Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/j6qgF3jjtaecz4P55VhcZD0i4Gg.roa
File: j6qgF3jjtaecz4P55VhcZD0i4Gg.roa (raw, json)
Hash identifier: Yg/h4MIjA4MQzuk4W3Xp4RozN4+X5GA5MYu0gIDEsIo=
Subject key identifier: 8F:AA:A0:17:78:E3:B5:A7:9C:CF:83:F9:E5:58:5C:64:3D:22:E0:68
Certificate issuer: /CN=fb02f648de95b88479364346ed01e78769577922
Certificate serial: 018571FA0FE7B7D99DE24CE64FCB32D36205
Authority key identifier: FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/j6qgF3jjtaecz4P55VhcZD0i4Gg.roa
Signing time: Mon 02 Jan 2023 10:14:51 +0000
ROA not before: Mon 02 Jan 2023 10:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206165
IP address blocks: 185.1.89.0/24 maxlen: 24
2001:7f8:b1::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:0f:e7:b7:d9:9d:e2:4c:e6:4f:cb:32:d3:62:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb02f648de95b88479364346ed01e78769577922
Validity
Not Before: Jan 2 10:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8faaa01778e3b5a79ccf83f9e5585c643d22e068
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:06:fd:c6:90:7c:09:e9:0f:72:7b:d0:69:
c3:ff:1a:82:bd:16:16:e3:86:19:ad:44:4f:0a:ef:
7f:51:49:9f:59:07:5b:0d:74:c4:a5:0e:8f:a3:4b:
8f:51:29:dd:2b:dd:95:29:a0:61:86:6d:39:94:a1:
86:84:f3:b6:11:3c:27:59:3e:9f:6f:66:e4:05:35:
52:a2:e3:fe:2a:7a:ad:4e:21:ed:a2:95:82:43:74:
35:05:fd:04:dc:80:a0:da:9f:c2:88:28:be:1b:3d:
6a:80:ed:a0:b1:2a:57:d7:d7:29:90:fe:c4:4e:b5:
b2:38:2a:d9:50:6d:b9:ce:1f:93:d8:ce:e8:e8:b7:
12:c0:c9:55:d8:0d:a3:31:df:78:1c:63:ff:24:06:
c9:9e:67:da:2d:48:da:fa:bb:a0:6b:58:3f:94:35:
d1:d0:4e:12:91:f9:cc:3c:97:c3:e2:61:04:9f:a9:
d1:b0:8d:51:da:7d:eb:8e:ac:1b:5f:6d:12:78:9b:
5c:85:09:a1:25:9f:73:2a:fd:a0:d2:8b:79:b1:78:
2d:da:82:ec:97:25:df:b2:b1:64:a6:f0:10:98:55:
33:dd:21:50:2a:31:90:13:44:19:ef:67:a0:3f:3f:
d0:ec:b5:fc:be:b1:74:ae:57:2a:d0:22:c0:85:f1:
d8:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:AA:A0:17:78:E3:B5:A7:9C:CF:83:F9:E5:58:5C:64:3D:22:E0:68
X509v3 Authority Key Identifier:
keyid:FB:02:F6:48:DE:95:B8:84:79:36:43:46:ED:01:E7:87:69:57:79:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/j6qgF3jjtaecz4P55VhcZD0i4Gg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/16a48b-6d2a-40e2-9bc3-8cd9b33a5684/1/1-wL2SN6VuIR5NkNG7QHnh2lXeSI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.1.89.0/24
IPv6:
2001:7f8:b1::/48
Signature Algorithm: sha256WithRSAEncryption
66:52:c4:ee:80:03:b0:73:a2:85:23:86:75:9b:5b:3c:ca:71:
df:59:b2:bb:16:07:4b:7d:eb:77:23:cc:62:6d:d3:69:df:e3:
d6:dd:ae:18:5f:a8:7d:09:ba:cc:1e:93:19:f9:b5:0d:d1:53:
40:92:49:e5:84:9f:8b:bd:8c:e5:b2:e5:ac:5f:b8:1b:6c:c6:
00:6b:4d:c0:2e:c8:80:29:4e:3b:bd:ef:7a:13:bc:5b:9a:7b:
b0:77:4f:72:46:ca:44:2f:f9:13:d9:7f:ff:db:a7:fb:5c:6b:
1b:20:95:6e:8d:d7:4b:db:ac:2c:94:5b:24:75:90:1f:d5:cc:
f4:3c:7d:c2:a7:bc:dc:55:1b:14:82:d1:58:18:33:23:93:a7:
de:0e:aa:58:9a:69:d5:98:d1:2f:ed:46:b4:2c:3b:88:a0:96:
32:ff:07:3c:07:35:5e:a1:6b:5d:ee:43:fa:e6:4a:c7:63:c3:
9c:aa:71:45:4f:fa:5b:68:17:8f:cb:4d:78:5b:bc:3e:bf:d5:
07:9b:0c:13:69:64:2b:f8:5f:c0:50:e1:91:b4:85:a0:92:2e:
31:8b:3e:fb:4c:32:a3:13:89:8f:45:4f:ae:5c:18:fa:0e:dc:
68:80:8e:d5:a0:60:c6:28:fd:1d:05:68:e5:d3:3b:83:ca:81:
c2:8d:aa:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:12 2024 by rpki-client on console-fra.rpki-client.org