Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FoPpNnaSWN2N25LEqplSswzeOjM.roa
File: FoPpNnaSWN2N25LEqplSswzeOjM.roa (raw, json)
Hash identifier: XwIAstHFJMfq3JJBQiA179KQ7/+g/cvaD9PH6JVQpeg=
Subject key identifier: 16:83:E9:36:76:92:58:DD:8D:DB:92:C4:AA:99:52:B3:0C:DE:3A:33
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 0185700291D6271C5BE7B34A2B059453FC50
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FoPpNnaSWN2N25LEqplSswzeOjM.roa
Signing time: Mon 02 Jan 2023 01:04:54 +0000
ROA not before: Mon 02 Jan 2023 01:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142430
IP address blocks: 89.46.10.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:91:d6:27:1c:5b:e7:b3:4a:2b:05:94:53:fc:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1683e936769258dd8ddb92c4aa9952b30cde3a33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:be:87:a1:21:0d:10:a7:d4:c8:0a:f2:c0:78:
22:bf:35:3b:0c:85:b0:25:dd:b2:30:b7:0e:ea:b0:
97:14:94:70:3b:13:86:cf:b9:7b:2f:0b:d2:2c:ed:
66:91:8f:25:f6:20:95:05:97:fc:96:b6:0a:52:fb:
21:30:ba:f4:79:74:08:e2:51:63:e4:63:04:6d:7a:
0c:be:78:44:83:72:37:83:84:7d:4b:ac:db:58:5c:
89:98:bf:4d:95:c8:de:19:dd:86:67:1c:0f:e9:fd:
4f:00:7e:b0:e7:20:4e:c6:a1:69:82:d7:05:5f:a6:
c0:6d:d6:41:7f:f0:7f:0c:2b:34:cf:85:3f:23:b6:
65:d6:1f:d8:37:f4:14:88:48:37:59:9a:c8:98:21:
44:a5:25:20:c0:69:35:1d:a0:21:b5:7d:f2:db:21:
71:67:55:7d:5d:1b:be:40:31:23:3b:5e:8a:0c:e3:
d0:a4:96:27:63:f2:07:63:bf:dc:38:f6:54:a9:6d:
3e:e8:31:ae:cb:d0:3e:48:fa:a7:e6:33:67:62:51:
ab:c0:f3:2b:eb:8e:35:79:79:9b:40:b1:76:6f:69:
ab:d1:60:ae:2f:fd:8b:ad:4b:30:c8:10:c5:99:1e:
aa:9f:3b:ac:70:70:06:e9:3e:43:1c:16:6c:dc:2b:
79:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:83:E9:36:76:92:58:DD:8D:DB:92:C4:AA:99:52:B3:0C:DE:3A:33
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FoPpNnaSWN2N25LEqplSswzeOjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.46.10.0/24
Signature Algorithm: sha256WithRSAEncryption
03:b3:b3:f8:87:77:64:a6:cd:e2:ec:f3:bd:98:2a:2f:19:cd:
75:15:cb:7d:bc:fb:1d:e0:06:91:e2:0f:83:c9:b4:88:15:6d:
e2:b1:4e:96:50:77:7f:fa:98:83:8e:a5:26:b8:c7:11:cb:86:
9b:78:70:66:1e:29:e8:1a:63:b9:75:04:07:98:e0:32:01:fb:
97:61:9e:30:9b:0d:cf:51:c6:a0:0f:df:69:85:08:02:59:11:
a1:ac:4e:89:49:c0:f5:68:40:2a:02:67:94:c0:39:cc:57:51:
91:0d:c9:e7:de:71:d7:38:49:7f:b3:a4:15:7d:ae:9a:15:25:
59:34:0b:05:ee:84:60:4c:5a:aa:ef:f7:9a:f7:dd:c3:8a:64:
05:b2:57:04:74:cb:56:4e:eb:53:ff:16:14:0b:b8:c0:76:91:
f0:65:ec:91:6d:8f:d8:ac:b4:21:72:c2:30:3d:78:ed:5f:11:
7f:2b:ce:10:4b:01:34:61:21:51:55:5d:aa:d2:61:47:93:ad:
d8:23:1a:64:29:bd:ef:29:34:ae:59:2f:95:93:00:8d:48:56:
d5:87:02:8d:e4:45:96:3e:c9:ae:e4:21:e8:88:89:94:69:62:
0b:d6:67:78:72:36:fe:3a:30:40:95:8f:0f:32:61:34:10:61:
0d:24:6b:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:19 2023 by rpki-client on console-fra.rpki-client.org