Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FvYf8Ag_l4sTY-Od0uwl1jUYG9k.roa
File: FvYf8Ag_l4sTY-Od0uwl1jUYG9k.roa (raw, json)
Hash identifier: q1ZXggda+epFB4voy2PqdwrFvlc84FT5OgG8ofFcDlA=
Subject key identifier: 16:F6:1F:F0:08:3F:97:8B:13:63:E3:9D:D2:EC:25:D6:35:18:1B:D9
Certificate issuer: /CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Certificate serial: 0185714C42A76A2C9A3422CEF93BD83A7423
Authority key identifier: A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FvYf8Ag_l4sTY-Od0uwl1jUYG9k.roa
Signing time: Mon 02 Jan 2023 07:05:01 +0000
ROA not before: Mon 02 Jan 2023 07:05:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43957
IP address blocks: 144.208.192.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:4c:42:a7:6a:2c:9a:34:22:ce:f9:3b:d8:3a:74:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a539afebace899a8ee0bb4f8bb4475fe247a1528
Validity
Not Before: Jan 2 07:05:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16f61ff0083f978b1363e39dd2ec25d635181bd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:1a:2e:af:b8:d4:bc:f8:d3:a9:6d:91:fd:4a:
62:cd:29:43:c0:ea:5f:4c:b4:08:90:da:64:15:21:
a5:36:b3:75:41:0a:62:e7:9b:8b:ec:83:b7:dc:48:
dd:5b:68:cd:8e:16:88:f9:83:d0:e0:89:32:41:c9:
03:55:ef:89:5a:2c:39:f7:58:59:f7:a4:e5:b2:36:
3f:ef:36:54:8d:da:ef:bc:14:42:9e:36:3e:dd:26:
b5:72:fc:2d:51:4a:a0:e9:9d:77:1c:7d:de:75:af:
61:df:3a:46:1a:ca:79:51:d7:ff:3d:c3:7d:d9:04:
53:2b:73:b8:30:28:b9:51:29:06:d8:d5:cb:8d:e3:
2c:7c:d7:66:0d:ac:2a:b1:2c:e2:f4:b5:dc:57:d5:
45:86:1a:1d:ce:1c:4f:19:bf:d5:2c:3e:45:7b:83:
3f:75:31:05:f1:31:d8:69:0c:67:2d:12:c9:81:2e:
56:f0:f7:74:55:c6:e5:1d:fa:24:d7:ff:6e:68:8c:
1c:96:84:6d:5c:1b:91:ee:3e:5d:36:d0:b8:c2:a4:
25:fd:6f:9c:4d:ee:7c:cf:5c:35:72:71:f4:16:a2:
c1:45:6b:5f:f8:ab:17:c5:23:ae:71:16:6c:c9:a3:
7f:0a:67:76:ef:57:23:1b:b7:2e:90:13:3e:1a:a4:
4a:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:F6:1F:F0:08:3F:97:8B:13:63:E3:9D:D2:EC:25:D6:35:18:1B:D9
X509v3 Authority Key Identifier:
keyid:A5:39:AF:EB:AC:E8:99:A8:EE:0B:B4:F8:BB:44:75:FE:24:7A:15:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTmv66zomajuC7T4u0R1_iR6FSg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/FvYf8Ag_l4sTY-Od0uwl1jUYG9k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/98c4ee-2f59-45a7-adb6-74139591312e/1/pTmv66zomajuC7T4u0R1_iR6FSg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.208.192.0/22
Signature Algorithm: sha256WithRSAEncryption
68:3a:61:7f:6b:78:a9:08:03:55:0b:bf:35:63:a9:ff:70:27:
28:8f:ec:b6:79:b0:a8:c6:b3:a4:ed:10:dd:b2:cf:f3:c5:7d:
8e:08:0e:3c:81:85:aa:55:bd:20:9f:bb:c0:d0:70:16:e4:81:
e3:22:5e:d1:8a:a5:69:6a:72:5c:ae:8c:a2:f4:5c:65:56:cf:
74:2b:47:05:8d:3e:9e:e3:2e:3d:3c:36:db:51:1a:a4:d3:02:
52:70:25:6a:0c:d2:0d:a2:11:61:1e:3b:da:63:5e:34:7a:c6:
07:f8:75:ab:24:7c:b2:37:ac:c7:1f:3b:9f:32:2f:de:40:cf:
98:0b:10:86:ea:26:6d:75:2e:48:74:5f:98:1c:6c:df:eb:df:
b3:43:81:1c:73:33:0f:7b:28:31:22:57:04:1b:41:47:db:60:
3f:2d:38:37:eb:75:94:08:17:c0:3b:9e:4a:67:d0:9f:b9:07:
8c:8e:04:9b:b6:fa:a7:34:79:ba:1b:f2:1d:d1:fa:f7:29:08:
4d:fe:aa:19:3f:ad:3d:42:df:23:5d:01:61:91:fa:58:9b:8e:
c0:6d:c0:a3:19:ee:83:ce:94:2f:74:36:a9:b6:c6:51:fb:bc:
c6:0f:f5:2f:8a:6c:be:07:42:8c:4b:9c:ab:20:ae:25:d6:e8:
8f:a5:2a:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:50 2024 by rpki-client on console-ams.rpki-client.org