Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FcTjVHl47zAylC1MawOS3h19YDE.roa
File: FcTjVHl47zAylC1MawOS3h19YDE.roa (raw, json)
Hash identifier: 7U5T/FgAPeYKC8ur5RSw1SHRxMGMNto5hBtWR5UeH3o=
Subject key identifier: 15:C4:E3:54:79:78:EF:30:32:94:2D:4C:6B:03:92:DE:1D:7D:60:31
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018AADB625ACBCA9109C74C7565C82D70EC9
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FcTjVHl47zAylC1MawOS3h19YDE.roa
Signing time: Tue 19 Sep 2023 13:51:50 +0000
ROA not before: Tue 19 Sep 2023 13:51:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207144
IP address blocks: 85.11.172.0/24 maxlen: 24
85.11.173.0/24 maxlen: 24
85.11.176.0/24 maxlen: 24
85.11.175.0/24 maxlen: 24
85.11.178.0/24 maxlen: 24
85.11.184.0/24 maxlen: 24
85.11.188.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:b6:25:ac:bc:a9:10:9c:74:c7:56:5c:82:d7:0e:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 19 13:51:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c4e3547978ef3032942d4c6b0392de1d7d6031
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:b4:eb:e3:4f:d7:66:6e:5e:a1:c3:8b:bc:5b:
b2:ea:5b:d7:6d:b4:70:ea:6e:4c:d0:75:f9:cf:56:
b4:64:22:15:fb:30:bd:c6:58:7f:07:57:b2:4a:34:
30:88:02:18:69:9c:8c:10:86:5e:05:28:ed:59:54:
61:1b:21:89:e2:fa:d5:dd:74:7d:e5:43:a7:b8:96:
e6:93:3c:5c:7e:62:65:5b:ed:dd:7b:1d:8d:8c:47:
4a:da:8b:e2:98:3a:b3:8d:f4:66:08:c9:c7:0c:c0:
ac:ee:f1:c3:ef:eb:6a:99:14:54:1c:db:2f:ab:10:
4c:2e:98:a1:23:fc:28:ba:ee:19:cd:16:57:3a:aa:
4b:4b:4f:e1:79:f3:03:d2:80:b6:38:26:cf:ca:03:
88:9b:38:b7:42:d6:bb:3e:4f:5a:fc:63:b0:b4:c0:
c4:a0:72:b0:4d:6d:97:4c:ad:b4:2b:02:96:0f:5d:
11:0d:3b:17:5f:79:86:14:db:e0:49:3d:4d:57:6b:
11:0b:92:8e:72:c6:33:fc:4c:cc:b9:42:66:51:92:
7f:74:6a:e0:b1:6c:41:1c:94:b2:9a:10:86:43:26:
15:f0:09:09:44:8d:4b:a5:a9:c8:f8:13:7a:e8:68:
ea:f4:62:c1:4f:ec:57:37:0a:cb:b6:0b:7c:12:88:
0f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:E3:54:79:78:EF:30:32:94:2D:4C:6B:03:92:DE:1D:7D:60:31
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/FcTjVHl47zAylC1MawOS3h19YDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.172.0/23
85.11.175.0-85.11.176.255
85.11.178.0/24
85.11.184.0/24
85.11.188.0/24
Signature Algorithm: sha256WithRSAEncryption
00:96:a9:53:06:b7:93:eb:48:ad:be:c4:58:89:77:cd:b7:ff:
ad:60:fc:29:aa:b8:e4:82:f7:78:ff:74:b6:1a:38:44:2c:07:
33:1e:c8:19:13:15:67:36:53:90:4b:72:4a:9c:44:33:fe:60:
92:ef:da:64:cc:36:46:4f:28:f9:1f:dc:6a:79:86:ff:e5:cd:
d9:be:3a:a1:3c:e8:7d:6d:d5:1b:e4:74:39:26:ea:dd:f8:93:
1d:a9:58:49:ed:c0:dc:89:76:1a:c3:05:6a:3c:db:30:25:16:
6f:a1:d1:d8:ae:8c:5f:30:c7:5e:59:84:c2:41:15:15:6d:b9:
cf:fb:ba:3f:24:ae:59:8d:58:f5:83:c0:b7:5e:e4:96:d3:0d:
0e:d1:0a:17:43:44:5c:6c:8c:15:fa:99:0b:a1:d0:88:09:95:
2a:5a:34:20:d6:ea:11:ca:f4:0d:71:11:e3:41:ba:46:de:2e:
46:da:56:2b:2c:96:b8:aa:0b:cc:e9:86:fa:02:ba:3b:7f:6d:
b1:e0:81:77:d7:90:a1:b1:85:32:6d:49:15:e0:c7:6c:7a:27:
2a:5a:7b:3f:ba:a1:34:f8:bd:d9:fd:18:38:f5:e9:55:17:81:
e6:36:d8:67:af:4c:76:30:4b:e1:23:42:a7:08:37:02:8f:6e:
76:e4:2f:d0
-----BEGIN CERTIFICATE-----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Generated at Fri Nov 3 13:31:07 2023 by rpki-client on console-fra.rpki-client.org