Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/FEXymnUKEcJh923Wa0p4GChcF6g.roa
File: FEXymnUKEcJh923Wa0p4GChcF6g.roa (raw, json)
Hash identifier: BwbgYempEXk8Ay2hpsU0bz/oxEqyVKxWX7cR3LLJA08=
Subject key identifier: 14:45:F2:9A:75:0A:11:C2:61:F7:6D:D6:6B:4A:78:18:28:5C:17:A8
Certificate issuer: /CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Certificate serial: 0186E48E7795EBBEB1F21084F790189C7761
Authority key identifier: AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/FEXymnUKEcJh923Wa0p4GChcF6g.roa
Signing time: Wed 15 Mar 2023 09:16:27 +0000
ROA not before: Wed 15 Mar 2023 09:16:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43366
IP address blocks: 185.161.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:e4:8e:77:95:eb:be:b1:f2:10:84:f7:90:18:9c:77:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad3b529c9dc9526f099bf16ac89dcc8adfe18240
Validity
Not Before: Mar 15 09:16:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1445f29a750a11c261f76dd66b4a7818285c17a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d4:04:10:6d:1f:af:13:91:ba:84:64:03:e5:
8f:56:df:da:58:df:6a:00:d8:e3:1d:41:e8:f7:de:
35:54:0d:b4:f2:1d:10:1c:22:a2:ce:88:77:5a:b8:
df:8f:2b:5d:77:70:28:e0:83:a1:f7:74:0a:53:05:
8b:3c:8d:1f:ad:ba:cd:19:5e:75:97:99:1b:ce:c8:
f7:2a:2a:a9:84:df:17:42:db:2d:1a:49:c5:ce:c8:
7a:ce:75:64:76:b6:88:dd:34:79:ec:7a:a1:e1:e6:
e0:d5:62:44:93:c1:7a:d8:4e:9c:63:98:f9:e2:f0:
f4:4a:65:ac:26:8b:fa:f8:91:68:5f:29:e0:1e:a3:
17:36:55:78:50:03:57:01:66:dc:60:11:94:36:52:
db:11:a2:e8:38:c7:26:e3:22:a7:49:80:a2:60:82:
88:62:57:40:60:3e:14:56:b1:5d:88:fe:55:3b:96:
5c:12:40:52:5f:bc:24:74:39:2b:d1:42:77:3e:e7:
c0:8d:5b:7f:06:31:b5:af:9f:35:b8:61:5e:15:e1:
13:b6:c8:9a:57:61:16:3b:c3:c5:0f:75:95:25:a0:
56:77:aa:b9:e5:a3:c0:a2:fa:96:18:54:a4:96:2f:
e1:2b:8e:ee:96:c5:80:c9:21:a3:7d:ed:b2:13:47:
38:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:45:F2:9A:75:0A:11:C2:61:F7:6D:D6:6B:4A:78:18:28:5C:17:A8
X509v3 Authority Key Identifier:
keyid:AD:3B:52:9C:9D:C9:52:6F:09:9B:F1:6A:C8:9D:CC:8A:DF:E1:82:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/FEXymnUKEcJh923Wa0p4GChcF6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/a63fd8-9b36-496d-b6e2-b20ebe595475/1/rTtSnJ3JUm8Jm_FqyJ3Mit_hgkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.161.140.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:2c:c2:64:e3:c9:6a:14:ce:56:9e:1f:0e:1c:e9:f3:71:3d:
31:7a:8e:53:be:eb:50:f9:f6:c0:7c:85:dc:8a:17:92:ab:09:
fc:19:bc:1b:33:15:fd:02:66:35:94:e1:7b:d8:92:ab:7f:01:
93:a0:35:f6:12:73:f9:4e:b0:01:b0:85:3d:7a:28:3f:22:9e:
e5:a5:fa:16:7e:52:12:de:c4:d1:93:ef:90:58:77:c6:99:db:
fd:7b:04:b3:57:e3:61:21:09:01:e9:8c:e2:3e:ec:e3:ab:49:
a3:72:77:c1:9f:12:f6:b1:49:99:41:a3:dd:a3:64:76:74:3a:
c1:2d:b5:a2:b0:1b:fa:a1:8d:fc:68:08:a3:bf:7b:a3:d3:2b:
35:7a:89:86:4b:6a:3a:fc:1c:23:82:33:64:b2:22:cc:34:4c:
c3:e1:e3:17:c8:63:e9:98:95:9e:ac:6b:c1:a2:ee:d9:6d:81:
dc:4e:e4:c6:13:f8:a2:94:e5:8a:88:f7:5a:1b:d2:19:9c:4a:
41:df:4a:b5:a7:96:43:4a:37:3c:c1:f8:c9:f3:1f:20:95:5d:
77:c2:b3:8d:6c:40:5a:a7:ee:d3:b1:29:70:0d:82:b6:bc:db:
74:77:3a:66:fa:7e:ae:5c:6f:ef:fd:10:23:e0:6f:91:93:9a:
32:14:19:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:41:52 2023 by rpki-client on console-fra.rpki-client.org