Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/cAjMCc3JYP_ypR5ZvosONYg_bJ0.roa
File: cAjMCc3JYP_ypR5ZvosONYg_bJ0.roa (raw, json)
Hash identifier: dAkgnVq3IyvjgKkgS9lNnZPo6tfwpmXw/eVmUCxJiHI=
Subject key identifier: 70:08:CC:09:CD:C9:60:FF:F2:A5:1E:59:BE:8B:0E:35:88:3F:6C:9D
Certificate issuer: /CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Certificate serial: 01856F549F25030E8C4C19E778D22679EE84
Authority key identifier: 15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/cAjMCc3JYP_ypR5ZvosONYg_bJ0.roa
Signing time: Sun 01 Jan 2023 21:54:54 +0000
ROA not before: Sun 01 Jan 2023 21:54:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29246
IP address blocks: 195.68.250.0/23 maxlen: 23
185.89.168.0/22 maxlen: 22
2a00:18a8::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:54:9f:25:03:0e:8c:4c:19:e7:78:d2:26:79:ee:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15733ff82be00b41a990ded6b72b04cb7bf580d7
Validity
Not Before: Jan 1 21:54:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7008cc09cdc960fff2a51e59be8b0e35883f6c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:81:84:c0:d0:ce:05:46:92:fb:b2:f2:e5:c6:
86:6b:83:e8:61:8d:d2:19:9d:88:4f:99:5d:ec:28:
e9:a5:ac:34:d5:c6:af:3e:fe:33:65:d0:29:1f:d4:
c8:8b:4d:64:e8:70:5f:aa:a2:f1:bc:69:cb:e4:66:
67:8d:8b:1f:58:7d:ab:a8:e6:e1:f0:cb:bc:79:f5:
f8:98:6e:00:93:4f:f1:e0:fc:c6:e7:9e:6f:e3:07:
49:15:43:7a:b0:d3:54:dc:c3:a0:fb:de:f7:83:17:
2a:be:e0:b2:e7:23:4b:20:90:f8:97:b7:5d:be:c8:
a6:cd:fd:4a:c1:42:37:c7:50:f4:69:c0:66:76:6a:
aa:67:5f:d0:5b:df:37:41:b9:34:df:03:c7:a4:12:
72:57:99:a6:5c:70:00:d7:db:00:2b:33:ae:0e:95:
65:67:5b:c9:a8:74:b5:1e:4a:77:11:ed:27:08:57:
6b:ec:63:3f:d2:3c:73:80:6a:2b:70:5f:b9:82:ee:
74:dc:a6:26:8e:84:8a:a5:2a:69:09:ab:13:33:f5:
29:c8:8b:81:ae:e9:94:d1:83:9c:35:b4:5d:f1:88:
ef:1f:78:59:38:b7:cb:8f:6a:f0:00:b7:21:66:4c:
86:d6:67:ab:74:95:31:49:61:46:38:da:af:25:66:
a6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:08:CC:09:CD:C9:60:FF:F2:A5:1E:59:BE:8B:0E:35:88:3F:6C:9D
X509v3 Authority Key Identifier:
keyid:15:73:3F:F8:2B:E0:0B:41:A9:90:DE:D6:B7:2B:04:CB:7B:F5:80:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FXM_-CvgC0GpkN7WtysEy3v1gNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/cAjMCc3JYP_ypR5ZvosONYg_bJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/eb5dce-d286-4825-a41c-b2bd66889c29/1/FXM_-CvgC0GpkN7WtysEy3v1gNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.168.0/22
195.68.250.0/23
IPv6:
2a00:18a8::/32
Signature Algorithm: sha256WithRSAEncryption
79:cc:ac:f1:73:86:08:0b:f9:74:9c:e3:4d:d0:a7:b6:dc:56:
59:4c:9f:ce:39:cf:f7:28:4a:46:46:78:a5:b9:b7:cd:59:58:
4c:84:2d:f0:37:28:10:c8:93:a7:3a:a6:1c:4d:0b:36:e3:2e:
78:da:1f:c0:aa:29:c9:73:49:33:4e:89:84:37:ec:eb:14:c0:
c8:b4:ea:c0:79:c6:f9:5b:b6:29:8c:68:0c:24:e2:e4:b0:90:
23:44:a2:6b:02:6e:18:67:ac:c1:6b:ed:50:a3:01:5b:6c:f0:
bd:d8:bb:df:ef:12:f3:18:7a:dc:af:fe:09:a3:25:60:b0:44:
a4:bc:b4:4d:13:3e:b4:f1:81:7a:d8:4e:f2:e7:45:fd:a8:6f:
2a:00:27:e1:d3:ee:97:3d:cb:1c:d0:61:51:11:2d:5b:a5:61:
d4:e9:b5:14:00:42:ba:44:38:ad:b9:49:11:4d:a8:71:bd:a1:
a0:e9:aa:05:a0:ae:44:dc:8b:1a:b7:81:31:6d:eb:6b:36:86:
ef:f5:b2:8a:13:0d:0e:a4:44:03:2b:0a:41:f7:7b:ba:95:93:
02:e0:4c:11:9c:55:83:c1:4c:a3:bd:d6:9f:f8:b4:51:c5:9a:
6d:fe:72:91:9d:65:68:a3:23:75:06:bc:31:70:6d:36:98:d5:
72:53:e1:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:19:20 2024 by rpki-client on console-ams.rpki-client.org