Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa
File: FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa (raw, json)
Hash identifier: CCYziCqB9Ew1QlW16/RU/nfFv24LradcgNHR3NHFVwo=
Subject key identifier: 15:E5:63:4C:9F:F8:4A:99:1E:71:DB:DE:57:44:19:F8:64:D0:47:DC
Certificate issuer: /CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Certificate serial: 01856D6633BD53C0A5C8DED1F9A93B3AA700
Authority key identifier: C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa
Signing time: Sun 01 Jan 2023 12:54:52 +0000
ROA not before: Sun 01 Jan 2023 12:54:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200762
IP address blocks: 178.57.94.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:33:bd:53:c0:a5:c8:de:d1:f9:a9:3b:3a:a7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c469fe3d882c93e38e8b6a286a3177dc17e99ac7
Validity
Not Before: Jan 1 12:54:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e5634c9ff84a991e71dbde574419f864d047dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:f6:dc:17:3b:c9:e5:62:19:5c:72:72:fb:1d:
16:7b:08:21:86:b5:dd:fc:e4:e6:14:27:1b:e4:4e:
0e:61:e9:da:ea:4c:0f:a4:72:64:94:01:fc:ef:87:
f3:91:ce:db:d9:a6:4d:25:45:61:ee:9c:a2:0e:be:
0f:ba:e8:66:ad:79:df:d3:62:e6:ff:2b:15:0b:d2:
b9:82:ea:cd:6d:c3:da:f8:56:e5:2b:45:b7:7a:f5:
7f:72:07:20:6c:69:fb:d2:9f:f9:67:2a:89:44:3a:
15:d6:03:3e:4b:b3:67:9e:70:20:33:ff:68:54:e5:
db:c2:f3:31:04:ad:4e:58:86:bb:e6:74:9c:53:97:
77:14:9c:b5:05:0a:9d:91:3e:1b:1f:40:48:22:05:
5e:98:d9:b0:b6:ba:94:20:6f:f4:e6:87:b3:bb:e4:
3b:db:5f:c0:22:77:8a:4d:e3:9e:b6:37:08:ec:7b:
e7:d3:a2:1e:22:3d:5c:e3:6b:06:49:8f:4a:85:6c:
56:e7:9a:f6:c1:34:31:ca:a2:07:08:89:ad:01:0e:
9e:df:f8:c9:cd:14:e5:ae:c9:ef:d3:18:97:df:f2:
13:26:f9:23:e5:c0:81:56:98:c3:f6:fa:89:d3:c1:
43:55:57:d6:dd:4f:ed:fb:9e:ba:3b:4a:92:44:81:
d8:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E5:63:4C:9F:F8:4A:99:1E:71:DB:DE:57:44:19:F8:64:D0:47:DC
X509v3 Authority Key Identifier:
keyid:C4:69:FE:3D:88:2C:93:E3:8E:8B:6A:28:6A:31:77:DC:17:E9:9A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xGn-PYgsk-OOi2ooajF33Bfpmsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/FeVjTJ_4SpkecdveV0QZ-GTQR9w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/c475ab-fdd5-492f-813a-61d9a23f3411/1/xGn-PYgsk-OOi2ooajF33Bfpmsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.57.94.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:14:f1:99:0c:bd:79:33:5d:7c:92:f0:19:c3:85:15:64:3b:
cf:10:f8:f0:e2:7f:63:84:ad:ed:98:e3:65:7d:17:38:ed:63:
64:de:5c:2a:83:68:0a:35:dc:6f:d2:8a:b8:a9:66:90:e9:a8:
b7:48:53:b5:95:2c:78:53:ab:78:88:4a:45:37:d4:c1:33:a4:
20:9f:32:ea:97:e7:32:ca:03:4c:fb:9d:07:4e:04:f6:16:5a:
4e:ab:b5:18:0e:9f:32:f9:9b:a3:bf:b8:06:90:da:03:c6:50:
28:7d:6c:d4:3f:4b:24:8d:60:b8:5d:58:aa:62:ce:31:30:c4:
5f:92:f2:8f:76:46:6f:5f:a7:bb:5f:87:02:08:4b:dd:bd:7a:
70:57:71:2b:de:ef:e6:4f:10:a3:a7:3a:7f:cb:f2:c2:97:72:
4d:7d:7e:1e:a0:4d:ac:48:57:04:f7:42:02:3b:7c:27:b4:42:
d4:4d:f3:ff:de:06:5f:e4:af:d9:11:0c:4a:43:5d:31:89:78:
65:a8:9e:45:85:41:11:e2:91:9f:cb:cb:89:f7:92:e8:36:90:
05:1c:98:be:46:eb:ca:76:f8:f0:6b:7a:43:32:5b:be:cc:0a:
82:31:70:33:15:d1:37:23:59:56:b5:3a:18:bb:93:4d:69:c8:
da:7e:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:11 2024 by rpki-client on console-fra.rpki-client.org