Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fPzGuqpMf7OvyjgjjiSGP93dAyw.roa
File: fPzGuqpMf7OvyjgjjiSGP93dAyw.roa (raw, json)
Hash identifier: navygTadGY5GqnkzilkexX1XdqtBzxA9NqAvyngdAVk=
Subject key identifier: 7C:FC:C6:BA:AA:4C:7F:B3:AF:CA:38:23:8E:24:86:3F:DD:DD:03:2C
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 0185CEC4790E2F3934C98357D127BEBB5885
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fPzGuqpMf7OvyjgjjiSGP93dAyw.roa
Signing time: Fri 20 Jan 2023 10:41:00 +0000
ROA not before: Fri 20 Jan 2023 10:41:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14618
IP address blocks: 185.179.216.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:ce:c4:79:0e:2f:39:34:c9:83:57:d1:27:be:bb:58:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 20 10:41:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cfcc6baaa4c7fb3afca38238e24863fdddd032c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:60:73:92:81:d0:8a:04:c1:ff:81:13:57:84:
d1:ed:45:07:17:3d:3a:27:41:8f:a0:a9:58:86:ea:
aa:16:59:e4:5a:2b:e4:c2:d7:12:91:d3:a2:0f:d4:
e5:7e:15:ea:c2:a8:53:a9:f6:2d:c7:0b:e6:1e:38:
6e:27:2b:57:be:fc:46:41:39:61:91:fb:c8:a1:42:
fd:b5:16:60:48:5f:44:34:05:7a:e0:5c:b7:95:1b:
69:82:57:10:24:e2:e0:1d:cd:dd:10:f9:61:ee:06:
92:00:0a:3a:d6:44:d9:e6:7e:be:32:09:08:3e:85:
cd:6d:00:90:2b:69:ba:61:80:b5:ba:2c:35:aa:2d:
57:c3:0a:2a:11:15:8c:14:8a:fc:65:f1:b1:9e:7f:
be:23:1f:19:b6:45:1e:ff:42:45:42:a1:d5:a5:16:
a5:fb:3f:e5:08:c2:20:f0:97:1c:04:7d:e0:93:ca:
fa:fc:b0:55:5b:ad:0d:48:e4:2b:f1:44:88:54:7f:
df:54:3e:e9:43:38:32:b3:44:44:0b:f5:e8:fa:f2:
f1:64:83:e5:90:95:bc:92:68:5b:26:bb:fe:cb:94:
48:e7:b3:50:10:76:f4:da:0f:79:a2:1b:4c:d1:52:
e3:97:be:16:50:e2:7e:07:ac:32:2a:df:92:51:2f:
55:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FC:C6:BA:AA:4C:7F:B3:AF:CA:38:23:8E:24:86:3F:DD:DD:03:2C
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/fPzGuqpMf7OvyjgjjiSGP93dAyw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.216.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:14:1f:3b:3e:0f:d8:1e:9f:ad:c1:22:a7:8f:b1:e1:63:f4:
59:72:e8:38:cd:f2:cf:99:7f:5a:80:58:a5:c4:a7:22:32:ed:
5d:9e:9c:15:80:05:ef:81:4b:b2:25:b2:87:40:4b:75:09:78:
b2:e4:68:03:58:20:b1:1a:e6:db:c4:2c:6c:5a:90:a6:54:bc:
74:be:15:ea:11:e5:d0:95:d3:73:3b:c2:bd:45:b5:83:32:bb:
c3:9d:46:55:4c:d1:ae:94:65:9f:f1:59:40:23:24:16:f6:77:
f2:17:a3:3e:6c:86:2d:2f:7b:45:63:51:10:fb:aa:49:b1:04:
95:9e:5a:de:28:09:8b:c9:31:f4:1d:8f:e5:be:4d:14:e3:f6:
75:5d:32:f5:d6:2e:32:e6:fe:1f:37:f0:e4:af:7b:17:b7:01:
19:36:f3:0c:05:d8:a7:42:0b:8e:91:1b:61:00:6b:24:08:49:
fe:74:12:21:87:d7:a7:a5:ae:08:ae:06:9f:86:44:dd:d7:91:
a9:70:d1:77:6d:2d:0a:db:0c:cb:6a:f8:1f:7b:b9:f8:78:72:
48:4f:3b:4c:4e:de:ee:4b:e4:e5:f8:5a:3c:fa:bf:5e:52:61:
8b:3c:78:dd:09:a9:42:ad:ce:bf:a0:44:4b:20:c4:9d:9b:5b:
a4:c4:d9:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:58:40 2023 by rpki-client on console-fra.rpki-client.org