Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/FYMjol_Nf-XMHKvq7_Yry38ASV4.roa
File: FYMjol_Nf-XMHKvq7_Yry38ASV4.roa (raw, json)
Hash identifier: h4xM1CKUDtTmAfQCIcoR/HpeEpZB+Z4ukfTCvpRa1r0=
Subject key identifier: 15:83:23:A2:5F:CD:7F:E5:CC:1C:AB:EA:EF:F6:2B:CB:7F:00:49:5E
Certificate issuer: /CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Certificate serial: 0185731608805ECBFA61633848A4EF9D7B10
Authority key identifier: D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/FYMjol_Nf-XMHKvq7_Yry38ASV4.roa
Signing time: Mon 02 Jan 2023 15:25:01 +0000
ROA not before: Mon 02 Jan 2023 15:25:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44684
IP address blocks: 185.159.24.0/24 maxlen: 24
2a00:9b40::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:16:08:80:5e:cb:fa:61:63:38:48:a4:ef:9d:7b:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8a56e2d63ac5da9bed35da01cbfad225f04beb0
Validity
Not Before: Jan 2 15:25:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=158323a25fcd7fe5cc1cabeaeff62bcb7f00495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:90:55:98:92:cd:2a:fd:e9:73:23:d8:d2:66:
10:c4:d5:90:2b:1e:53:6b:ec:20:eb:06:ca:0e:cd:
cf:7d:cb:ea:75:07:e9:4b:d0:e1:0a:8c:58:ea:f8:
48:8d:7b:e3:ab:6c:76:9e:aa:35:98:5d:0a:c6:14:
c6:ec:91:68:9d:5b:69:47:01:ce:de:65:54:e0:fd:
d9:18:08:e5:75:a7:37:18:43:98:cb:ba:28:39:6e:
11:20:65:cc:3c:74:cf:f2:db:d1:c7:43:e4:8b:93:
6e:7c:c4:83:69:8b:45:1d:df:ed:15:e3:f4:78:d6:
58:bd:52:dd:6a:a1:5e:ce:fc:6d:e4:27:d9:a8:18:
4a:74:4b:7e:61:30:07:0e:b4:0f:28:7b:eb:cd:2c:
64:e5:27:17:f0:b7:4f:6d:85:a4:20:43:24:66:f2:
07:dd:f0:b2:10:63:04:02:2c:c8:86:74:e3:e0:df:
49:6b:ea:ad:0a:31:67:f9:3e:23:ff:33:08:87:5a:
06:29:c1:e9:f7:e8:9a:b8:03:8d:0d:48:73:5f:22:
88:99:6a:7b:75:fa:c4:30:4a:ef:62:b0:89:d8:24:
82:1c:58:7f:8c:4e:b5:bb:7d:6a:c8:fc:2a:26:b4:
49:32:11:69:ee:af:bf:bd:02:89:29:2b:38:b6:b0:
56:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:23:A2:5F:CD:7F:E5:CC:1C:AB:EA:EF:F6:2B:CB:7F:00:49:5E
X509v3 Authority Key Identifier:
keyid:D8:A5:6E:2D:63:AC:5D:A9:BE:D3:5D:A0:1C:BF:AD:22:5F:04:BE:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2KVuLWOsXam-012gHL-tIl8EvrA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/FYMjol_Nf-XMHKvq7_Yry38ASV4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/74177c-5e3b-4836-8867-e8d47bba25bf/1/2KVuLWOsXam-012gHL-tIl8EvrA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.24.0/24
IPv6:
2a00:9b40::/48
Signature Algorithm: sha256WithRSAEncryption
90:32:ff:b3:d7:4a:95:d4:ce:b7:1e:43:ad:03:a6:57:52:5d:
49:39:d4:17:44:f1:8e:a3:e9:f6:2a:86:bc:6a:7c:d6:87:3c:
a4:14:82:99:a7:08:48:a4:44:1f:07:a3:22:df:ca:95:21:2f:
c4:30:41:ae:97:85:38:d1:ba:c6:da:46:77:6d:56:7c:5e:69:
7e:9b:a4:04:80:aa:9f:5a:03:6a:8b:e5:a4:35:1e:89:60:3f:
31:ee:d8:fe:6a:d6:d9:ee:9b:80:1e:e2:30:a4:32:e1:6a:57:
d4:83:f3:cb:08:38:5a:b6:6e:1c:b2:40:94:69:9d:46:e0:a6:
7f:25:f1:86:48:1f:62:dc:6b:5b:3b:1b:dd:18:7b:ca:0f:13:
84:88:10:43:86:a3:d0:e6:6d:74:b6:50:c3:66:f6:f7:28:d7:
07:51:78:ac:35:4e:f3:1c:6e:90:0c:8b:9e:4e:e7:14:e5:4f:
f3:3e:8f:d8:15:9f:1f:5c:02:4f:62:42:cc:ad:87:0c:f8:5a:
32:67:be:47:c0:fc:be:20:47:77:c5:ca:77:44:fb:b9:ee:5e:
2a:4f:56:30:93:04:89:6c:56:a0:5d:9a:87:2b:6a:63:c6:40:
5e:f3:03:fa:1e:36:0f:c0:ec:83:35:d8:60:9c:7f:22:ea:34:
ab:ba:1c:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:49 2024 by rpki-client on console-fra.rpki-client.org