Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/FMgoT__hPxNLr-RfE0jdELdNxSo.roa
File: FMgoT__hPxNLr-RfE0jdELdNxSo.roa (raw, json)
Hash identifier: xNi93MfAxu+3ecOMOYHVcyToLPv/2g4HKoJhbqeoKKo=
Subject key identifier: 14:C8:28:4F:FF:E1:3F:13:4B:AF:E4:5F:13:48:DD:10:B7:4D:C5:2A
Certificate issuer: /CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Certificate serial: 0185720311C63E59300D8F96D7F5FF0BA4C3
Authority key identifier: 8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/FMgoT__hPxNLr-RfE0jdELdNxSo.roa
Signing time: Mon 02 Jan 2023 10:24:41 +0000
ROA not before: Mon 02 Jan 2023 10:24:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198033
IP address blocks: 195.190.152.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:03:11:c6:3e:59:30:0d:8f:96:d7:f5:ff:0b:a4:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e622a34c55e39b8fa15a37ba9e370eaafd99774
Validity
Not Before: Jan 2 10:24:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c8284fffe13f134bafe45f1348dd10b74dc52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:ec:3f:52:ba:ef:3a:4d:43:fb:96:4c:68:a8:
05:19:b1:50:c2:4e:1b:69:ac:ab:8f:df:4d:94:d1:
04:2d:39:8a:c1:b8:93:fb:6e:4e:7b:a1:e5:62:ca:
e6:27:91:dc:82:99:c8:b4:f7:f7:8f:73:62:86:01:
38:9c:f4:be:0e:93:9d:f2:ef:95:ca:02:b3:74:d8:
76:f0:36:c6:29:57:02:49:b3:8c:41:83:c3:2c:42:
79:10:95:bd:9c:06:81:2a:ea:36:92:d0:e0:82:53:
49:53:6f:11:da:4c:bc:50:92:b7:ee:33:ac:7a:db:
3e:89:b3:36:56:c8:37:64:eb:f8:d7:69:fc:4c:ae:
38:0a:49:2a:5b:69:bd:2b:c4:e2:1e:2d:7f:68:a0:
fd:89:0d:6a:e4:03:73:e6:02:c0:f2:dc:6e:2f:67:
84:94:b3:78:e6:12:4a:b8:37:24:eb:ab:51:37:51:
d9:18:03:ff:dd:9e:16:5d:19:2d:37:22:c5:d7:2a:
ce:d2:3c:b8:0d:70:c6:7a:ab:f5:5c:64:fe:5b:7d:
2b:22:c7:62:c9:8a:56:12:ad:60:a7:04:09:db:d9:
17:1a:44:c1:02:bf:5a:9e:77:ac:af:a2:10:0f:58:
bb:68:75:fe:08:3b:32:73:8e:7a:4b:de:49:44:5c:
52:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:28:4F:FF:E1:3F:13:4B:AF:E4:5F:13:48:DD:10:B7:4D:C5:2A
X509v3 Authority Key Identifier:
keyid:8E:62:2A:34:C5:5E:39:B8:FA:15:A3:7B:A9:E3:70:EA:AF:D9:97:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/FMgoT__hPxNLr-RfE0jdELdNxSo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/82cb3e-8199-4917-a176-e50e1e9bb4b3/1/jmIqNMVeObj6FaN7qeNw6q_Zl3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.190.152.0/24
Signature Algorithm: sha256WithRSAEncryption
94:29:03:5b:79:96:53:3c:fb:4d:71:2f:6a:b6:a4:4c:e8:6e:
51:ed:9b:15:04:b3:b1:3b:52:9b:8a:75:22:2c:1a:52:77:5c:
f0:5c:ce:85:a8:ee:83:6a:c2:65:0f:03:12:7c:cf:77:58:b8:
95:4e:49:78:ac:6f:8d:e2:8c:c4:b9:95:d7:70:1c:09:2a:5d:
08:65:ab:27:63:46:10:98:25:ee:29:c4:c9:06:1c:56:45:86:
92:56:6f:e8:7e:0f:79:71:c5:eb:88:e7:7b:97:37:a9:3a:a8:
da:f0:69:27:03:96:2b:69:d5:1d:34:e7:ef:94:2b:a1:1c:48:
df:70:b1:c8:bd:7b:83:12:84:dc:da:67:da:97:7e:9e:16:e8:
f4:e5:b7:14:70:1d:91:e2:10:18:17:d0:c4:3a:de:93:eb:18:
9c:da:6d:f4:ac:77:d0:fd:f5:88:59:8d:af:27:28:3d:a9:5d:
f2:a6:0e:b2:56:0f:13:92:04:90:08:be:fe:29:0f:fa:97:17:
59:27:67:69:91:cb:6f:25:45:96:b8:e5:af:71:39:48:9c:3c:
e4:4b:e4:9b:85:81:34:a6:78:39:96:a3:10:b4:84:9d:81:66:
62:c8:19:2a:14:d4:e0:5c:43:9d:ae:ce:76:67:d4:7c:d9:5e:
73:29:71:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:49:53 2024 by rpki-client on console-fra.rpki-client.org