Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/FVF2TkveF0qY8d_M0sRSDIj8d9o.roa
File: FVF2TkveF0qY8d_M0sRSDIj8d9o.roa (raw, json)
Hash identifier: +z7KcrYjWuv6GHm8YA6Y4x3c3S+EByp5Sj7KPCr1Lx8=
Subject key identifier: 15:51:76:4E:4B:DE:17:4A:98:F1:DF:CC:D2:C4:52:0C:88:FC:77:DA
Certificate issuer: /CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Certificate serial: 018570FB917A0EC0A8996D13F9DC8BC034E7
Authority key identifier: 3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/FVF2TkveF0qY8d_M0sRSDIj8d9o.roa
Signing time: Mon 02 Jan 2023 05:36:52 +0000
ROA not before: Mon 02 Jan 2023 05:36:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35320
IP address blocks: 185.12.140.0/23 maxlen: 23
80.93.112.0/20 maxlen: 20
78.154.160.0/19 maxlen: 19
2a02:5f0::/32 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:fb:91:7a:0e:c0:a8:99:6d:13:f9:dc:8b:c0:34:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f0a287bea92588fc5dae4f93fb25628f32d196d
Validity
Not Before: Jan 2 05:36:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1551764e4bde174a98f1dfccd2c4520c88fc77da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4e:11:ac:d8:70:b2:7c:d8:29:94:45:5c:4e:
da:87:99:bf:7a:b8:56:e1:63:c1:cb:31:56:13:7c:
a3:d0:65:b1:56:47:c2:c5:fb:c7:ea:29:40:45:52:
59:ce:bf:31:5b:b6:86:db:df:f8:b3:dc:d2:77:91:
db:c2:e9:80:5b:4c:3d:f8:3f:97:30:7d:5a:48:ab:
a6:a6:5c:64:9b:56:34:7f:e2:71:cc:8d:cd:43:1c:
a8:55:43:51:c5:56:c4:a0:47:41:72:74:87:95:71:
e5:1b:5a:c2:64:ad:80:23:00:d5:76:70:09:92:f0:
82:51:27:36:28:51:7a:ac:b8:71:d1:80:f8:51:65:
86:12:08:7c:10:18:f3:54:0e:c0:1a:c4:78:e4:7a:
f5:7d:3d:c7:15:00:2f:25:8d:fb:39:69:d8:97:43:
66:52:a5:0f:0e:dc:33:de:31:2e:15:03:cf:3d:3e:
ea:21:87:4a:df:fb:72:6b:ac:32:3c:14:0a:08:2c:
28:c8:18:47:a6:34:a6:cf:91:b5:97:59:e0:81:6d:
7f:f0:17:d7:0b:ce:78:76:99:eb:28:d3:48:37:9b:
96:c5:db:64:89:67:65:99:f8:48:1b:ef:4c:aa:08:
40:f6:fd:93:27:32:f4:50:31:06:c7:cc:5f:a6:0a:
24:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:51:76:4E:4B:DE:17:4A:98:F1:DF:CC:D2:C4:52:0C:88:FC:77:DA
X509v3 Authority Key Identifier:
keyid:3F:0A:28:7B:EA:92:58:8F:C5:DA:E4:F9:3F:B2:56:28:F3:2D:19:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Pwooe-qSWI_F2uT5P7JWKPMtGW0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/FVF2TkveF0qY8d_M0sRSDIj8d9o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/9014c3-1a49-4e62-9243-21335d1063af/1/Pwooe-qSWI_F2uT5P7JWKPMtGW0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.154.160.0/19
80.93.112.0/20
185.12.140.0/23
IPv6:
2a02:5f0::/32
Signature Algorithm: sha256WithRSAEncryption
2e:65:87:e0:96:8f:44:18:79:07:7f:b3:c1:19:2f:93:43:e9:
b7:20:1c:99:be:1b:f7:0a:87:b3:b4:d2:1b:b7:83:07:03:01:
2c:72:55:95:1b:07:0d:29:42:2f:0e:29:7a:d8:56:5e:63:19:
91:ba:cd:ea:b1:2a:52:59:8d:ba:96:ea:5f:f2:6e:b6:0f:68:
93:a2:4a:8d:94:4d:63:42:39:26:09:97:98:45:6e:8d:59:33:
1d:a2:39:46:7e:45:c1:03:d5:a4:18:66:12:fd:23:7b:69:96:
aa:19:09:da:f9:88:0e:c1:a2:ea:52:cb:e4:a8:03:13:15:96:
ef:e5:4a:8e:ae:ea:99:41:91:3f:58:2c:b4:ec:0f:0e:a9:ae:
17:85:4a:c6:fb:88:0c:22:2d:63:cd:4b:8b:e0:8f:42:31:a6:
14:14:2c:45:1d:ec:57:8d:3c:c7:ca:43:87:70:af:bb:51:af:
99:67:8c:2e:84:1f:a8:b5:5b:d2:75:44:c8:f4:f6:a0:a7:00:
7e:33:80:63:f0:af:dd:dd:82:18:5d:d1:6b:eb:6c:b1:59:04:
58:05:4f:7f:12:bf:fb:a6:c0:d7:70:b2:60:86:76:eb:48:de:
c9:2a:97:49:2b:68:da:ac:1a:74:17:90:99:55:f6:f7:9b:71:
c7:e8:73:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:50 2024 by rpki-client on console-ams.rpki-client.org