Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FqY6tdAvgsXw0mDZdwFeioqIjuk.roa
File: FqY6tdAvgsXw0mDZdwFeioqIjuk.roa (raw, json)
Hash identifier: T963spMrXFGFNqpuHFAAbteZ0VxT735jj7SBZSRph4Q=
Subject key identifier: 16:A6:3A:B5:D0:2F:82:C5:F0:D2:60:D9:77:01:5E:8A:8A:88:8E:E9
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018A4F6E52B02CF42DD30CCB471B6CF87305
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FqY6tdAvgsXw0mDZdwFeioqIjuk.roa
Signing time: Fri 01 Sep 2023 06:29:04 +0000
ROA not before: Fri 01 Sep 2023 06:29:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213200
IP address blocks: 94.156.8.0/24 maxlen: 24
94.156.177.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:4f:6e:52:b0:2c:f4:2d:d3:0c:cb:47:1b:6c:f8:73:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 1 06:29:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16a63ab5d02f82c5f0d260d977015e8a8a888ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:87:b2:e3:64:ae:3a:86:cb:23:b6:fd:f1:a9:
3f:3f:a5:3b:69:1f:b7:8c:27:e8:29:d0:ba:04:af:
b5:c3:6f:fa:77:43:fd:2a:d7:2c:1a:84:b8:fe:15:
ad:69:7c:65:93:97:59:dc:a6:79:bb:6c:1e:5b:c3:
de:27:48:e9:61:6d:97:31:f7:e5:1d:da:6b:51:a6:
4a:4c:ca:26:99:f1:57:82:ba:c0:22:1c:e7:cd:31:
68:0c:72:00:2c:01:d0:7f:6b:f7:63:10:34:9d:98:
80:3e:b2:41:82:f7:55:4c:6b:05:9a:c1:d3:0b:31:
d5:6f:46:ef:4f:a0:96:39:f4:3e:cd:95:36:88:c1:
e9:e6:f4:ba:9f:4a:7a:50:78:0c:e5:80:8a:a7:d4:
b9:2b:46:83:8c:da:59:bb:3b:70:83:ab:1c:c7:14:
d3:12:25:ab:74:de:16:1c:b2:a3:3c:6d:f9:5c:57:
aa:4a:a0:dd:9c:b1:44:4c:d1:15:e9:da:0e:ad:66:
5f:63:d6:da:e7:92:ec:70:83:71:60:a4:c8:fe:6d:
0d:12:45:0d:39:ff:6c:85:b2:56:86:b5:f9:5a:0d:
8f:48:7b:ce:c6:1b:eb:d7:53:25:25:36:39:10:77:
77:6c:98:b1:c4:cd:a7:32:5c:10:9d:5e:94:b5:3f:
ed:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A6:3A:B5:D0:2F:82:C5:F0:D2:60:D9:77:01:5E:8A:8A:88:8E:E9
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/FqY6tdAvgsXw0mDZdwFeioqIjuk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.156.8.0/24
94.156.177.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:8b:9b:e1:11:34:6a:2e:08:f4:69:ab:89:71:8c:b0:3a:ca:
7b:d3:93:97:6b:b8:ee:d0:ee:1a:fa:4d:0e:97:4f:18:82:a2:
4c:f3:c4:05:30:45:84:06:87:63:0a:42:b5:fd:85:cb:ee:5b:
96:94:2d:15:63:63:e0:06:1d:09:69:1b:b9:94:9c:9f:0b:d9:
6d:35:37:9c:98:5b:bb:79:a1:65:2d:49:71:f5:73:a1:14:de:
57:41:6a:c0:08:bb:9b:0a:34:e5:00:4a:82:41:e5:a0:7d:58:
39:4b:0d:5e:e2:a8:48:74:3b:0b:b1:f7:bc:3b:59:3e:eb:de:
c1:e2:f0:fa:f9:6f:0e:80:a2:45:84:74:bc:d4:07:7e:60:fe:
8c:aa:bb:75:8c:77:0b:89:61:ea:10:74:a3:30:8d:bd:e8:de:
a2:47:ae:db:52:c5:1b:e0:d4:f4:68:2d:19:98:5d:e7:08:21:
e8:4d:ca:a8:b3:cf:b1:c7:c2:7e:e4:a1:c4:f5:46:91:e2:14:
b0:2a:e1:f8:ec:91:d6:b5:b4:2b:cb:18:cb:2a:a6:7e:40:59:
2b:85:62:aa:01:f2:f4:93:53:4a:7a:e9:27:9a:3d:11:aa:3a:
51:fb:e4:52:88:fd:6d:e1:54:cc:f4:0c:b5:b3:dc:ec:f3:52:
1b:e5:a6:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 20 15:05:11 2023 by rpki-client on console-ams.rpki-client.org