Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/FatUSbKz9bUWT8bbTVvKgiu7JgE.roa
File: FatUSbKz9bUWT8bbTVvKgiu7JgE.roa (raw, json)
Hash identifier: YLhePOKto/uZwG1CFpvVoM41xzfymB4SGjTRe3mdHGc=
Subject key identifier: 15:AB:54:49:B2:B3:F5:B5:16:4F:C6:DB:4D:5B:CA:82:2B:BB:26:01
Certificate issuer: /CN=823b669a87620faf0c422710e26ee3000c9a9a41
Certificate serial: 01867AB1C95CDA1617171604100CC3E1E780
Authority key identifier: 82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/FatUSbKz9bUWT8bbTVvKgiu7JgE.roa
Signing time: Wed 22 Feb 2023 19:55:17 +0000
ROA not before: Wed 22 Feb 2023 19:55:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205220
IP address blocks: 193.243.186.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:7a:b1:c9:5c:da:16:17:17:16:04:10:0c:c3:e1:e7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=823b669a87620faf0c422710e26ee3000c9a9a41
Validity
Not Before: Feb 22 19:55:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15ab5449b2b3f5b5164fc6db4d5bca822bbb2601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b4:62:2e:18:f8:36:0b:c1:00:c7:4b:12:d2:
ce:d6:fa:2b:0d:17:81:19:cc:8d:cf:c2:15:d4:b8:
32:25:25:a0:80:59:00:e4:65:8e:3a:f5:0c:ca:1f:
e0:6c:c9:97:75:dd:fc:c7:5f:93:7c:93:58:92:c9:
29:12:59:a6:a3:0a:21:ca:53:f7:69:e8:5d:41:22:
8a:87:54:64:ec:65:3f:49:ff:11:61:ca:ec:3b:a2:
b1:5c:0d:3d:29:60:2d:48:b7:a6:dc:1f:b2:ab:64:
7b:b6:a3:dc:6b:e4:11:73:44:5e:33:07:a1:64:26:
00:bc:df:c4:1b:66:05:88:3c:4b:68:81:58:ac:67:
49:60:53:c1:f5:80:23:4e:e3:06:8f:7b:b6:1c:55:
b0:f1:4b:cb:5d:c6:0d:54:8c:67:70:6c:be:45:d3:
5c:a0:e3:b1:d1:bd:05:96:23:ea:4b:fa:b6:6e:cf:
7b:71:c4:88:21:c8:5c:c2:8c:5b:32:ce:a1:56:27:
02:00:f8:9b:0d:50:e1:6b:87:0c:03:7f:02:02:05:
70:49:b7:b3:e9:1d:5e:60:a7:f2:84:53:81:3b:20:
1f:84:b8:a2:8d:db:fc:90:b5:40:71:f4:b0:d6:2d:
20:59:0a:36:e7:d2:70:19:28:87:54:14:a9:c2:5b:
2f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AB:54:49:B2:B3:F5:B5:16:4F:C6:DB:4D:5B:CA:82:2B:BB:26:01
X509v3 Authority Key Identifier:
keyid:82:3B:66:9A:87:62:0F:AF:0C:42:27:10:E2:6E:E3:00:0C:9A:9A:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gjtmmodiD68MQicQ4m7jAAyamkE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/FatUSbKz9bUWT8bbTVvKgiu7JgE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/3faba7-3529-414d-a79f-25ff96d41afb/1/gjtmmodiD68MQicQ4m7jAAyamkE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.243.186.0/24
Signature Algorithm: sha256WithRSAEncryption
08:87:5f:c8:29:4f:cb:2f:fd:48:0d:a5:b9:e8:2d:74:fe:95:
8f:6e:44:11:11:fd:7b:6b:ed:75:0f:9a:9d:e5:09:67:4e:52:
d1:26:b6:e3:5e:e9:9c:30:91:b7:a6:cb:4b:89:fe:7e:98:35:
8b:15:87:66:a1:6e:09:b9:39:9b:bd:74:e6:cb:26:f2:73:ef:
72:6d:31:68:be:5c:73:3f:aa:d4:c8:fe:f2:e7:7d:dc:8a:4b:
ff:8e:03:ac:7d:b3:91:08:1d:4f:0d:4c:ed:f4:36:28:42:c6:
9a:5b:1a:f5:4c:85:8c:78:53:92:51:b5:b0:73:24:fd:28:01:
72:17:7f:36:44:37:29:ec:50:6c:92:c5:ef:f9:fd:ef:c6:60:
c1:74:d1:12:03:60:da:cc:c9:3c:a7:16:28:b5:4e:4c:4f:b5:
81:48:28:e7:ec:43:22:3e:2b:12:55:6f:45:d7:a6:bc:4b:19:
b1:49:54:18:24:38:ea:48:01:57:2e:52:37:0a:64:af:e5:89:
c0:ad:cd:4d:6a:4e:41:cc:f4:2b:08:bb:a8:63:64:37:ca:e8:
9e:f5:3b:c5:54:50:6a:04:f7:c2:4f:93:40:a7:cd:81:77:35:
b8:f8:87:88:d2:69:b7:b6:1c:47:83:1e:40:53:33:e8:58:3e:
52:fe:36:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:10 2023 by rpki-client on console-fra.rpki-client.org