Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/F0Ad1wa0WvbWRLhlzLc9zbXEH9c.roa
File: F0Ad1wa0WvbWRLhlzLc9zbXEH9c.roa (raw, json)
Hash identifier: 0EZvd4kCb1ilPX+qxxDpoZz+QjirHsxW9HfEfBWBm+Q=
Subject key identifier: 17:40:1D:D7:06:B4:5A:F6:D6:44:B8:65:CC:B7:3D:CD:B5:C4:1F:D7
Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial: 018617062B0AEC0E637F75532DC61BA0682B
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/F0Ad1wa0WvbWRLhlzLc9zbXEH9c.roa
Signing time: Fri 03 Feb 2023 11:25:25 +0000
ROA not before: Fri 03 Feb 2023 11:25:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212578
IP address blocks: 185.251.80.0/24 maxlen: 24
194.4.52.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:17:06:2b:0a:ec:0e:63:7f:75:53:2d:c6:1b:a0:68:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Validity
Not Before: Feb 3 11:25:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17401dd706b45af6d644b865ccb73dcdb5c41fd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:05:6e:9d:18:8f:e1:db:44:29:6d:02:ac:d1:
8d:e1:d7:b3:ae:81:6f:14:b1:25:33:2e:97:5f:2b:
93:84:1a:fe:de:08:7a:db:b0:61:c2:4e:32:e3:43:
0a:6c:ad:54:75:b2:a1:af:7c:ab:b9:dc:1d:fb:41:
97:a4:19:60:cc:d6:30:c5:1f:de:50:d6:4f:ba:da:
b1:b3:b0:fe:20:12:9e:d6:ef:cd:47:c2:89:4d:39:
dd:94:93:df:0c:e7:fd:79:1e:7b:eb:43:6a:51:85:
5a:9f:23:39:b4:c8:9f:84:08:bd:82:ff:2a:1c:a7:
b1:30:76:a7:4a:ae:e6:00:da:18:1c:72:ba:96:d4:
4a:8c:2e:a3:34:71:4f:7a:a1:14:08:30:19:68:b8:
e0:35:70:90:90:27:4a:94:ff:e0:80:05:81:92:bc:
06:82:da:76:5d:90:30:03:1d:83:26:fb:66:cc:b7:
09:60:00:f0:f7:c4:bf:0a:e6:2f:9c:53:8e:bf:8a:
7f:e4:66:e3:68:7e:1b:5e:0d:d2:4e:51:19:7d:11:
ec:2b:b2:bd:a1:2a:28:65:db:0c:93:be:4e:27:f4:
a9:7e:4e:21:fc:0f:23:0e:61:33:c2:bd:d9:18:56:
0e:d8:1b:00:16:a0:a2:71:78:e7:32:a1:be:10:4f:
e4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:40:1D:D7:06:B4:5A:F6:D6:44:B8:65:CC:B7:3D:CD:B5:C4:1F:D7
X509v3 Authority Key Identifier:
keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/F0Ad1wa0WvbWRLhlzLc9zbXEH9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.251.80.0/24
194.4.52.0/24
Signature Algorithm: sha256WithRSAEncryption
12:21:f6:77:8a:53:aa:ef:99:2c:3b:31:87:7b:87:0a:aa:3a:
20:84:ee:13:c3:e3:56:81:05:64:39:a9:5e:fd:be:ef:97:49:
34:eb:0e:cb:ce:93:c3:64:34:24:ae:c3:9c:d4:82:9c:d2:5b:
f2:91:83:b8:be:b7:3a:5e:80:d4:38:5b:fd:75:60:c7:6d:4d:
fa:c3:ce:7c:f9:cd:81:a2:dc:70:cf:bf:e6:0c:1f:53:0f:d8:
44:4e:bb:84:cb:82:d0:18:68:90:84:3c:9f:20:34:67:01:90:
47:14:b9:0f:e8:91:46:58:a9:7d:01:75:cf:48:e6:fd:b0:7b:
12:77:6b:d9:d0:b1:01:7d:c3:d7:b8:6d:41:df:16:94:9b:91:
32:eb:1b:c2:1f:03:b8:71:b7:b8:73:47:a1:91:78:c0:25:47:
4e:b1:7f:66:72:ee:08:e4:0a:3d:32:3d:09:5d:ac:47:69:52:
ed:3a:6d:56:97:37:f0:d0:d1:1e:1f:98:1b:dd:e8:6d:22:9b:
a8:5c:03:20:5d:6f:fa:ae:19:18:80:09:ec:4a:7a:d5:67:9c:
f8:c1:1d:2c:e3:40:76:61:0e:47:d8:54:4e:a6:dc:32:c2:27:
b6:43:d8:92:04:a0:3b:f6:37:59:89:7e:b5:35:15:02:93:29:
8c:21:03:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 2 09:56:00 2023 by rpki-client on console-fra.rpki-client.org