Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/F0nQCDnZJrIajYKE6CBF3UPCF48.roa
File: F0nQCDnZJrIajYKE6CBF3UPCF48.roa (raw, json)
Hash identifier: Km7ypAL64tn60VNqDlzM5Ekf4PrriGg7UZjGqmshxsM=
Subject key identifier: 17:49:D0:08:39:D9:26:B2:1A:8D:82:84:E8:20:45:DD:43:C2:17:8F
Certificate issuer: /CN=8ce735129f777a25bf84727206bf978d9a1db200
Certificate serial: 01856E14350D78242A39FA19BF64E3DFE248
Authority key identifier: 8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/F0nQCDnZJrIajYKE6CBF3UPCF48.roa
Signing time: Sun 01 Jan 2023 16:04:56 +0000
ROA not before: Sun 01 Jan 2023 16:04:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201786
IP address blocks: 185.63.196.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:35:0d:78:24:2a:39:fa:19:bf:64:e3:df:e2:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ce735129f777a25bf84727206bf978d9a1db200
Validity
Not Before: Jan 1 16:04:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1749d00839d926b21a8d8284e82045dd43c2178f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:1e:c8:a4:a3:b8:85:fd:77:6f:86:9b:f6:
f5:01:01:3e:75:8f:43:28:21:4b:f7:1a:76:5c:fb:
4d:4e:2b:3e:87:8a:2e:b9:3f:95:c8:3a:c9:19:57:
87:ef:69:8b:78:1a:1c:aa:0b:ea:77:3c:5b:33:fe:
31:6a:bf:58:49:20:7b:35:61:c2:35:fd:4f:5a:d5:
ed:0d:7e:41:88:d7:12:72:46:92:8a:6b:78:fd:da:
cb:2d:60:96:5e:c1:bd:43:f2:a0:83:c4:33:80:0f:
11:92:39:6a:bc:78:08:f1:ef:9a:17:f2:ed:4c:1e:
f2:65:9f:d5:5a:30:29:c4:d3:0b:e8:14:f6:3d:7e:
9f:af:7a:3c:e8:9f:56:a0:0f:3a:fd:9e:b6:c4:c9:
ec:89:fe:f4:2f:1b:33:a8:4c:f7:3e:6b:96:9a:a1:
ba:d6:d4:79:07:fc:03:29:24:75:99:50:35:7f:ca:
48:76:68:cf:7a:a0:e8:6e:eb:36:57:35:c7:4d:87:
f3:03:22:93:bb:22:93:bb:af:de:d7:fd:db:ae:da:
5d:8c:7f:0d:12:01:a7:0d:dd:b2:ab:94:61:5b:03:
e3:70:fe:ae:b6:36:2d:d1:f6:22:86:19:1f:56:28:
16:a3:6e:f3:d7:6b:b5:66:ac:6c:ee:fe:49:fd:39:
cc:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:49:D0:08:39:D9:26:B2:1A:8D:82:84:E8:20:45:DD:43:C2:17:8F
X509v3 Authority Key Identifier:
keyid:8C:E7:35:12:9F:77:7A:25:BF:84:72:72:06:BF:97:8D:9A:1D:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jOc1Ep93eiW_hHJyBr-XjZodsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/F0nQCDnZJrIajYKE6CBF3UPCF48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/ede4a3-8f20-400a-b876-f78c2206575a/1/jOc1Ep93eiW_hHJyBr-XjZodsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.63.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:8b:09:ea:b7:79:b2:a3:60:c3:08:4a:f7:ad:a9:b5:f2:89:
23:e5:6d:af:f9:ea:6d:9f:bf:4b:5c:e0:6c:5d:20:c4:16:28:
3f:72:c0:f7:c7:37:17:d7:ed:d8:5b:bb:1c:a9:10:53:fc:78:
1b:c7:fd:a7:ca:b8:9a:1d:d9:98:a1:f2:22:ec:83:c4:ad:44:
78:f0:34:94:e2:65:78:05:46:6d:29:9a:d0:90:51:a0:2c:8e:
ad:2e:6d:b6:66:3e:c9:58:08:c2:8c:ed:0c:66:ad:0f:d7:9b:
60:4d:98:e7:ca:3b:08:48:63:9a:41:a6:e1:d3:ec:19:65:f4:
f9:a2:db:ce:90:39:29:30:77:e2:13:e7:29:00:7b:80:03:a6:
61:63:bc:9b:d8:c3:90:7b:ac:a4:36:45:12:0e:b3:7c:1f:40:
b5:a7:8c:da:f7:cf:0b:d9:af:23:02:e0:db:c5:79:80:05:9c:
4a:47:a6:e0:e5:57:cd:f7:ac:de:ba:c4:72:51:96:8d:5d:3b:
c7:ff:e7:5d:c9:37:47:ee:cb:36:94:5b:11:b3:45:b4:2b:fa:
9c:08:0d:8e:5b:5b:01:14:44:8a:63:96:c5:04:82:fd:60:c7:
eb:dd:6f:2c:d4:ce:23:c4:75:82:d9:22:3a:24:f2:3d:d1:e2:
9f:cf:9c:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:35:08 2024 by rpki-client on console-ams.rpki-client.org