Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T_FG_1HYpwrUuj1_CzHmWX75N1o.roa
File: T_FG_1HYpwrUuj1_CzHmWX75N1o.roa (raw, json)
Hash identifier: NykhqxCG4pBYPtY3InRLtyKGEZzoMsN5PLWBrIb1qkQ=
Subject key identifier: 4F:F1:46:FF:51:D8:A7:0A:D4:BA:3D:7F:0B:31:E6:59:7E:F9:37:5A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 0188F3BDB84A90F6F98DAFA807A914E7FCF3
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T_FG_1HYpwrUuj1_CzHmWX75N1o.roa
Signing time: Sun 25 Jun 2023 18:07:56 +0000
ROA not before: Sun 25 Jun 2023 18:07:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209882
IP address blocks: 85.120.30.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:f3:bd:b8:4a:90:f6:f9:8d:af:a8:07:a9:14:e7:fc:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 25 18:07:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4ff146ff51d8a70ad4ba3d7f0b31e6597ef9375a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ba:86:c5:f8:6d:5a:11:b6:6b:70:b9:71:3b:
93:7f:c6:d2:7d:0d:cc:be:05:97:ca:68:a0:85:b7:
00:92:bb:a4:a9:74:3e:67:0c:81:33:52:22:b6:86:
c7:31:8d:2c:d7:f0:60:94:95:7c:6d:5a:74:e0:a2:
51:2e:0b:dc:6e:d1:b1:8a:c0:3c:6d:87:7c:55:c8:
ff:f7:a9:1d:d1:f5:78:9d:48:06:33:c3:20:df:57:
2e:b9:d2:ae:05:03:80:61:c1:3f:82:c4:a5:45:a4:
78:89:07:44:30:16:98:97:64:a8:e6:1d:d9:8a:ff:
45:cc:d9:81:4f:bd:16:20:a4:57:9a:09:e1:c7:d1:
8b:20:ee:e7:cd:ed:2d:0c:13:b6:92:02:9b:c7:7d:
1a:3b:51:84:61:cd:41:82:f6:56:e6:ed:6d:45:9a:
37:0d:2e:e5:44:59:70:ac:b0:61:ad:c1:f7:bf:50:
26:54:2b:89:95:78:32:d3:c9:da:d8:17:6c:11:6d:
60:67:0e:28:a7:8a:bb:08:39:2a:69:3b:51:6c:9f:
2e:2c:00:06:1a:2a:f5:68:de:f5:5e:01:7c:da:5a:
be:7d:22:bb:2b:ae:bf:ba:7b:83:3e:bc:03:05:cf:
b8:c9:79:ea:5f:44:0c:ba:99:24:e9:83:8a:49:a7:
08:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F1:46:FF:51:D8:A7:0A:D4:BA:3D:7F:0B:31:E6:59:7E:F9:37:5A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/T_FG_1HYpwrUuj1_CzHmWX75N1o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.30.0/24
Signature Algorithm: sha256WithRSAEncryption
88:66:e8:8f:47:03:0e:5b:e7:dd:1e:e6:4d:3c:79:a1:16:f0:
c2:b1:af:8e:49:7f:fd:66:01:9b:e2:c1:6f:24:36:f2:bf:d6:
41:c2:42:2e:9a:28:82:8a:5d:14:74:5b:29:9c:c2:4d:42:45:
92:5f:47:ef:82:39:d6:23:28:d9:79:3f:64:be:e6:cb:d4:e3:
8c:65:59:76:35:be:fa:9c:00:7d:cb:f2:d2:1f:c4:39:73:cc:
31:76:b5:09:ec:16:06:bd:c9:38:e8:5b:45:cf:92:1f:fb:54:
78:71:88:6c:23:7e:4a:ff:e6:0c:d6:84:01:86:d8:92:a9:6f:
d0:a8:e5:e5:0e:fc:f7:d0:a3:fa:e2:37:3d:81:96:43:fa:5b:
e0:fa:43:58:b6:48:8e:69:08:9b:09:db:e9:83:33:5b:93:ec:
db:7e:0e:bf:4d:25:11:4d:05:19:ad:87:f4:b6:56:0b:95:bc:
98:49:ee:3a:e2:85:39:5c:4e:ba:19:c5:fa:6a:00:ba:21:0e:
eb:fb:ff:70:f2:e9:12:4a:c5:bd:9a:fe:30:6c:26:97:f2:ba:
98:61:7b:5c:3d:8a:10:35:ca:d0:17:6d:06:9e:2c:ea:6e:aa:
a8:cf:0d:00:21:e6:9d:ae:39:de:e4:b7:23:04:00:ff:39:d9:
db:6a:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:18:48 2024 by rpki-client on console-ams.rpki-client.org