Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rfT_80Z17BRqORe9cON-Irij-dU.roa
File: rfT_80Z17BRqORe9cON-Irij-dU.roa (raw, json)
Hash identifier: 3APKgogmHMYZ+aOQ5v2hKIADbN5XsaLu2ppOEDM2GTI=
Subject key identifier: AD:F4:FF:F3:46:75:EC:14:6A:39:17:BD:70:E3:7E:22:B8:A3:F9:D5
Certificate issuer: /CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Certificate serial: 01889010609D94C13179F1621553D291A0B2
Authority key identifier: D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rfT_80Z17BRqORe9cON-Irij-dU.roa
Signing time: Tue 06 Jun 2023 09:36:12 +0000
ROA not before: Tue 06 Jun 2023 09:36:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 194.15.96.0/22 maxlen: 24
188.209.140.0/22 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:90:10:60:9d:94:c1:31:79:f1:62:15:53:d2:91:a0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d93da2019909d9fc37829fd9ec29d948ecff7c92
Validity
Not Before: Jun 6 09:36:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adf4fff34675ec146a3917bd70e37e22b8a3f9d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1c:d5:8c:e3:90:1c:ec:9f:fb:32:ec:4d:64:
4c:af:56:0a:c9:d2:88:71:fd:6e:7d:50:f3:98:86:
6e:d1:60:a8:a2:dc:b2:49:43:d1:16:f7:59:a6:72:
05:d5:88:ee:de:ab:c7:36:24:bf:a6:bf:4a:ba:ed:
37:bd:e6:a4:73:36:65:18:3b:47:89:1f:aa:0f:f4:
af:a1:a3:df:6a:45:d5:5e:f8:78:f9:82:9d:e1:72:
9a:99:86:82:15:9b:97:17:d3:64:c1:69:ed:48:b3:
0f:ab:40:7f:1e:03:3b:94:ee:2c:9b:b0:a8:93:b6:
05:9f:3d:bc:d0:46:d8:4f:9a:4b:cc:c5:71:5e:2a:
e8:3b:12:21:4c:2f:69:c4:3c:ac:b4:59:b2:35:35:
65:b4:eb:24:db:c7:26:2c:24:75:18:2d:39:20:d8:
f4:f0:27:5e:3a:e2:8e:46:6a:94:58:66:ba:97:37:
df:4e:2a:cf:82:dd:1d:30:cc:f3:44:62:2c:8c:c9:
76:45:c8:b4:b2:10:02:4c:82:21:91:f0:35:7a:c4:
10:3e:72:bf:f4:0c:28:cf:d4:0b:5d:5b:a0:fa:45:
59:d4:fb:3b:37:d2:56:4d:6c:e3:34:65:3c:a1:9b:
00:8c:de:dc:9e:e7:d2:af:23:10:29:88:fe:ed:3f:
36:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:F4:FF:F3:46:75:EC:14:6A:39:17:BD:70:E3:7E:22:B8:A3:F9:D5
X509v3 Authority Key Identifier:
keyid:D9:3D:A2:01:99:09:D9:FC:37:82:9F:D9:EC:29:D9:48:EC:FF:7C:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/rfT_80Z17BRqORe9cON-Irij-dU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/47afa3-ce31-4060-a078-f5addddf1ec5/1/2T2iAZkJ2fw3gp_Z7CnZSOz_fJI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.209.140.0/22
194.15.96.0/22
Signature Algorithm: sha256WithRSAEncryption
53:45:fc:d4:c5:06:4f:27:c8:c7:61:51:bc:45:59:e0:be:2e:
ff:ab:e4:1c:62:40:5a:71:f9:eb:50:a1:43:1c:db:01:a2:e2:
14:ad:e5:86:51:2c:bf:b8:f7:b7:9a:12:ea:31:a7:ac:d8:ff:
3b:f4:b4:4e:8c:72:7b:89:cd:d7:c7:91:e5:5f:2a:42:5f:33:
f6:2d:be:4f:1d:6e:81:38:f1:d8:19:8b:11:67:d9:32:d6:94:
51:28:03:8d:6d:60:84:04:59:46:dc:d8:42:78:20:aa:94:d6:
82:0a:1b:bc:91:fd:9c:07:b5:16:d1:de:53:0d:94:c8:fa:d1:
1e:78:ad:56:1e:0a:12:b1:5e:b1:b3:b6:c4:3a:66:36:ef:a7:
ea:bd:8d:52:95:8b:e9:ae:12:85:49:56:ce:85:70:c5:b1:2c:
94:5b:90:64:c0:bb:22:e1:38:67:9f:f6:e2:e5:f6:7a:a1:0e:
9c:f6:a0:ea:a3:78:14:f4:87:bc:a8:7b:c8:97:f2:4b:83:47:
38:b8:e5:a4:fa:cc:f0:90:dd:c5:1a:c1:d5:99:d2:dc:bc:ca:
9b:b0:8d:3d:33:3c:bd:d9:79:82:e0:ba:b7:fe:b2:30:5b:db:
b9:52:90:4f:cd:98:55:8d:38:c7:52:27:a5:c6:60:0c:92:4c:
15:cf:67:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:14 2023 by rpki-client on console-fra.rpki-client.org