Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/FYsya1GhZ1HhcCkdbiTrNZzSrUI.roa
File: FYsya1GhZ1HhcCkdbiTrNZzSrUI.roa (raw, json)
Hash identifier: tV3mHAgwvq1lmZNnQ9hvk4oyT2HWmCyWaLdpUtVtaD0=
Subject key identifier: 15:8B:32:6B:51:A1:67:51:E1:70:29:1D:6E:24:EB:35:9C:D2:AD:42
Certificate issuer: /CN=f86fe427cff6d85a695ec86528a4830cb408a818
Certificate serial: 01857295A761202D571B6B43067847216E98
Authority key identifier: F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/FYsya1GhZ1HhcCkdbiTrNZzSrUI.roa
Signing time: Mon 02 Jan 2023 13:04:48 +0000
ROA not before: Mon 02 Jan 2023 13:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25193
IP address blocks: 193.41.129.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:95:a7:61:20:2d:57:1b:6b:43:06:78:47:21:6e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f86fe427cff6d85a695ec86528a4830cb408a818
Validity
Not Before: Jan 2 13:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=158b326b51a16751e170291d6e24eb359cd2ad42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:9e:f3:76:4e:eb:f7:92:33:43:eb:3a:33:f7:
04:42:7c:85:c1:a5:fc:b1:91:33:cc:ad:ee:5a:2f:
2e:37:a1:39:e2:f8:ea:dd:cf:58:bb:6d:b5:8f:85:
f7:62:17:39:60:96:ea:16:88:df:a2:ac:3a:d7:a4:
0c:a5:6a:47:06:7f:e5:0c:80:99:bb:be:ba:eb:34:
a9:f7:09:72:3c:09:03:36:7c:c8:a5:f5:98:72:67:
ef:d5:16:b6:2f:24:ce:94:e9:04:4e:6d:ae:17:0d:
9d:4c:67:69:06:01:c2:de:43:d5:5b:84:b6:ff:31:
a1:b5:7e:73:b7:52:01:ef:d0:9a:12:38:82:13:14:
af:e3:7e:75:a2:cd:3c:26:e2:50:a2:5a:35:97:6a:
b4:2d:fe:a2:f0:6b:8e:10:25:38:97:1f:f8:8f:86:
a2:fa:77:82:4a:d7:89:79:e4:fb:b0:79:92:b2:ae:
b8:da:8d:92:4a:4f:4e:56:66:0b:c7:ef:11:ec:4a:
4e:42:9b:ad:24:fa:1a:47:8d:f5:b1:6c:ff:03:78:
27:5f:cc:57:19:81:e9:f1:ab:9e:de:34:f3:17:b0:
37:c5:a9:65:49:b3:db:60:81:cb:9e:8e:95:04:e4:
bc:8f:74:63:44:1d:3f:c8:01:9a:a5:c6:97:43:ff:
d7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8B:32:6B:51:A1:67:51:E1:70:29:1D:6E:24:EB:35:9C:D2:AD:42
X509v3 Authority Key Identifier:
keyid:F8:6F:E4:27:CF:F6:D8:5A:69:5E:C8:65:28:A4:83:0C:B4:08:A8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-G_kJ8_22FppXshlKKSDDLQIqBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/FYsya1GhZ1HhcCkdbiTrNZzSrUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/905c88-9d3b-49de-89e8-4dbefd1f2bf0/1/1-G_kJ8_22FppXshlKKSDDLQIqBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.129.0/24
Signature Algorithm: sha256WithRSAEncryption
85:89:8a:5e:8f:03:94:6b:c4:91:41:a1:1e:b5:ca:b2:f8:4f:
d8:6b:26:e5:0d:7c:58:f6:a5:15:c5:da:b7:24:55:8d:ce:be:
85:e5:27:3b:67:0d:67:a7:47:99:ce:c6:d5:55:a2:7d:6d:8d:
60:c0:fc:66:d9:d6:dc:04:0f:5a:8b:bd:87:15:e2:2a:9d:fb:
2a:f9:58:29:08:04:7d:c9:b1:34:64:84:50:d5:63:fe:73:72:
72:0b:e9:9d:5a:31:4b:52:ce:2a:1d:16:fb:e4:39:01:e1:78:
57:ed:e9:e9:9a:4f:9e:0f:ca:8f:1f:37:93:44:97:a3:30:57:
f1:2e:16:7d:cb:e0:83:b8:94:21:8d:a1:03:08:00:c8:d4:c6:
02:d2:23:b9:7e:8a:0a:c7:df:32:34:b8:d7:dc:b1:14:8c:75:
9a:50:0a:dc:90:e9:a7:f0:e8:a4:7a:8f:da:fd:8e:72:a1:f8:
46:bf:f5:7f:a3:92:68:28:ad:d2:ff:67:ac:cf:5e:2c:aa:32:
dc:61:d4:dd:ff:7c:34:5f:b9:27:0c:57:27:1c:8d:b3:c9:5b:
3e:3a:90:d5:c8:1c:1d:98:c3:08:4a:06:01:09:cc:94:11:79:
c5:50:22:80:3e:fa:c1:31:14:42:27:d6:46:c3:62:51:c3:22:
75:00:4e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:33 2024 by rpki-client on console-fra.rpki-client.org