Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/0_FaYtRqg7onF2tdN6K5XXHe7mU.roa
File: 0_FaYtRqg7onF2tdN6K5XXHe7mU.roa (raw, json)
Hash identifier: r7PgS9gwGleUQu1ZZpoDt/AunhMfLI7zGjkP8bfm8eA=
Subject key identifier: D3:F1:5A:62:D4:6A:83:BA:27:17:6B:5D:37:A2:B9:5D:71:DE:EE:65
Certificate issuer: /CN=d45bab208653d4261ebf202f6036334119846055
Certificate serial: 0186C640FD23EC8D090929A64983C1F24E01
Authority key identifier: D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/0_FaYtRqg7onF2tdN6K5XXHe7mU.roa
Signing time: Thu 09 Mar 2023 12:03:13 +0000
ROA not before: Thu 09 Mar 2023 12:03:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41735
IP address blocks: 185.46.69.0/24 maxlen: 24
193.37.135.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:c6:40:fd:23:ec:8d:09:09:29:a6:49:83:c1:f2:4e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bab208653d4261ebf202f6036334119846055
Validity
Not Before: Mar 9 12:03:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d3f15a62d46a83ba27176b5d37a2b95d71deee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:48:9f:1c:8a:3f:ae:f4:76:79:72:cd:bf:b4:
c7:cd:2f:b6:b9:ad:ba:57:d2:68:d5:67:82:06:56:
36:a2:3b:e0:28:34:1f:7c:64:df:82:9e:27:13:a9:
ce:9b:cc:6a:4b:1d:00:a7:02:c4:66:c9:f2:9f:6c:
9c:7a:69:78:5b:74:98:b1:4a:bf:9e:7b:92:91:a0:
79:53:20:8e:ce:26:c5:0f:02:0d:59:ea:c9:a9:c4:
e3:9d:58:a0:f3:c8:4d:de:36:71:51:13:5e:e2:c8:
35:52:56:d9:1b:d7:b1:39:98:f5:4d:72:89:29:09:
b7:17:76:6b:5d:90:5c:a4:eb:93:bf:f3:40:cb:39:
f4:2c:f8:c3:84:2d:04:80:cd:48:35:88:47:ea:7c:
73:b7:76:a0:d9:59:0c:d0:f5:d9:56:2d:88:7e:d0:
5e:7d:d6:15:a3:7c:4c:cd:fe:fc:b8:c7:0e:b5:d2:
f7:35:e1:c8:94:0c:d0:b9:98:3d:84:85:12:4b:bf:
19:43:c9:d2:62:3b:3c:9f:6c:1a:7d:d2:f2:bd:68:
5e:26:9f:6b:c3:5b:dc:f4:2b:50:30:be:f9:9f:f3:
08:f3:5d:91:48:32:88:5d:ca:f4:76:c2:f1:1a:1f:
10:1d:7a:b4:22:57:38:03:2b:ad:ac:f6:e9:dc:46:
c0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F1:5A:62:D4:6A:83:BA:27:17:6B:5D:37:A2:B9:5D:71:DE:EE:65
X509v3 Authority Key Identifier:
keyid:D4:5B:AB:20:86:53:D4:26:1E:BF:20:2F:60:36:33:41:19:84:60:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FurIIZT1CYevyAvYDYzQRmEYFU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/0_FaYtRqg7onF2tdN6K5XXHe7mU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/0aec1f-6065-4d88-8454-124d3fb3906a/1/1FurIIZT1CYevyAvYDYzQRmEYFU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.46.69.0/24
193.37.135.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:4c:e1:a2:56:0e:32:bd:71:97:ff:5c:49:fc:7a:12:93:38:
60:8c:e4:6b:2e:7d:b0:31:e2:14:db:12:99:8e:d1:0a:1a:80:
e8:b3:7c:af:21:fb:08:83:cf:59:1a:71:a6:d8:20:c5:ce:2e:
c7:5d:06:a1:82:c7:39:02:b4:3c:67:2a:2e:f5:a6:62:80:00:
ed:12:03:80:e0:7d:9e:7e:66:bc:c3:76:f4:9c:fb:74:7c:51:
c0:71:e0:9e:39:55:fd:18:c7:d8:db:da:e8:42:c6:d3:df:10:
76:da:7b:5a:0a:33:9a:87:3c:ce:96:7e:8d:fd:4b:4d:3d:75:
a0:73:16:8d:fe:09:ba:9d:94:ab:41:80:db:2b:2b:76:1d:dd:
95:56:f4:f5:7d:2c:a9:9a:ec:c0:44:0f:10:bc:03:71:00:92:
22:59:e5:c3:a1:e6:07:71:73:c9:c5:b2:84:dd:2b:c5:2d:34:
4b:88:43:79:7e:78:ef:9c:1a:6e:08:82:f4:0f:f4:9b:53:c3:
09:e2:54:ae:27:91:e0:e7:42:2a:6c:b5:8a:d9:de:7d:ff:1d:
1f:7e:61:ef:4c:2c:37:53:4d:cc:22:7a:b9:db:f0:01:30:d4:
e1:0c:05:65:71:73:2e:f9:af:d7:75:f5:61:86:7e:57:e3:4c:
95:84:24:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:00 2024 by rpki-client on console-fra.rpki-client.org