Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fyTV8euFuxcfnRd74Cm8Z4PNCas.roa
File: fyTV8euFuxcfnRd74Cm8Z4PNCas.roa (raw, json)
Hash identifier: RCCR7cgzLOwnY3hlteTDQxABUnNBPEMiR7iNFSDK3Rg=
Subject key identifier: 7F:24:D5:F1:EB:85:BB:17:1F:9D:17:7B:E0:29:BC:67:83:CD:09:AB
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018D5B0968DEBFDA4C41748CE716431E9346
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fyTV8euFuxcfnRd74Cm8Z4PNCas.roa
Signing time: Tue 30 Jan 2024 15:42:39 +0000
ROA not before: Tue 30 Jan 2024 15:42:39 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8790
IP address blocks: 194.85.172.0/23 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 Apr 2024 14:13:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:5b:09:68:de:bf:da:4c:41:74:8c:e7:16:43:1e:93:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 30 15:42:39 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f24d5f1eb85bb171f9d177be029bc6783cd09ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:66:3a:8d:d9:06:bf:ab:4b:3e:38:a5:49:67:
38:5f:31:e3:f9:c9:50:ac:58:0c:4a:a6:77:8b:1b:
b2:5f:5c:15:bf:1f:3b:7d:c0:58:14:04:da:fe:e7:
7b:ec:b0:1e:2b:a7:53:4d:c9:f8:cb:f1:4c:34:e2:
b7:a5:c8:38:33:17:99:b9:b3:94:80:b7:24:5f:4b:
d4:61:c7:e9:e5:5d:40:bc:81:b0:ef:c9:95:02:5c:
be:41:bf:90:b2:5a:b1:eb:98:ae:9f:b7:30:fe:17:
f6:44:1c:42:c8:2c:78:fa:f1:a8:c7:3e:e4:45:bd:
28:3d:cb:ee:5d:dc:c2:65:1e:59:fc:b9:f8:27:d7:
b4:a3:f1:06:3b:ac:e8:bb:a5:90:4f:48:58:bb:73:
dd:e8:34:96:73:84:49:6a:96:24:41:f7:19:58:f7:
3e:6c:64:5c:13:9b:4b:17:a9:a6:41:8f:6d:d6:12:
e8:54:1d:f5:9e:23:55:61:4e:19:4e:4a:2a:5e:f3:
72:6f:a2:8b:ff:2d:48:d1:cd:1c:68:37:8d:ce:b2:
fe:41:e1:23:25:a2:15:4f:e8:68:fa:d7:4f:72:b9:
3f:05:b0:dd:8b:c6:cd:cc:6a:dd:93:82:c6:a4:59:
a4:0e:ab:8f:67:98:0b:9e:08:25:23:51:3f:8d:d7:
35:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:24:D5:F1:EB:85:BB:17:1F:9D:17:7B:E0:29:BC:67:83:CD:09:AB
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/fyTV8euFuxcfnRd74Cm8Z4PNCas.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.85.172.0/23
Signature Algorithm: sha256WithRSAEncryption
64:ba:5f:80:69:21:87:a0:65:b0:4c:7f:27:b4:96:07:0e:11:
d3:5d:70:6d:fa:96:b4:b9:97:11:a8:7f:96:c2:e4:cf:5b:af:
6e:74:45:f5:2c:aa:20:dd:b9:64:08:5a:12:a7:78:9e:5c:c2:
0c:88:73:4a:72:93:f3:29:c0:07:d3:99:ab:bc:20:6e:01:07:
e1:ad:b1:a8:ae:fe:b6:8f:ce:32:66:61:36:77:9e:e1:b6:20:
df:78:50:44:cb:cd:ab:26:06:d6:c4:f3:47:8f:64:90:1e:59:
3a:2a:1e:94:d6:9f:58:13:c1:46:79:b5:d7:05:0e:81:f0:f9:
72:a7:f3:fe:2d:a8:d4:c4:ec:00:c7:e8:95:52:fd:d5:ee:18:
29:4e:7d:97:e6:4b:a3:1b:f0:91:e8:7d:2e:db:3e:ec:1b:4f:
8d:25:89:c6:b5:e5:0d:69:f4:b5:1b:5e:56:37:df:5e:25:b6:
d9:eb:79:2b:e1:dd:b4:31:2e:e4:46:95:fa:a1:3d:14:d8:56:
e2:76:af:9b:49:55:f7:48:41:da:42:39:1a:fe:01:36:85:4b:
47:e2:1c:a5:75:34:4a:9c:81:fa:db:70:c7:84:9b:2e:8d:49:
4c:0b:ea:5e:b4:32:dd:f3:57:12:f9:d8:7a:56:85:78:fa:fb:
f4:cd:2e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org