Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/fa5IoStd_dh8nCNzbR9mLsehQlg.roa
File: fa5IoStd_dh8nCNzbR9mLsehQlg.roa (raw, json)
Hash identifier: 1wXMnrWJnflLsjtEljW2ZIs96Y7j94coKgsn2PkLddE=
Subject key identifier: 7D:AE:48:A1:2B:5D:FD:D8:7C:9C:23:73:6D:1F:66:2E:C7:A1:42:58
Certificate issuer: /CN=2e4dd492aba37802f99020379b0daa49f101b7da
Certificate serial: 01856FA6D6E4CE434582CF62BDA2580D9C1B
Authority key identifier: 2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/fa5IoStd_dh8nCNzbR9mLsehQlg.roa
Signing time: Sun 01 Jan 2023 23:24:42 +0000
ROA not before: Sun 01 Jan 2023 23:24:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211415
IP address blocks: 194.15.150.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:a6:d6:e4:ce:43:45:82:cf:62:bd:a2:58:0d:9c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e4dd492aba37802f99020379b0daa49f101b7da
Validity
Not Before: Jan 1 23:24:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dae48a12b5dfdd87c9c23736d1f662ec7a14258
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:fd:0d:e1:4a:2d:cf:a8:73:ab:31:ea:1e:8d:
7c:a4:6e:7f:aa:83:f5:a2:40:97:89:dc:01:68:36:
ee:c2:99:e2:33:17:bd:bc:85:f1:5b:60:bd:44:3c:
a1:55:9d:27:5e:59:85:4a:be:dd:fb:8f:6b:1c:9d:
9e:81:01:ce:2c:af:b2:e9:d9:39:6b:b5:f8:d3:da:
17:92:93:93:ed:7a:1a:58:4d:a3:26:59:45:7d:bf:
bc:71:9a:a6:c2:2d:78:a0:3b:f0:78:4a:25:e7:15:
0d:00:97:2e:a6:b8:76:36:b5:95:bb:04:bc:a2:1a:
49:2b:77:07:3f:d3:ac:55:31:3e:c2:34:78:70:1f:
e1:48:82:98:19:ea:4d:4d:06:15:7d:3f:b6:bc:1f:
57:18:b3:e2:c1:11:e6:d6:67:bf:0b:06:e5:40:2a:
0b:4e:f0:7d:9e:e0:a5:ef:e5:a6:0b:bd:e2:dd:22:
e6:2c:3e:63:b0:bd:93:db:c8:c8:43:9f:71:e7:4c:
b7:89:ca:7e:92:aa:33:4b:94:95:93:b9:8d:78:d0:
4e:1e:ef:bc:c1:63:86:33:44:4a:10:41:09:7d:78:
5a:1c:09:de:77:b3:e3:ac:58:69:8d:f9:98:8b:5b:
5d:db:12:6d:b9:b2:77:7f:bb:57:1c:95:0b:a0:18:
e3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:48:A1:2B:5D:FD:D8:7C:9C:23:73:6D:1F:66:2E:C7:A1:42:58
X509v3 Authority Key Identifier:
keyid:2E:4D:D4:92:AB:A3:78:02:F9:90:20:37:9B:0D:AA:49:F1:01:B7:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Lk3UkqujeAL5kCA3mw2qSfEBt9o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/fa5IoStd_dh8nCNzbR9mLsehQlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/3ac039-18c2-424c-ae59-374c9b7ad1e7/1/Lk3UkqujeAL5kCA3mw2qSfEBt9o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.15.150.0/24
Signature Algorithm: sha256WithRSAEncryption
15:9b:11:1a:bd:36:4b:16:65:9e:ce:8d:1c:a2:30:c2:41:58:
10:a2:98:27:39:8e:cd:b3:d8:ee:07:76:be:50:f1:85:43:b5:
fd:7f:cc:42:5c:43:4e:c4:49:17:bb:14:c6:fd:d2:26:34:2c:
ae:41:78:0f:2e:f2:c4:c7:c5:63:53:a6:2e:06:f6:08:32:4f:
7d:ba:f7:97:51:fb:63:ef:c9:0f:9c:3a:57:6a:87:f0:b2:e4:
53:33:4b:79:d9:6c:dd:cb:8f:7c:1e:8d:5a:c5:12:2f:c6:86:
67:00:b9:57:7d:5c:4e:a5:23:86:36:49:c2:0a:82:6b:27:00:
d1:a5:3a:53:ad:42:12:cb:74:13:92:00:e7:4f:68:ce:a6:d3:
47:90:92:c1:d3:37:44:61:b3:f3:86:29:b2:95:11:92:56:da:
c0:d1:e0:8b:1f:cd:3d:02:b5:38:9d:7e:9a:08:44:81:f4:82:
a9:87:ed:da:79:33:e8:87:d5:d4:bc:7c:a9:ec:ca:51:9b:70:
b3:af:45:5c:97:c7:79:5d:ce:dc:53:78:9e:5e:8b:e1:2d:fc:
e5:af:44:10:3b:dd:0c:5d:75:c3:eb:23:da:df:5a:31:a2:0a:
b4:a1:87:35:88:ba:ca:70:d7:3f:95:04:5b:3a:88:3c:2c:51:
e1:23:94:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 02:54:05 2024 by rpki-client on console-ams.rpki-client.org