Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FxTgVxJfz9aux4Z4nI0YiWI5YtE.roa
File: FxTgVxJfz9aux4Z4nI0YiWI5YtE.roa (raw, json)
Hash identifier: 1Mn4C+N93KDgskHjaAUTrHy0Z+TxoSnerMaOT2hAEP0=
Subject key identifier: 17:14:E0:57:12:5F:CF:D6:AE:C7:86:78:9C:8D:18:89:62:39:62:D1
Certificate issuer: /CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Certificate serial: 0186C2183B95A14226D791DD094FA5A49BC8
Authority key identifier: 36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FxTgVxJfz9aux4Z4nI0YiWI5YtE.roa
Signing time: Wed 08 Mar 2023 16:40:13 +0000
ROA not before: Wed 08 Mar 2023 16:40:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 194.146.92.0/24 maxlen: 24
79.98.246.0/24 maxlen: 24
79.98.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Mar 2023 10:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c2:18:3b:95:a1:42:26:d7:91:dd:09:4f:a5:a4:9b:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=368bfb8a5eee49082ea628df25a4a5d50f3aa9b3
Validity
Not Before: Mar 8 16:40:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1714e057125fcfd6aec786789c8d1889623962d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:a9:37:a6:f9:0e:d2:3e:b2:7a:35:a2:f6:c8:
de:9c:b1:7f:6f:05:da:34:a3:62:d9:76:0f:8c:a4:
fb:13:7d:2e:64:39:8f:8b:e1:45:4c:e1:e2:bc:4c:
a1:a0:c9:41:c3:49:70:d4:71:76:20:a0:2e:03:a1:
e4:a7:ea:d0:59:31:9b:c8:f2:26:0a:b1:67:01:72:
e3:d9:50:bd:ff:5d:54:27:9e:0d:88:e5:15:b2:6b:
3e:70:82:7c:74:f0:70:e6:3d:e6:ae:b1:9e:49:4f:
42:87:27:bf:b5:4b:ba:9d:3d:2c:1d:65:46:ba:d1:
b9:ab:ed:ad:be:93:06:09:5f:d3:7e:4a:2c:da:76:
99:db:c1:53:5d:d7:01:68:2a:8e:48:95:f1:23:64:
c7:38:75:3c:01:13:24:06:a9:20:af:70:a1:41:3d:
d6:e9:c0:4b:fe:c1:b1:15:e3:c4:19:f6:54:ec:fa:
6b:99:86:89:49:20:d7:2d:a3:47:c3:02:b2:67:cb:
17:42:54:ca:03:7b:0a:a2:7b:c0:5d:3e:93:f0:f2:
ac:d8:f1:ea:2e:24:ad:1c:63:40:cb:a0:4b:a6:5b:
3a:de:89:c4:a1:8c:2c:fd:62:c0:ef:50:63:bd:58:
2c:23:d5:f9:38:f1:5a:59:83:a1:51:23:24:9f:db:
35:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:14:E0:57:12:5F:CF:D6:AE:C7:86:78:9C:8D:18:89:62:39:62:D1
X509v3 Authority Key Identifier:
keyid:36:8B:FB:8A:5E:EE:49:08:2E:A6:28:DF:25:A4:A5:D5:0F:3A:A9:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nov7il7uSQgupijfJaSl1Q86qbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/FxTgVxJfz9aux4Z4nI0YiWI5YtE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/aa58c3-e706-4a49-a7c5-0ae2e922a292/1/Nov7il7uSQgupijfJaSl1Q86qbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.98.246.0/23
194.146.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:56:80:85:48:c3:8e:9d:64:2a:6a:d9:dd:36:96:49:aa:df:
35:6b:4c:db:ea:3e:76:4c:b0:08:13:ad:89:fb:bb:2d:83:3e:
b5:a8:cd:45:a4:aa:e5:69:a3:5a:1f:ad:2f:5f:3f:34:58:5f:
6a:6c:16:79:34:54:ea:49:12:e6:cb:ff:0e:20:2c:f0:4c:6b:
ef:86:0b:85:cc:e2:0a:41:0e:e5:c9:cc:e3:e8:07:60:2c:98:
b9:e1:3a:20:3f:be:54:89:56:e2:d1:34:b9:be:2e:a6:aa:32:
84:50:11:fd:f6:d2:31:9c:11:99:47:b7:0d:3d:8c:89:11:b4:
3f:1b:8c:3a:ef:cb:b8:8b:ed:2c:9e:7b:2a:f3:a5:de:e0:2d:
fe:8e:2e:0b:47:cb:38:ea:d9:9c:a7:d2:07:6e:15:12:6f:e5:
6b:fb:d5:db:b3:3f:a5:0a:0b:7f:42:93:08:13:b0:fe:29:a8:
38:81:3f:48:cc:9e:5b:cc:33:31:c0:f5:23:d0:e3:cb:ac:0b:
ca:3e:70:f3:f9:17:aa:63:6e:35:b6:94:6d:a9:48:d2:17:b8:
03:f3:07:aa:41:97:d4:f4:a0:a2:d6:21:e7:13:0a:ad:5d:72:
9c:13:a2:a6:59:f3:00:6d:40:0a:d8:d6:9c:ed:1e:f6:56:76:
4e:99:19:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:35 2024 by rpki-client on console-ams.rpki-client.org