f1:82:b5:bc:2e:de:b6:
c9:07:72:0c:43:3d:74:94:79:1b:8d:53:a2:04:cf:6d:f4:7d:
4a:8b:aa:5c:4f:77:89:f3:89:e1:e1:01:e2:58:a6:55:b1:33:
c8:fc:1b:c0:68:2a:d8:8b:08:9d:14:5f:fa:04:5e:70:99:8f:
cd:28:9c:d2:36:c4:70:b6:6d:43:99:c0:33:fe:68:0e:99:3e:
a3:06:2c:20:62:b5:81:e7:dc:b3:56:8e:bf:8b:c5:f7:e3:48:
98:90:13:47:1c:21:0f:e4:1d:70:81:4f:8b:c4:5d:31:e9:19:
9a:8c:76:bf:14:74:c3:d8:7d:c2:02:5c:b3:41:f7:d2:63:04:
7f:f4:8b:4f:29:28:62:5f:90:34:88:eb:5f:54:8e:40:b0:51:
3c:19:cc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:55:51 2024 by rpki-client on console-fra.rpki-client.org