Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/FR_Gx6WcpS5lMo5Wbvybm4vaL4I.roa
File: FR_Gx6WcpS5lMo5Wbvybm4vaL4I.roa (raw, json)
Hash identifier: XHahvUfRrUmg6N8wKJJ2i5yTu9bevR80I9hTuckZKFg=
Subject key identifier: 15:1F:C6:C7:A5:9C:A5:2E:65:32:8E:56:6E:FC:9B:9B:8B:DA:2F:82
Certificate issuer: /CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Certificate serial: 01856D4175782AB1443851B7D917C13A2587
Authority key identifier: EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/FR_Gx6WcpS5lMo5Wbvybm4vaL4I.roa
Signing time: Sun 01 Jan 2023 12:14:44 +0000
ROA not before: Sun 01 Jan 2023 12:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206314
IP address blocks: 91.241.24.0/22 maxlen: 22
91.238.172.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:41:75:78:2a:b1:44:38:51:b7:d9:17:c1:3a:25:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea2c4ea79ddb7b003de01f1d05f6dbf716b11336
Validity
Not Before: Jan 1 12:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=151fc6c7a59ca52e65328e566efc9b9b8bda2f82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:1c:72:ae:7d:99:c4:d8:3c:19:8f:3e:de:14:
4a:3b:85:91:0c:a5:72:83:49:8a:5d:bc:bb:2a:af:
a0:30:27:6e:8d:fe:f7:c0:2c:2a:1a:7e:5f:96:a1:
1d:7b:0c:df:17:58:dc:b4:0b:a6:fc:1f:82:61:20:
82:25:8e:1b:a7:ca:35:80:e5:35:22:21:d2:5f:bd:
82:84:ba:49:e1:dd:21:7c:85:56:42:c6:58:05:fd:
d1:23:f0:cd:13:49:83:a4:ad:4b:90:6e:b4:74:0f:
72:35:f7:06:3d:11:8b:83:9e:69:77:bd:e0:b3:c2:
b5:d7:37:8b:6f:d7:ed:80:79:38:e8:4d:9e:d0:ec:
eb:a1:ca:b3:a5:4a:27:6c:d0:a8:d9:de:45:d7:82:
fd:71:c4:45:d1:83:a2:00:d7:8d:3c:76:55:ea:89:
f5:f1:2f:7a:a3:47:a3:77:2d:f8:10:7c:90:89:20:
5f:d9:66:ed:ce:bc:a2:87:71:09:4e:f9:a7:d3:79:
b0:03:59:c9:12:d7:67:95:c6:6c:82:00:81:c0:55:
e1:3c:9f:90:ae:c0:30:87:ff:87:4b:46:6d:4e:97:
ac:84:f4:c9:a7:45:9a:e9:97:70:26:9d:ba:fb:0e:
db:e1:d7:d0:65:ad:9c:a6:16:d5:c9:60:ed:f8:c9:
8f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1F:C6:C7:A5:9C:A5:2E:65:32:8E:56:6E:FC:9B:9B:8B:DA:2F:82
X509v3 Authority Key Identifier:
keyid:EA:2C:4E:A7:9D:DB:7B:00:3D:E0:1F:1D:05:F6:DB:F7:16:B1:13:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6ixOp53bewA94B8dBfbb9xaxEzY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/FR_Gx6WcpS5lMo5Wbvybm4vaL4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/8e7e1d-158f-4c6e-aba3-39f13e76afa3/1/6ixOp53bewA94B8dBfbb9xaxEzY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.238.172.0/22
91.241.24.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ce:30:b3:2c:6c:55:2f:7d:11:d6:25:9f:cb:70:f1:de:eb:
41:40:9c:6e:3b:60:db:d5:0c:e0:60:38:0b:10:2c:a9:8b:c0:
4d:76:9d:e5:a4:cc:58:c0:a3:5d:a0:c6:71:ae:dc:be:f4:8b:
9b:e6:68:b3:b0:c1:8f:b8:d3:df:de:06:a8:bb:f5:79:e7:c6:
f6:8b:39:97:4e:2d:08:5c:07:33:95:18:22:94:16:83:62:4e:
7a:b4:1b:3c:60:ae:e3:e2:9d:6a:78:6e:e6:a0:4e:64:46:34:
e6:0b:cd:7e:10:19:4f:eb:61:8f:bb:f0:4a:62:fb:51:89:e2:
44:b8:44:7e:5e:45:f3:be:f8:3e:68:09:7c:ab:9b:50:d5:c3:
fd:00:bf:f5:88:83:e0:c5:d5:60:ee:63:7f:1d:7c:01:7b:d3:
fe:af:de:0d:a7:86:50:d8:6d:5e:b1:2a:c0:09:10:4d:e6:51:
67:d2:39:bf:15:b1:29:ac:25:69:17:53:89:7c:8d:c1:44:92:
74:2e:19:8b:bc:8b:f6:cd:ac:e9:f2:28:4f:3b:5e:b6:cb:e6:
fc:87:e4:59:2b:f6:4b:82:da:25:bf:32:5d:34:9c:3b:21:17:
b4:e1:46:86:a6:e6:e7:6f:d0:92:a7:68:af:af:67:b6:e2:56:
95:42:14:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:51:57 2024 by rpki-client on console-fra.rpki-client.org