Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_AvKSJsYUlXPpDuzzlcGxEGf4O0.roa
File: _AvKSJsYUlXPpDuzzlcGxEGf4O0.roa (raw, json)
Hash identifier: nQYvQ6fdy+PdpU6tm5PMjD5HPxjWIyLO8qLN7a8RWTg=
Subject key identifier: FC:0B:CA:48:9B:18:52:55:CF:A4:3B:B3:CE:57:06:C4:41:9F:E0:ED
Certificate issuer: /CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Certificate serial: 018B1596A5E268535D7E85F5FC10FCDC3279
Authority key identifier: DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_AvKSJsYUlXPpDuzzlcGxEGf4O0.roa
Signing time: Mon 09 Oct 2023 17:57:56 +0000
ROA not before: Mon 09 Oct 2023 17:57:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 10753
IP address blocks: 217.67.68.0/22 maxlen: 22
91.200.212.0/22 maxlen: 24
85.255.176.0/21 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:15:96:a5:e2:68:53:5d:7e:85:f5:fc:10:fc:dc:32:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ddf8b45254e5470d1d4cce6fb7dfd4d0d83b5d59
Validity
Not Before: Oct 9 17:57:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc0bca489b185255cfa43bb3ce5706c4419fe0ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:53:66:d4:71:e8:e3:4f:dd:e5:4f:ac:2f:cb:
a4:2d:25:53:d9:85:4c:75:29:35:4b:a3:47:1e:b9:
c3:2e:42:55:ae:c4:43:45:f2:de:d4:de:cb:73:f6:
c7:68:ff:cc:5c:03:d4:66:bc:1e:61:31:9d:5a:e0:
05:5a:49:39:62:a6:79:dd:cf:31:69:d4:ed:51:e5:
34:b9:12:6f:9a:af:b1:a7:37:d9:f9:b9:80:d7:d8:
4d:2d:54:92:22:d8:cb:9c:d5:b3:10:63:1d:64:2e:
0a:16:0e:cd:c9:9d:af:cc:e6:2b:cf:94:5f:d4:50:
77:66:ad:0f:ff:20:c5:f5:95:86:e1:a5:d8:19:5a:
a3:37:b1:03:03:4f:27:89:2c:7c:32:4e:1d:84:7e:
d4:14:87:4b:13:3c:f0:e0:35:e9:c9:86:a5:55:89:
ae:2e:35:17:cd:88:0c:db:c1:4e:9f:22:b3:12:dc:
59:17:7d:fc:f5:74:95:b8:7e:6b:22:0a:f4:91:53:
e2:44:3a:94:33:bf:99:80:a7:1b:b8:2d:97:5c:94:
12:d0:47:e9:0d:16:63:d9:e8:e3:8a:05:c6:4e:49:
6a:69:16:b1:a1:df:78:38:00:3c:47:e7:5c:1c:29:
48:64:7e:c8:ca:f7:1e:a5:d9:ec:27:12:19:cc:85:
a9:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:0B:CA:48:9B:18:52:55:CF:A4:3B:B3:CE:57:06:C4:41:9F:E0:ED
X509v3 Authority Key Identifier:
keyid:DD:F8:B4:52:54:E5:47:0D:1D:4C:CE:6F:B7:DF:D4:D0:D8:3B:5D:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/_AvKSJsYUlXPpDuzzlcGxEGf4O0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/8fc746-fc08-4211-ba3b-893906fb7858/1/3fi0UlTlRw0dTM5vt9_U0Ng7XVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.255.176.0/21
91.200.212.0/22
217.67.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7b:6e:3b:9e:cb:d9:84:8b:a9:df:43:36:73:47:9c:38:55:db:
48:7d:7a:77:de:6f:2d:c4:a3:9d:9b:58:4c:5b:33:4d:ba:32:
97:7e:c9:f4:8a:66:f5:1a:87:17:06:f8:5a:8f:0d:e5:a6:e1:
32:97:ba:f9:2c:d1:7e:a4:0a:f9:b4:2e:f4:df:b0:5b:9c:95:
8f:07:07:27:ec:57:e0:ee:45:d3:e8:6d:e7:5a:37:a6:a8:2f:
66:27:ab:98:5b:8c:7b:51:fc:b5:30:79:60:91:69:03:77:fe:
31:0f:15:b3:92:a1:03:39:ea:5f:81:17:ea:f7:c7:42:b4:61:
b7:60:75:ad:4a:85:76:67:7a:66:05:e1:dc:bf:87:11:a8:16:
fb:80:de:17:65:2d:ab:01:e8:a5:ac:02:e7:01:b0:9d:86:44:
98:a2:fd:50:4b:f4:9d:5a:dc:2d:9b:5a:7f:c4:3c:e6:6c:d0:
24:29:56:b8:5e:d3:e2:4c:3f:07:4c:be:b6:16:5a:0e:d5:b7:
35:75:e6:bd:c0:78:9b:2a:60:3d:1e:80:e8:50:72:d2:93:76:
2e:34:4e:00:d0:c0:bf:dd:dc:5c:4b:62:a1:01:8c:5e:38:72:
1f:de:fb:f3:0f:75:60:9c:b3:e9:32:ac:4f:0f:81:73:2d:b9:
55:73:29:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 13:24:01 2024 by rpki-client on console-fra.rpki-client.org