Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/fCV0Z_vtBVxIwILHOi_zOHfwT8w.roa
File: fCV0Z_vtBVxIwILHOi_zOHfwT8w.roa (raw, json)
Hash identifier: 7IF5BIeCi6DE7mT3XS9TRo9eTRiRmpq+q+CEE5mcjug=
Subject key identifier: 7C:25:74:67:FB:ED:05:5C:48:C0:82:C7:3A:2F:F3:38:77:F0:4F:CC
Certificate issuer: /CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Certificate serial: 018570305CB24F4ABE8BEDC571F91DD92474
Authority key identifier: F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/fCV0Z_vtBVxIwILHOi_zOHfwT8w.roa
Signing time: Mon 02 Jan 2023 01:54:55 +0000
ROA not before: Mon 02 Jan 2023 01:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16015
IP address blocks: 194.149.46.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:30:5c:b2:4f:4a:be:8b:ed:c5:71:f9:1d:d9:24:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f02dac605f4659718c0a15e1f732cbd4f48aae7b
Validity
Not Before: Jan 2 01:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7c257467fbed055c48c082c73a2ff33877f04fcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c3:6e:7f:65:28:5a:6e:20:85:16:68:89:a5:
52:31:78:00:ef:02:ed:45:9b:ed:d6:45:57:e6:be:
7e:dc:e6:52:cc:cc:20:55:4f:35:71:87:14:c0:25:
db:e7:f7:7e:85:09:01:df:94:04:53:16:e4:58:49:
4b:2a:67:c6:c5:dc:d3:53:66:a1:4f:91:37:a6:9e:
6a:d7:84:2d:46:d9:40:07:98:0e:09:c7:5b:c9:97:
e3:51:cb:d4:76:a2:15:dc:06:3e:6e:71:69:cb:1a:
f2:9d:ed:d0:99:ed:25:aa:fe:4d:95:33:72:ae:47:
7d:5c:d3:83:71:ed:5f:dd:c5:39:ce:3b:a8:e2:df:
6c:0a:6d:d0:00:66:2c:5d:55:3e:60:9c:67:1c:f9:
c3:68:d5:d0:2c:7e:e4:2b:e6:be:bc:93:5f:23:78:
cb:94:76:1c:67:69:ca:09:4c:96:12:20:73:3c:6e:
a1:60:4f:48:35:ee:d8:03:40:13:48:98:f3:2d:80:
a4:d1:9c:aa:90:9f:39:bb:95:07:4a:8f:0f:3c:a6:
fa:20:f5:e3:c5:24:71:b7:9c:50:d5:15:e2:3f:d3:
b5:65:5a:45:f2:f1:38:32:1c:b0:1f:0f:af:02:b5:
8c:80:f9:7c:e0:13:a3:c3:4d:ca:78:f4:2f:f9:04:
f9:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:25:74:67:FB:ED:05:5C:48:C0:82:C7:3A:2F:F3:38:77:F0:4F:CC
X509v3 Authority Key Identifier:
keyid:F0:2D:AC:60:5F:46:59:71:8C:0A:15:E1:F7:32:CB:D4:F4:8A:AE:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8C2sYF9GWXGMChXh9zLL1PSKrns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/fCV0Z_vtBVxIwILHOi_zOHfwT8w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e90976-3dd1-4716-bbf6-292ae46e6302/1/8C2sYF9GWXGMChXh9zLL1PSKrns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.149.46.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:5f:36:07:5f:6d:99:bd:f9:e7:87:eb:d8:f3:a8:cb:68:54:
a9:51:4e:1d:20:e1:26:39:9a:84:5f:87:96:07:0b:56:cd:a3:
09:d7:27:da:b1:c2:a5:dd:cb:92:ce:98:e5:9a:05:b5:23:89:
83:32:ab:fd:5b:0f:82:02:ce:a1:13:1e:86:95:6e:70:45:37:
2c:fa:a3:4c:d0:ab:4f:d6:97:5c:bb:57:f7:ba:5d:f9:46:73:
fb:1f:b3:95:c4:56:c6:2c:51:20:37:d0:8d:43:8b:5a:6a:94:
84:fb:6a:0d:3e:e7:de:3d:e7:4c:92:72:6d:d3:a9:05:e7:be:
a8:73:0f:6e:0d:2d:fb:b9:ca:b3:27:2f:1d:9d:74:19:66:ce:
bf:3b:35:da:95:ce:4c:f2:8f:39:46:3c:05:2e:dc:8c:59:12:
f8:73:6e:ac:90:55:49:11:18:3f:d7:45:70:e0:ce:36:e1:17:
ce:b2:71:71:b0:c4:80:6d:e7:1b:85:19:f4:05:7d:a1:b1:77:
31:ec:1e:b0:ba:ae:23:71:cc:2d:e3:75:9c:98:2a:54:9a:05:
32:12:db:db:38:b6:22:87:50:16:13:46:7b:a2:13:a5:c3:d9:
d0:44:a5:05:4b:a3:2f:a8:2f:c7:15:49:bf:9c:a3:3d:5f:77:
2e:18:f6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:23:13 2024 by rpki-client on console-ams.rpki-client.org