Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlgFYKUuOE3fzabaN-oTTzNylXI.roa
File: FlgFYKUuOE3fzabaN-oTTzNylXI.roa (raw, json)
Hash identifier: 709tRwbNUtKod2I+VstGoCK4og3ayAJS3ZCwaG9kgFQ=
Subject key identifier: 16:58:05:60:A5:2E:38:4D:DF:CD:A6:DA:37:EA:13:4F:33:72:95:72
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AE61D9D81A43DE7BA85484482996A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlgFYKUuOE3fzabaN-oTTzNylXI.roa
Signing time: Sun 01 Jan 2023 11:15:08 +0000
ROA not before: Sun 01 Jan 2023 11:15:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8790
IP address blocks: 194.85.173.0/24 maxlen: 24
194.85.172.0/24 maxlen: 24
194.85.172.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:e6:1d:9d:81:a4:3d:e7:ba:85:48:44:82:99:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16580560a52e384ddfcda6da37ea134f33729572
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ff:8b:c6:69:6d:56:47:18:74:0b:50:7e:52:
ee:21:50:22:38:4b:86:9c:57:57:06:44:16:e1:89:
4d:1c:7c:19:1b:c3:a7:b5:ef:23:f4:15:31:c5:45:
9e:67:18:bc:aa:d7:5e:45:9e:a7:8b:5f:c0:d5:34:
aa:37:0c:ae:7b:88:6e:fa:fb:9a:86:1c:2e:c5:b8:
ef:04:70:cc:5d:c1:94:3e:29:ad:9f:9c:e7:39:f5:
ea:69:56:e9:07:03:df:71:30:c3:b6:dd:01:98:22:
b4:00:60:dd:21:a5:b7:36:1f:ae:51:b4:80:a0:e4:
8a:3e:28:c6:2c:6d:c8:10:98:49:77:a1:14:65:c5:
50:55:e7:03:2b:d1:b9:e5:2f:f8:a7:66:95:66:05:
07:59:9e:9e:a1:d4:db:8b:3b:f6:d7:47:e1:20:9c:
64:e9:c5:3b:e8:44:bc:bf:4c:d9:7f:31:ad:54:2b:
68:7f:00:b5:33:07:ce:ac:e0:66:b0:39:8d:55:d7:
fd:f9:4e:bd:b9:c6:ad:49:73:6c:6a:f0:9f:19:2a:
73:96:36:4d:8c:da:72:d7:9c:02:60:e1:36:bf:73:
69:62:54:fd:61:f5:e7:7f:b0:20:7f:b2:45:e8:af:
96:12:a4:f6:bb:ef:10:8f:a9:fe:73:1b:f5:e9:13:
25:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:58:05:60:A5:2E:38:4D:DF:CD:A6:DA:37:EA:13:4F:33:72:95:72
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FlgFYKUuOE3fzabaN-oTTzNylXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.172.0/23
Signature Algorithm: sha256WithRSAEncryption
10:4e:2e:6c:79:b9:9d:dd:ca:46:c5:9e:5c:4c:ee:91:c3:36:
dc:58:d4:b9:ca:89:62:bf:fd:f8:5b:a8:45:be:a9:d1:ac:52:
cb:ea:3d:51:20:ee:42:fc:38:a0:76:81:f4:b1:c1:e4:98:58:
b9:2a:72:bf:47:ea:78:2b:82:56:07:85:4b:c5:65:3a:44:21:
50:b8:ce:d7:c3:da:2c:39:f7:32:eb:90:a2:2f:d7:71:92:cd:
a5:61:c2:4e:d4:76:90:77:c9:2a:4c:64:9d:51:ce:28:86:5a:
2f:c7:23:fa:ba:c8:ab:34:a4:dc:27:03:e6:88:9b:21:4a:ed:
27:6b:3f:2c:5a:91:5b:65:cf:bb:f4:d7:dc:a2:b8:1b:33:08:
59:a2:a0:13:9e:ea:08:c0:35:8e:e3:3a:35:01:fc:8c:ce:9f:
d7:80:12:74:78:f7:86:6a:0b:45:8a:36:91:ff:ab:4a:da:40:
8e:97:1a:db:30:fa:c1:38:45:a0:69:8b:19:78:d7:8a:16:68:
90:4c:c4:51:1a:29:7a:f1:24:50:a0:4f:f0:89:8f:b3:5a:80:
bc:8c:84:b6:2b:08:7c:56:c0:6a:7a:16:05:07:0e:fb:3f:b8:
df:3f:75:43:ef:18:98:a5:91:7b:cc:37:26:e5:0b:65:cf:2c:
fb:34:d2:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org