Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/FTBqO2PYvcKH-rYXzhX24wRBHR4.roa
File: FTBqO2PYvcKH-rYXzhX24wRBHR4.roa (raw, json)
Hash identifier: IFG102oB7f1UG9aw303hDGdcCwq6HT2bkLh99ofNc0o=
Subject key identifier: 15:30:6A:3B:63:D8:BD:C2:87:FA:B6:17:CE:15:F6:E3:04:41:1D:1E
Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Certificate serial: 01878E2F11B042BCAC38139123993A41E0A1
Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/FTBqO2PYvcKH-rYXzhX24wRBHR4.roa
Signing time: Mon 17 Apr 2023 07:47:41 +0000
ROA not before: Mon 17 Apr 2023 07:47:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 86.62.28.0/24 maxlen: 24
194.36.32.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 08 May 2023 08:25:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:8e:2f:11:b0:42:bc:ac:38:13:91:23:99:3a:41:e0:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7
Validity
Not Before: Apr 17 07:47:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15306a3b63d8bdc287fab617ce15f6e304411d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:67:aa:19:80:92:84:16:94:30:08:b3:4d:9d:
9b:6b:8e:60:66:7c:13:33:9f:34:71:58:55:02:df:
a3:11:17:6a:c3:8f:93:42:cd:4b:94:68:6b:b7:76:
0a:a0:13:2e:35:5e:65:12:33:82:30:c0:82:4b:fa:
d1:b5:ec:c7:89:af:cf:f9:59:58:3b:61:84:52:2c:
5f:50:ef:e6:2a:ac:5c:0b:11:a8:0f:65:5a:44:db:
67:71:81:a0:bf:7f:58:c0:06:e6:80:ee:d3:5b:6a:
c8:2b:94:09:ab:c3:18:c0:90:49:8d:40:2c:8d:59:
7c:50:64:20:35:5e:d0:bc:99:57:c3:07:0f:16:ca:
75:c7:27:c6:35:0c:61:5b:53:9a:15:f0:f3:93:79:
a1:7a:c2:7b:a8:60:a6:bf:09:76:f6:a7:36:cc:a6:
02:a7:ba:02:03:a4:07:09:b4:39:0b:4e:bb:c4:0c:
66:ff:b1:47:7f:ad:65:73:45:6d:26:d3:18:b7:d1:
d5:e5:51:5f:93:49:e2:11:4a:4f:51:3e:5c:41:ac:
32:e9:2e:20:19:13:dd:b8:24:41:32:1b:da:70:f4:
57:cc:12:f7:61:ff:46:cf:5d:38:b7:d0:79:f6:98:
14:8c:92:e8:73:ac:20:2b:1e:ea:c2:f3:80:f1:24:
7b:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:6A:3B:63:D8:BD:C2:87:FA:B6:17:CE:15:F6:E3:04:41:1D:1E
X509v3 Authority Key Identifier:
keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/FTBqO2PYvcKH-rYXzhX24wRBHR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.28.0/24
194.36.32.0/23
Signature Algorithm: sha256WithRSAEncryption
44:4f:41:85:17:ee:39:90:8f:66:f5:0b:6e:79:bb:8c:bc:eb:
a0:7a:b5:9e:30:91:97:68:82:a3:36:d9:dc:b8:43:9f:c5:a4:
dc:ec:9d:8c:ca:85:a9:8a:38:24:81:1d:27:36:55:ca:bf:85:
f8:5c:a4:2c:68:94:a7:f9:02:f5:a9:f9:06:6c:36:fc:2a:52:
3b:12:30:37:4d:d5:e5:a5:9e:40:1b:c0:0e:88:be:18:58:92:
45:1a:20:7a:d7:d6:be:42:92:21:fa:74:32:58:ed:2b:cd:35:
35:46:5b:86:00:de:a0:b9:00:f9:fa:0d:bc:12:0c:be:29:db:
fd:c4:85:81:64:92:80:1a:7a:b9:f7:af:52:a9:73:bc:0c:d0:
c5:c9:db:74:e9:81:41:d8:16:6f:86:7f:a8:bb:fb:b2:de:9f:
bc:33:21:01:ff:47:1a:3d:47:59:b9:0f:fc:a6:d5:2f:88:f5:
43:71:9b:1d:fd:e5:ae:8c:1c:84:80:2d:b6:99:65:3a:7c:f6:
09:bb:f8:27:3b:21:00:94:69:fa:fd:25:17:69:0e:36:cd:6c:
04:4f:d3:a6:ea:26:32:ee:68:91:2d:b7:3f:66:bb:44:36:fb:
95:07:17:85:d9:e8:55:db:f9:e8:34:cf:16:9f:c4:e6:af:cc:
a4:5f:78:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:12 2024 by rpki-client on console-fra.rpki-client.org