Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fzvW0MqrIJ8ArqtO1r1ckfgfyi4.roa
File: fzvW0MqrIJ8ArqtO1r1ckfgfyi4.roa (raw, json)
Hash identifier: TWBLIn90fEGeIe8ZZaLqCIlmuWyHABzy4GeZ9vTF1Mg=
Subject key identifier: 7F:3B:D6:D0:CA:AB:20:9F:00:AE:AB:4E:D6:BD:5C:91:F8:1F:CA:2E
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 018A3D2F63C06A57340D8C662E08365BAFAE
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fzvW0MqrIJ8ArqtO1r1ckfgfyi4.roa
Signing time: Mon 28 Aug 2023 17:27:10 +0000
ROA not before: Mon 28 Aug 2023 17:27:10 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 5065
IP address blocks: 188.255.206.0/24 maxlen: 24
188.255.141.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3d:2f:63:c0:6a:57:34:0d:8c:66:2e:08:36:5b:af:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Aug 28 17:27:10 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f3bd6d0caab209f00aeab4ed6bd5c91f81fca2e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ea:55:bb:45:33:ab:c1:3c:42:08:10:af:24:
8c:1f:96:33:df:b7:2c:21:7a:7f:fd:d5:07:79:c4:
b1:78:97:25:05:26:08:4d:55:3e:0f:3c:55:1f:b4:
7c:7a:53:87:27:b6:ff:75:21:b0:f6:26:b6:a9:48:
1c:b4:ce:ab:ea:b6:7f:5c:95:fb:67:1e:0d:c6:ac:
90:e1:7b:c9:73:e0:31:17:e6:53:0d:0d:9d:b6:98:
95:3a:ec:64:5a:9f:9c:65:71:4f:ab:2d:96:3a:a8:
66:5f:1a:5f:e9:7e:35:15:c4:3c:26:a3:02:05:bf:
a8:a4:85:b2:d7:c5:9b:34:50:89:79:ee:30:50:1b:
ef:59:b1:22:84:3c:c5:24:22:a4:dd:e5:5d:3e:a8:
3a:c2:bd:24:55:38:3b:81:a1:92:e8:77:75:33:02:
7f:95:3f:87:21:4f:ee:97:52:ae:31:1b:8b:c9:1b:
f7:18:aa:41:e6:ff:4f:25:c4:bf:9c:06:4c:cd:fe:
a2:20:30:91:9b:66:04:14:64:78:c8:6a:71:21:4c:
3b:50:dd:47:95:61:33:f5:2c:a8:bd:80:f6:85:0e:
13:90:9c:28:b7:20:c9:f3:f3:d2:04:cc:7e:15:7d:
cf:f8:66:25:19:37:f6:f0:d0:8e:61:0f:f9:6a:1e:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:3B:D6:D0:CA:AB:20:9F:00:AE:AB:4E:D6:BD:5C:91:F8:1F:CA:2E
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/fzvW0MqrIJ8ArqtO1r1ckfgfyi4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.255.141.0/24
188.255.206.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:6f:4d:1c:c1:97:b9:70:ef:e6:e7:b4:a2:41:b3:0f:fd:c7:
65:fa:7e:ea:cd:c4:26:e2:7e:37:7e:ba:ea:85:8d:af:3e:b1:
9c:43:20:5b:e0:97:9a:97:0b:fb:4a:e7:92:2e:8b:34:e0:f5:
fd:8c:87:5d:63:e1:5c:d4:a1:c7:4e:22:a0:7b:c1:0c:ec:97:
c4:71:91:e6:4b:ba:5a:d7:5c:b7:16:d7:11:af:5f:a4:6a:8a:
c7:b9:a5:41:49:31:4c:d5:28:93:9d:b3:81:45:de:86:b2:a8:
cd:16:c4:7f:02:13:37:29:07:96:bc:96:29:b5:01:06:14:2f:
15:45:b3:69:23:05:9e:16:23:07:68:c6:32:9c:67:0a:b4:26:
b7:1b:19:a8:1d:f4:ac:29:2b:b3:cd:71:1f:78:a9:b7:45:e2:
22:c5:f6:51:73:0c:c8:c9:e7:bc:23:89:cd:08:e9:24:82:2c:
2e:86:a5:45:79:9b:ee:8f:d6:30:ed:37:56:44:4e:65:99:63:
d0:18:be:75:f3:7f:3f:71:a4:bc:57:ea:ad:e6:d6:82:1c:fc:
48:20:97:a5:b9:82:42:ea:10:bf:67:39:d3:a8:6b:98:e3:42:
4b:c1:af:df:fa:19:e0:61:e2:38:ea:22:01:56:3d:e9:3d:72:
a9:81:2d:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 2 08:58:25 2023 by rpki-client on console-fra.rpki-client.org