Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fxgw0CIrv04KYdLm3Zd6MT44zOw.roa
File: Fxgw0CIrv04KYdLm3Zd6MT44zOw.roa (raw, json)
Hash identifier: x9uSUvijzDcZraX6/9QtceDTtyH4C36uvjyupz1XJeI=
Subject key identifier: 17:18:30:D0:22:2B:BF:4E:0A:61:D2:E6:DD:97:7A:31:3E:38:CC:EC
Certificate issuer: /CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Certificate serial: 0185737A7408BBE8A92E41925C3EC8D82618
Authority key identifier: 15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fxgw0CIrv04KYdLm3Zd6MT44zOw.roa
Signing time: Mon 02 Jan 2023 17:14:42 +0000
ROA not before: Mon 02 Jan 2023 17:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 18345
IP address blocks: 185.164.123.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:7a:74:08:bb:e8:a9:2e:41:92:5c:3e:c8:d8:26:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15ddd4c9dc23fac35574fce2b4294398add8521c
Validity
Not Before: Jan 2 17:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=171830d0222bbf4e0a61d2e6dd977a313e38ccec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6e:d2:4b:29:b8:1d:f3:05:2e:80:7d:7a:ab:
17:ca:73:58:4d:be:81:af:80:f0:55:1e:5e:99:14:
48:04:90:1f:f7:5b:89:10:73:c6:a6:7b:5c:81:c6:
0c:7c:f5:97:fb:0c:98:eb:c9:80:18:6a:43:f8:28:
b8:6c:9e:9f:3b:3d:34:7e:37:24:0e:05:3e:fb:6a:
26:93:b1:bf:ac:7a:f0:b2:25:1f:2b:4d:d9:4b:9a:
2d:31:c3:2f:df:9e:1e:e0:5d:b3:c4:25:96:ed:e1:
ca:4f:12:32:a9:25:f6:a7:a6:17:3b:91:bd:1c:63:
a0:1d:b6:8f:0a:94:c7:cf:c6:0c:d9:b1:13:ff:96:
14:fe:f9:21:5e:d4:11:5c:58:21:33:85:23:3c:75:
7b:1c:64:4b:13:70:b3:99:2e:19:32:ed:1b:80:3a:
61:a4:17:2d:19:df:25:49:f6:aa:be:24:97:c9:eb:
0d:f6:a0:b7:3a:b0:c4:a1:6f:2f:db:70:37:4b:22:
17:91:19:10:20:14:54:d4:df:79:bc:d2:f1:4f:21:
b4:bc:62:6a:50:6c:f3:04:c9:69:4a:97:26:e6:5e:
48:35:6f:d1:99:3d:6f:eb:31:fe:66:cb:01:c3:00:
ea:cd:85:91:01:28:f3:23:09:fc:09:5f:0f:bc:85:
74:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:18:30:D0:22:2B:BF:4E:0A:61:D2:E6:DD:97:7A:31:3E:38:CC:EC
X509v3 Authority Key Identifier:
keyid:15:DD:D4:C9:DC:23:FA:C3:55:74:FC:E2:B4:29:43:98:AD:D8:52:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Fd3Uydwj-sNVdPzitClDmK3YUhw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fxgw0CIrv04KYdLm3Zd6MT44zOw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/358253-41e8-4c13-bfaa-cb3cd0404ab5/1/Fd3Uydwj-sNVdPzitClDmK3YUhw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.164.123.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:96:73:b6:ee:7e:53:38:5a:6c:4a:ef:fb:9b:64:20:07:cd:
88:67:27:c2:f3:a3:f9:ca:8c:1a:83:15:76:f9:eb:0d:bc:09:
f2:d1:ff:b7:70:70:d7:86:d6:00:54:c0:53:63:53:8e:eb:78:
48:58:c1:7f:e4:43:d8:f2:56:18:65:97:ae:07:bb:c6:d6:d0:
af:d7:03:a2:aa:15:76:b1:46:f1:a9:65:65:a7:65:7b:9d:6d:
6b:eb:17:fe:a8:7f:59:81:a3:ba:08:37:22:58:0a:75:99:a1:
ab:3d:37:ad:58:15:71:bf:05:b4:5e:27:4d:02:bf:39:22:56:
fb:42:01:ef:54:6d:38:49:e4:76:c0:4c:0a:5d:69:26:9e:be:
d3:28:16:6b:82:ce:2e:7d:05:b5:96:83:ea:6b:e9:f5:d0:5c:
e2:16:6a:5e:1f:57:6a:11:f9:95:60:4b:d1:8d:36:69:75:78:
b4:9b:36:33:83:b9:98:f9:b5:e8:b4:c3:29:e7:bc:99:cf:e2:
52:c8:50:9f:58:fc:d4:b1:21:93:11:7b:3a:d0:48:5e:13:59:
83:01:f1:01:e0:21:e5:52:c9:8d:07:be:2d:49:91:12:98:56:
62:8f:ee:18:56:cd:65:53:b5:a6:85:fd:15:70:78:3d:d8:05:
1e:eb:63:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:07:23 2024 by rpki-client on console-ams.rpki-client.org