Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FGwvGjfCPA_tgwM0Ybq8BwiBguU.roa
File: FGwvGjfCPA_tgwM0Ybq8BwiBguU.roa (raw, json)
Hash identifier: Uuvq1dHDWVS4C3yvgeOUPeSctCucka8FlkJhxiyY+wc=
Subject key identifier: 14:6C:2F:1A:37:C2:3C:0F:ED:83:03:34:61:BA:BC:07:08:81:82:E5
Certificate issuer: /CN=746365355b665564a210c358c68a0117b7fbeb9a
Certificate serial: 01862C06D076B810399031FD5719B9DBDE94
Authority key identifier: 74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FGwvGjfCPA_tgwM0Ybq8BwiBguU.roa
Signing time: Tue 07 Feb 2023 13:18:09 +0000
ROA not before: Tue 07 Feb 2023 13:18:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199820
IP address blocks: 194.124.38.0/24 maxlen: 24
212.22.78.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:30:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2c:06:d0:76:b8:10:39:90:31:fd:57:19:b9:db:de:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=746365355b665564a210c358c68a0117b7fbeb9a
Validity
Not Before: Feb 7 13:18:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=146c2f1a37c23c0fed83033461babc07088182e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b7:4e:1c:7b:ec:f4:90:3b:8e:a0:27:0a:a3:
47:1f:0f:2b:64:e2:63:30:4c:f5:ec:43:d8:bf:d9:
da:cd:c4:9d:c2:09:0a:24:72:32:d9:e3:b9:36:9a:
ee:00:bd:a7:58:f0:d0:43:5e:73:e1:de:ba:a2:9f:
10:d8:5e:d4:21:cc:3c:88:6e:5a:b6:68:af:04:a8:
62:d9:53:38:5f:9b:c1:ab:98:92:0a:6e:cb:8d:5a:
aa:dd:8f:4f:d1:da:f9:99:b0:73:75:5e:b9:3f:cb:
bf:21:8b:04:d7:20:c7:20:2c:de:0c:97:47:64:52:
0d:ea:50:53:2d:a7:d1:5f:e6:d8:a2:f1:03:b5:78:
1d:07:64:b0:79:e1:c3:4f:f6:ec:8b:2c:06:39:e1:
ba:29:3c:9f:45:ec:a9:44:90:fe:58:d8:d6:76:11:
28:c5:d5:ef:36:32:f1:38:48:c6:c1:ef:0f:da:2f:
69:3a:25:df:bf:7b:5c:e9:d9:dc:b6:e1:a3:3c:cc:
90:9c:97:37:76:e4:8d:7f:db:fe:ce:5a:56:45:47:
af:7e:64:7a:37:1e:fd:06:0c:92:bf:66:e4:eb:7b:
30:18:34:57:b8:48:df:19:b2:2e:f0:45:10:24:d1:
19:0c:89:7f:b7:ed:21:d0:25:fd:5c:98:1b:f2:a5:
8d:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:6C:2F:1A:37:C2:3C:0F:ED:83:03:34:61:BA:BC:07:08:81:82:E5
X509v3 Authority Key Identifier:
keyid:74:63:65:35:5B:66:55:64:A2:10:C3:58:C6:8A:01:17:B7:FB:EB:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGNlNVtmVWSiEMNYxooBF7f765o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/FGwvGjfCPA_tgwM0Ybq8BwiBguU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/aea36d-babf-4474-a78b-6a4ecaf8b3b1/1/dGNlNVtmVWSiEMNYxooBF7f765o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.38.0/24
212.22.78.0/24
Signature Algorithm: sha256WithRSAEncryption
92:a1:b4:a0:fc:e2:60:ba:21:8e:57:04:a3:ec:43:79:b4:fd:
1a:03:dc:9c:4e:26:5e:07:1b:5c:c6:95:2a:62:d2:2f:e8:23:
f3:8c:0d:f2:5a:93:d6:d9:8d:41:26:99:1c:fb:84:c3:6c:49:
f1:3e:5b:6a:08:95:5b:ed:b3:35:70:75:82:06:c6:89:24:ef:
99:7c:59:e0:79:0a:a5:5a:23:5d:d8:9a:bd:c1:eb:f2:35:d1:
52:ab:df:74:4c:b2:59:82:f9:34:97:03:56:24:70:a8:a7:39:
16:39:97:e9:00:c2:aa:eb:0f:de:49:6e:6d:a2:80:4d:d5:bf:
80:bf:2a:2b:f2:85:be:0a:b0:61:55:d3:9a:d6:71:61:a7:7a:
29:1b:09:e0:0b:03:2d:3a:2b:43:9f:af:29:27:84:bc:2e:5a:
62:6c:8b:20:85:d5:4a:d0:3e:77:90:55:1a:e7:6a:dd:9f:89:
64:89:db:54:69:47:38:f2:b0:45:e9:14:1f:3a:9a:af:37:a1:
00:3d:72:5f:18:cf:f2:4f:cd:ae:a7:c1:08:f4:56:94:f4:f3:
09:4c:63:fe:3d:c4:7f:27:f3:c3:f3:e8:e5:f5:0d:bb:41:99:
92:58:d4:b0:37:ac:97:05:3d:da:75:65:f4:c5:c8:1c:85:d9:
68:2e:fe:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:35 2024 by rpki-client on console-fra.rpki-client.org