Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/FNhwti0J3HGuISc_1-K7if3xy3Y.roa
File: FNhwti0J3HGuISc_1-K7if3xy3Y.roa (raw, json)
Hash identifier: KdZYQTkwxAQd+jAzO6djG+NmuR0IiYOjnTXcgkI7NyI=
Subject key identifier: 14:D8:70:B6:2D:09:DC:71:AE:21:27:3F:D7:E2:BB:89:FD:F1:CB:76
Certificate issuer: /CN=c9769bfa59865d0c9593262881807db13f4bb87a
Certificate serial: 01856DDD334DA7C8407286B262A952F85D02
Authority key identifier: C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/FNhwti0J3HGuISc_1-K7if3xy3Y.roa
Signing time: Sun 01 Jan 2023 15:04:51 +0000
ROA not before: Sun 01 Jan 2023 15:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 80.71.144.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:dd:33:4d:a7:c8:40:72:86:b2:62:a9:52:f8:5d:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9769bfa59865d0c9593262881807db13f4bb87a
Validity
Not Before: Jan 1 15:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14d870b62d09dc71ae21273fd7e2bb89fdf1cb76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:52:7c:f3:28:03:9e:a6:08:a3:ee:ca:5f:00:
4e:ef:de:88:b1:60:ce:c4:09:03:15:9b:36:2d:65:
93:5d:03:bc:a6:1c:26:2d:ce:b1:c3:14:e8:be:f9:
3f:ea:61:d7:ab:2c:7f:d4:a1:55:02:ff:e2:06:91:
c7:be:0c:96:53:8f:c9:b9:07:70:9a:0f:0e:e9:d0:
6d:b0:21:9a:28:e8:c8:96:a6:e1:ba:6f:aa:cc:4b:
e7:f6:1c:c2:d0:f9:87:7e:e1:0a:78:bf:51:a5:68:
8c:0d:fc:02:8c:01:38:33:61:1c:13:a0:88:e0:31:
f2:1f:35:87:cd:3b:be:7d:d0:5d:a6:b1:15:59:a2:
bb:97:53:2c:05:e4:c7:07:29:a8:ea:bf:23:63:8c:
60:b4:77:a8:67:35:0d:b8:f1:f7:37:17:97:ab:ce:
e3:a7:18:86:37:ca:5f:92:f5:df:69:28:84:d6:23:
66:d6:39:46:0f:8e:52:67:1b:d8:d4:e2:58:21:0e:
1f:87:d5:46:49:f0:2f:f3:ba:55:f4:16:db:d1:f6:
7b:b2:3c:db:d2:1c:a4:0a:5a:5c:8f:a8:21:7f:ee:
d7:6d:f6:1e:de:d5:a9:37:4d:43:c9:de:43:53:33:
fa:dd:39:26:76:23:34:76:ab:11:65:38:19:c1:44:
76:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D8:70:B6:2D:09:DC:71:AE:21:27:3F:D7:E2:BB:89:FD:F1:CB:76
X509v3 Authority Key Identifier:
keyid:C9:76:9B:FA:59:86:5D:0C:95:93:26:28:81:80:7D:B1:3F:4B:B8:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yXab-lmGXQyVkyYogYB9sT9LuHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/FNhwti0J3HGuISc_1-K7if3xy3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bb7507-2261-4eda-a592-f7ec40e6a049/1/yXab-lmGXQyVkyYogYB9sT9LuHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.144.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:dc:f6:40:47:59:ed:56:a0:e9:31:8a:a8:c1:b2:4a:66:29:
b9:c2:0a:95:4f:8b:36:fe:c2:2a:43:1e:c2:dd:55:10:a9:77:
45:78:9c:17:64:41:84:07:d8:0a:3e:1c:12:ee:ca:3a:ef:ae:
8e:28:20:1f:43:03:85:9a:e9:af:a9:1e:00:2b:47:ca:dc:41:
e6:16:fe:1c:b4:f3:aa:53:3c:32:61:83:40:03:7f:cd:a4:59:
3f:9f:86:8f:6f:07:0b:50:dc:17:1f:e2:c8:af:d1:01:eb:b8:
ff:20:e1:e1:55:a9:23:dc:78:07:44:6c:f9:58:5c:8e:eb:f8:
52:fd:25:3c:9d:7d:27:22:be:89:96:45:30:25:36:9d:ed:98:
5e:5f:9d:85:29:bd:cd:85:a5:42:ec:c9:bb:be:eb:52:36:47:
b5:c9:5b:a3:1d:a1:c9:3f:6b:9d:7e:81:00:42:89:0c:fb:88:
2d:c2:db:35:08:98:c4:fe:e9:cd:d2:53:6a:81:59:9b:f8:f3:
5e:0b:e7:57:b4:04:54:06:49:51:01:20:b1:e6:0c:47:f2:67:
31:1c:81:62:22:e0:18:b3:28:eb:aa:4e:98:44:0f:e2:24:63:
c7:94:05:48:30:b8:01:c6:11:5d:a7:9b:7c:eb:28:64:b5:ed:
ea:fe:2e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:43 2023 by rpki-client on console-ams.rpki-client.org