Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/O6m0QqNtLWqoa6FwhklWmOomq6s.roa
File: O6m0QqNtLWqoa6FwhklWmOomq6s.roa (raw, json)
Hash identifier: FmcdIb8+TBhQ8npUCU7hmhP+rJBVXz6VI7v3VcYF0ZM=
Subject key identifier: 3B:A9:B4:42:A3:6D:2D:6A:A8:6B:A1:70:86:49:56:98:EA:26:AB:AB
Certificate issuer: /CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Certificate serial: 01856D8AF1DABDF8977A0C2F8EDBE6CA4796
Authority key identifier: FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/O6m0QqNtLWqoa6FwhklWmOomq6s.roa
Signing time: Sun 01 Jan 2023 13:35:00 +0000
ROA not before: Sun 01 Jan 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15924
IP address blocks: 193.35.200.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:30:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:8a:f1:da:bd:f8:97:7a:0c:2f:8e:db:e6:ca:47:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fac089a9cd6a0375bae499cc06a4caa3071b5d4c
Validity
Not Before: Jan 1 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3ba9b442a36d2d6aa86ba17086495698ea26abab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:74:90:a7:cc:83:53:1f:32:8f:a6:3f:f5:62:
b8:3c:22:64:59:cb:9f:f9:a3:9d:68:1e:b3:fd:4f:
a2:6d:92:e4:d3:f9:af:af:11:66:d7:09:8d:15:fc:
71:12:da:4d:a5:44:41:2e:38:10:e3:52:31:e7:25:
6d:db:73:c1:1a:29:6a:77:f6:4e:71:5a:76:67:7a:
5f:1b:5c:ca:27:09:8f:f8:a6:c2:88:69:58:11:7f:
1b:9f:e0:e5:2c:6c:ab:3c:8a:c9:71:96:39:31:99:
93:63:91:73:30:b7:25:66:d5:76:34:18:9c:90:14:
e3:30:ae:3c:af:56:ff:93:aa:84:b6:5d:95:e6:bc:
93:4b:bf:97:a3:d6:4b:83:3b:26:e8:0d:9b:0e:90:
84:01:6d:b9:90:bf:13:6a:40:7f:45:9c:f9:e1:58:
a3:a5:bc:31:32:b5:6f:ef:eb:22:88:b5:a8:98:6b:
b7:0a:b0:83:a5:ff:0b:e1:78:92:d6:3e:dc:b8:ff:
36:7b:5b:c8:5d:a7:a2:60:78:c0:4a:ae:9d:ae:2d:
ba:00:79:75:92:b4:f3:1c:1b:a8:30:90:1b:de:30:
aa:49:52:f5:e9:32:59:3b:c3:e2:f9:7f:7b:08:75:
47:9a:18:b6:b2:87:ad:e2:4c:b0:22:92:2c:97:83:
47:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:A9:B4:42:A3:6D:2D:6A:A8:6B:A1:70:86:49:56:98:EA:26:AB:AB
X509v3 Authority Key Identifier:
keyid:FA:C0:89:A9:CD:6A:03:75:BA:E4:99:CC:06:A4:CA:A3:07:1B:5D:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-sCJqc1qA3W65JnMBqTKowcbXUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/O6m0QqNtLWqoa6FwhklWmOomq6s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/2fac9f-618c-42f6-9483-777f86166221/1/1-sCJqc1qA3W65JnMBqTKowcbXUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.35.200.0/22
Signature Algorithm: sha256WithRSAEncryption
8c:02:0e:65:17:f0:23:96:39:15:c5:de:53:4f:30:b1:26:2b:
5b:0a:a8:38:ce:bf:6a:a6:8e:e6:c9:5c:00:2e:99:46:6f:0d:
aa:3d:71:24:52:f5:fe:b7:74:dd:ff:1a:ed:be:3d:9c:73:44:
01:69:ab:cf:5c:ae:5a:60:5a:e1:bb:94:5c:a0:ab:71:d4:6a:
85:31:d8:a6:e2:f9:e2:99:9b:38:c2:e6:02:e7:27:de:e8:f2:
a3:57:40:85:c1:47:b8:cd:8a:20:c1:d8:48:9c:61:49:63:59:
6f:2b:58:c3:5f:81:20:2a:9a:b3:5f:9a:c3:b0:bb:a3:c8:87:
58:2c:0c:6b:b0:ec:21:25:e3:7f:6e:ca:43:80:ad:72:10:5c:
18:e1:b6:c1:58:21:c2:12:27:d9:b8:9c:a0:dc:56:b0:d5:67:
0e:ee:02:5d:a5:3d:e8:e8:d6:e9:01:2f:35:a7:cb:3e:7a:9f:
23:60:0f:02:b2:cf:6f:1b:c3:d5:ba:80:7e:af:1e:7a:20:50:
73:aa:34:63:cf:c5:a5:9c:95:83:a2:9d:0a:a4:da:c7:46:53:
4a:f8:55:79:73:ee:a9:d3:53:e7:95:3d:14:2d:8f:2e:2f:52:
a8:ab:c1:97:2e:1f:1b:d0:5a:7a:29:0e:8f:b8:5a:e2:8a:55:
a7:63:ae:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:42 2024 by rpki-client on console-ams.rpki-client.org