Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/FVAVh44IySOlUKzDaJVJA2f-NRg.roa
File: FVAVh44IySOlUKzDaJVJA2f-NRg.roa (raw, json)
Hash identifier: x8lkWu/7Xu4m3YH/WFtwHkQKW/FDRa4PUzaKoL3W2Uw=
Subject key identifier: 15:50:15:87:8E:08:C9:23:A5:50:AC:C3:68:95:49:03:67:FE:35:18
Certificate issuer: /CN=3b599dbfdef3f7fa2fa739f77cdc8402055b0d0c
Certificate serial: 01856F391ADC9352D9E8701F3601F95E4579
Authority key identifier: 3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1mdv97z9_ovpzn3fNyEAgVbDQw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/FVAVh44IySOlUKzDaJVJA2f-NRg.roa
Signing time: Sun 01 Jan 2023 21:24:51 +0000
ROA not before: Sun 01 Jan 2023 21:24:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 37.140.240.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:39:1a:dc:93:52:d9:e8:70:1f:36:01:f9:5e:45:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b599dbfdef3f7fa2fa739f77cdc8402055b0d0c
Validity
Not Before: Jan 1 21:24:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155015878e08c923a550acc36895490367fe3518
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:0e:46:5b:b1:42:1e:9b:40:b8:5d:2d:09:7f:
a2:db:eb:03:27:e4:3a:eb:e9:50:0a:8b:2a:60:01:
71:33:8a:1c:a5:7d:7c:fc:e6:58:7a:1d:ad:c8:4b:
63:6e:7b:ca:0c:b4:cb:dc:ff:5d:55:60:f8:70:a3:
99:b9:7b:fc:cc:95:db:13:5f:cd:99:37:6c:f4:9b:
49:7a:83:4f:0f:8c:40:d4:a6:2b:ed:c5:1a:27:17:
8d:fc:29:a5:9d:07:ea:58:60:96:e6:02:f9:9b:d7:
c1:61:6c:02:75:28:76:35:3a:f3:26:99:e9:be:d3:
c2:48:ce:47:e3:8f:56:83:80:cf:4f:85:b2:16:3a:
f4:f1:81:20:8e:99:60:7f:88:22:10:4a:0e:35:14:
53:8b:ad:fe:f9:be:ae:63:1d:34:b1:99:03:63:bc:
3a:8c:9a:39:c2:3f:a9:49:8a:10:67:fe:88:04:63:
28:be:6c:2c:fb:7b:20:1f:e3:27:c8:96:e0:56:41:
1a:9f:0e:73:a4:62:62:81:65:8e:84:ed:1d:ff:db:
bf:f3:cf:35:7f:d2:32:60:6f:7a:f9:b3:e9:49:6d:
e3:c4:1c:e2:c8:88:ff:c1:65:d7:8f:1c:81:2b:4c:
3a:9d:b1:7b:c3:e5:14:88:43:6d:2e:9e:67:3f:f6:
82:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:15:87:8E:08:C9:23:A5:50:AC:C3:68:95:49:03:67:FE:35:18
X509v3 Authority Key Identifier:
keyid:3B:59:9D:BF:DE:F3:F7:FA:2F:A7:39:F7:7C:DC:84:02:05:5B:0D:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1mdv97z9_ovpzn3fNyEAgVbDQw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/FVAVh44IySOlUKzDaJVJA2f-NRg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/720e23-e85e-4884-8686-afc60413ec87/1/O1mdv97z9_ovpzn3fNyEAgVbDQw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.140.240.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:8a:fd:c1:ee:d3:93:2b:95:4c:ce:03:bd:f9:df:df:32:0f:
87:6a:c8:6f:5f:a2:a1:40:3b:73:5e:c4:bc:d3:0b:5e:3d:d4:
21:64:a9:16:08:92:09:96:db:8c:07:4c:81:89:8c:d7:37:15:
6a:ef:ab:a1:9a:a8:7f:24:01:93:88:ea:d8:b3:f8:9e:17:9c:
aa:89:6a:2a:06:b0:c0:ba:40:f9:ee:6e:11:d2:4e:cb:cc:c1:
67:94:94:43:56:b1:b3:1f:a5:af:1c:0d:b3:39:53:f7:db:5b:
10:1c:b0:1e:e6:35:83:be:64:fa:00:6a:1d:55:a9:11:bc:21:
1a:02:3c:f7:0c:7c:f3:35:8a:c1:1d:d0:66:f2:9b:15:de:cc:
fb:29:e5:b1:1c:85:34:1c:ac:1d:d2:65:6c:4e:67:d7:90:10:
75:c5:72:93:56:40:81:9a:65:ee:42:51:3b:df:73:2b:b2:d1:
ce:82:8c:c0:d5:47:91:16:d6:41:51:61:3f:14:08:46:b8:02:
37:14:c9:3f:ad:d7:fa:00:33:eb:17:69:0a:31:41:8b:32:dd:
a2:03:cd:cf:ad:02:56:de:4d:a2:b1:d5:3a:8f:68:e1:79:90:
19:e1:83:b0:af:dc:78:2d:90:20:7e:78:17:50:c7:b6:71:f4:
03:64:ad:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:44:28 2023 by rpki-client on console-fra.rpki-client.org