Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FkfrCmZyUduk9gd6hXvUqUqP7Tk.roa
File: FkfrCmZyUduk9gd6hXvUqUqP7Tk.roa (raw, json)
Hash identifier: RB+JAjM6tc9iAnJdEQwRul4SyOuzxVwJbyh64CGI+VQ=
Subject key identifier: 16:47:EB:0A:66:72:51:DB:A4:F6:07:7A:85:7B:D4:A9:4A:8F:ED:39
Certificate issuer: /CN=9f0743496c7ff3effb870601139cad9d2f271e10
Certificate serial: 018722CB8827E5610FA78679F060D34AF30A
Authority key identifier: 9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FkfrCmZyUduk9gd6hXvUqUqP7Tk.roa
Signing time: Mon 27 Mar 2023 11:19:36 +0000
ROA not before: Mon 27 Mar 2023 11:19:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210636
IP address blocks: 185.89.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:22:cb:88:27:e5:61:0f:a7:86:79:f0:60:d3:4a:f3:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f0743496c7ff3effb870601139cad9d2f271e10
Validity
Not Before: Mar 27 11:19:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1647eb0a667251dba4f6077a857bd4a94a8fed39
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:d3:c3:07:aa:3a:ba:9c:ec:db:67:35:4b:
3b:3c:13:58:47:ac:c1:d1:9d:8f:c0:a1:ea:36:4a:
f6:d3:ef:9c:d7:3a:88:bb:fb:21:cc:05:dd:cf:ae:
18:ad:94:f8:17:ed:29:3c:3f:70:74:a5:fe:0e:e9:
38:d7:e1:20:e5:d5:a3:58:31:db:eb:6e:16:93:c2:
89:ae:50:06:95:94:1a:84:1f:e8:15:39:95:0b:fd:
60:fa:72:a6:88:3d:ff:da:2a:33:db:3c:79:57:a9:
48:17:a7:e9:9e:15:85:73:ee:64:c6:c7:cd:b6:9e:
aa:5a:92:47:a8:eb:50:e7:5e:87:3c:43:30:18:63:
21:03:7a:02:74:62:cb:cd:4a:72:ec:ba:61:f2:7d:
0a:10:18:c2:60:c4:67:01:8e:fc:ef:3e:00:7e:50:
aa:e7:fe:02:91:ca:98:fa:d6:e5:1d:ba:94:80:c6:
fe:68:72:c0:50:29:8e:d7:d7:45:92:3a:2f:5a:13:
26:78:9f:b0:5c:b7:68:92:4e:fe:f3:2c:62:a6:d8:
3b:9f:83:d5:99:a2:7e:26:1e:4b:0f:11:bf:90:1a:
c1:48:86:46:b6:ba:74:ba:be:1e:ba:0e:76:75:70:
6f:c2:41:2f:70:1d:20:72:d0:7a:ef:a5:35:8a:7d:
cc:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:EB:0A:66:72:51:DB:A4:F6:07:7A:85:7B:D4:A9:4A:8F:ED:39
X509v3 Authority Key Identifier:
keyid:9F:07:43:49:6C:7F:F3:EF:FB:87:06:01:13:9C:AD:9D:2F:27:1E:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nwdDSWx_8-_7hwYBE5ytnS8nHhA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/FkfrCmZyUduk9gd6hXvUqUqP7Tk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/22b7ab-fc11-407a-bd3c-63411367d90a/1/nwdDSWx_8-_7hwYBE5ytnS8nHhA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.89.249.0/24
Signature Algorithm: sha256WithRSAEncryption
05:55:bc:34:2b:ef:5d:f5:e4:30:8b:4f:50:82:54:a1:26:c5:
ef:ba:0c:eb:a9:27:ba:b1:60:85:7d:a2:c0:d7:fa:b7:36:fb:
3a:71:09:4a:db:fd:e8:33:3d:7f:ac:81:bd:4b:26:53:bb:6d:
77:fa:8e:cf:88:c8:7e:37:8f:75:3f:32:a5:b2:7d:a5:42:d4:
fd:56:0d:f2:ab:83:c4:12:6c:9d:12:56:20:f1:f6:82:3a:f4:
1e:f7:06:11:da:e0:0f:b6:f7:8d:2c:60:6d:a7:82:ab:9f:e4:
bd:12:fa:bc:fb:d5:95:16:13:1c:e6:e7:33:50:01:14:e7:91:
6e:b9:7e:fe:e5:55:8c:4d:7c:69:c8:20:7a:d7:7b:f8:22:e2:
49:48:1e:c0:d5:b4:ef:a4:04:cb:8a:57:77:98:6f:48:48:39:
29:9f:eb:73:17:43:dc:74:51:99:af:3f:fb:7b:d6:58:3b:55:
d2:37:05:be:b4:9a:b7:aa:d1:d5:6b:9f:f4:2b:29:4b:76:ce:
a5:06:33:70:a9:8a:56:e7:f7:1d:bd:97:c5:f3:a6:5c:62:12:
e2:6f:b0:c9:57:f4:88:c8:62:02:74:4a:53:9b:65:dc:7e:b2:
13:51:67:4e:3e:0f:fb:e0:40:1f:bf:c3:94:23:86:f2:93:de:
fe:68:5f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:48:15 2023 by rpki-client on console-ams.rpki-client.org