Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/fNXIo51T0isT8HRN-Sfh7dbDcVw.roa
File: fNXIo51T0isT8HRN-Sfh7dbDcVw.roa (raw, json)
Hash identifier: 6lnxVrb8FLpk4dZyaMtsZHeocgmnPACsgvSqyyBeeWw=
Subject key identifier: 7C:D5:C8:A3:9D:53:D2:2B:13:F0:74:4D:F9:27:E1:ED:D6:C3:71:5C
Certificate issuer: /CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Certificate serial: 0186103C98F7808566757B41BB185ACA646D
Authority key identifier: F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/fNXIo51T0isT8HRN-Sfh7dbDcVw.roa
Signing time: Thu 02 Feb 2023 03:47:32 +0000
ROA not before: Thu 02 Feb 2023 03:47:32 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208068
IP address blocks: 185.94.64.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:10:3c:98:f7:80:85:66:75:7b:41:bb:18:5a:ca:64:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4ba7c145898b8ae3d2b3a1c71c50ab19a93f647
Validity
Not Before: Feb 2 03:47:32 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cd5c8a39d53d22b13f0744df927e1edd6c3715c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:61:5e:77:91:30:5a:6e:2b:bc:41:8e:56:
17:30:10:ce:ba:5b:de:39:93:fa:e6:06:8f:b8:33:
a4:c8:cc:5c:cb:dc:33:24:ed:7e:68:eb:7e:da:1d:
a9:36:aa:c7:40:85:7b:4b:97:90:ef:a7:45:77:0e:
26:ce:bf:7d:e7:fe:d8:b5:a2:fe:24:16:06:f1:56:
36:12:55:ea:57:c6:e0:d0:58:39:74:b6:63:ff:20:
79:38:69:1f:82:1f:96:b9:10:50:3e:40:cc:75:a6:
81:11:0f:9d:f2:e6:37:f6:d4:f1:9f:ac:83:66:0c:
d2:fd:f3:20:2f:4f:46:0d:8e:7c:75:d4:4d:c1:9c:
cc:58:35:23:ba:1b:51:6f:5d:2e:39:3c:fb:b1:58:
27:07:99:51:2c:ee:5f:7a:af:99:3a:46:64:16:5f:
2d:55:82:65:e4:fb:dd:31:94:ae:74:51:ca:6e:b7:
67:a9:d0:4b:40:ec:b0:81:65:14:73:04:e7:26:0b:
f9:b2:6a:1f:73:ec:2f:1f:ed:50:bc:df:df:9b:8f:
17:60:d0:8f:ed:5e:b4:3f:4e:1c:83:b7:02:cf:4d:
76:fc:ff:74:83:e7:cc:a3:aa:03:bb:fe:11:45:f6:
46:0c:75:39:5f:95:af:17:1a:92:f6:7b:b1:3f:4b:
ca:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D5:C8:A3:9D:53:D2:2B:13:F0:74:4D:F9:27:E1:ED:D6:C3:71:5C
X509v3 Authority Key Identifier:
keyid:F4:BA:7C:14:58:98:B8:AE:3D:2B:3A:1C:71:C5:0A:B1:9A:93:F6:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Lp8FFiYuK49KzocccUKsZqT9kc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/fNXIo51T0isT8HRN-Sfh7dbDcVw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/6db52b-ce95-4a3b-a963-484c24ed52ae/1/9Lp8FFiYuK49KzocccUKsZqT9kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.94.64.0/24
Signature Algorithm: sha256WithRSAEncryption
41:9b:66:b4:91:69:a6:68:f6:d0:e9:10:24:61:3e:9d:bf:6c:
ef:05:7e:e0:c8:c3:6c:06:2a:ea:0f:aa:29:b7:88:d9:48:0b:
b9:0d:b8:37:a5:1a:d1:09:eb:08:a2:a4:c9:ed:2d:d2:3d:4b:
cd:04:6c:e3:35:a3:87:a5:6a:dd:76:54:eb:ee:2b:a8:b8:84:
d9:8c:22:1b:7c:7e:c0:71:ce:dd:5c:c8:e3:0d:c8:a0:63:50:
0a:53:61:59:3e:bd:96:13:b4:11:bc:d6:35:cc:80:8d:ca:7b:
82:23:e3:89:a8:3e:f2:21:b8:ec:10:5e:ae:8a:55:b1:eb:83:
aa:d5:d5:b6:3a:85:8a:12:5c:9f:2a:fd:6a:86:1c:ec:dc:69:
49:ce:d8:f7:09:d2:6d:43:c2:55:00:3b:b2:11:91:8d:31:05:
ce:5b:52:e6:78:69:09:45:e8:56:a3:3f:61:09:79:7c:d3:c3:
d9:ff:ab:4f:67:4f:86:f4:84:3b:b7:c1:6f:12:3b:c1:cd:01:
2d:c3:c3:14:06:29:42:39:2b:c2:4c:f4:43:1c:d7:c3:e6:54:
d2:1d:aa:a5:c0:d7:dd:37:55:a5:11:91:34:a5:be:8f:c2:6e:
7b:e7:10:38:5a:d1:7b:41:c6:00:b5:df:94:a6:79:73:a6:bf:
ce:05:27:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:03:49 2023 by rpki-client on console-ams.rpki-client.org