Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FbzQYr7uh83rUuH8p-Iy17Alo1Y.roa
File: FbzQYr7uh83rUuH8p-Iy17Alo1Y.roa (raw, json)
Hash identifier: VCoVI/t9pKFvEaEyqzHGcl9tXXIcS6lPhePsQ9awEUw=
Subject key identifier: 15:BC:D0:62:BE:EE:87:CD:EB:52:E1:FC:A7:E2:32:D7:B0:25:A3:56
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 018A78E118F05AB670B1F8D07DAB05F9F490
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FbzQYr7uh83rUuH8p-Iy17Alo1Y.roa
Signing time: Sat 09 Sep 2023 07:38:52 +0000
ROA not before: Sat 09 Sep 2023 07:38:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49870
IP address blocks: 194.87.220.0/24 maxlen: 24
212.192.1.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:78:e1:18:f0:5a:b6:70:b1:f8:d0:7d:ab:05:f9:f4:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 9 07:38:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15bcd062beee87cdeb52e1fca7e232d7b025a356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:5e:f2:d2:bc:5d:25:49:08:3b:e7:c1:3f:ae:
3c:da:4d:cd:30:ab:f9:e8:ed:18:94:fb:f8:f6:32:
08:be:15:2e:54:c1:98:d1:50:90:12:74:3d:f1:fb:
8d:33:36:a1:2c:67:b8:d1:9a:ba:40:64:4e:1f:69:
21:82:08:bf:3a:26:10:cc:e1:92:d5:7a:6f:a8:ff:
1e:a5:c8:2e:2a:01:12:d0:ee:3f:f6:89:f6:1c:a3:
80:e3:57:94:e6:d5:b5:4f:dc:df:db:12:e2:a0:e3:
18:e9:b5:4f:b8:ab:e3:24:98:4f:ed:02:bc:44:1d:
83:64:60:00:68:34:b5:92:30:7e:a2:a3:3a:53:1f:
0f:7e:f5:7d:cc:fe:ff:31:b6:4e:98:8d:9d:3b:b3:
56:c5:14:77:94:cb:62:70:05:cb:ef:35:a8:89:08:
de:54:c0:a7:d8:9c:4f:ca:d6:06:01:83:d1:e9:5d:
be:88:12:0d:8c:2c:fb:f9:8d:4b:51:53:bb:45:22:
f1:7e:ca:10:a5:29:8a:82:70:da:76:db:84:4a:2f:
63:40:ce:21:5c:4e:01:94:87:57:86:53:3d:c6:46:
74:e0:1f:99:ce:3c:eb:70:37:08:38:8c:c1:d0:27:
42:bf:4e:f2:7a:ac:af:37:ca:47:3c:f4:85:69:5d:
b4:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:BC:D0:62:BE:EE:87:CD:EB:52:E1:FC:A7:E2:32:D7:B0:25:A3:56
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/FbzQYr7uh83rUuH8p-Iy17Alo1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.87.220.0/24
212.192.1.0/24
Signature Algorithm: sha256WithRSAEncryption
68:4f:ec:11:fb:38:26:65:36:6f:60:0f:61:de:64:34:2a:82:
83:7a:bd:45:10:1a:df:4a:0c:69:0d:17:0e:c7:18:3e:49:ae:
61:c3:e1:fa:b2:de:f8:9c:5f:ff:91:f9:82:02:c9:11:1f:d6:
cf:c0:61:ce:f3:0d:3b:55:8b:0d:26:81:28:c5:42:14:1c:43:
52:e7:83:af:79:19:cc:2e:c2:7b:54:5c:eb:7e:48:42:90:de:
d6:81:2d:90:2d:eb:20:7d:7f:19:3c:72:42:72:09:3e:f0:34:
58:ec:f5:54:b1:c1:47:fc:4e:71:f6:b0:2a:7e:cb:cb:cc:7f:
10:b2:67:a4:8b:69:3c:4c:e5:b7:16:b3:fc:8f:0c:5c:59:79:
2d:f4:4f:b0:59:81:92:72:32:a2:c8:89:75:f8:d2:80:66:ff:
d8:f0:33:47:23:80:04:f4:77:12:24:57:06:d4:35:09:e3:4f:
a9:ac:07:39:04:a5:47:71:b6:59:ff:1c:b7:71:b5:cb:d9:d6:
c9:ff:4b:e4:c6:1b:c7:3c:7d:4b:01:ee:33:84:e8:94:51:3b:
34:2b:59:44:33:4d:43:8b:86:91:7a:53:9d:57:38:a0:ad:99:
26:90:9b:45:00:61:8f:9e:ab:35:1f:4d:8e:f3:f9:f8:0a:78:
f3:a5:e7:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 11 18:12:12 2023 by rpki-client on console-ams.rpki-client.org