Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/FU_YU03b2sAHqcPfzZBhBVqVpxc.roa
File: FU_YU03b2sAHqcPfzZBhBVqVpxc.roa (raw, json)
Hash identifier: r5/rHGMxLxm1/rjE68RslyamMa1bHEtXX+gjC7rypEI=
Subject key identifier: 15:4F:D8:53:4D:DB:DA:C0:07:A9:C3:DF:CD:90:61:05:5A:95:A7:17
Certificate issuer: /CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Certificate serial: 01857139B1F0181C1CBD3D63C8254A0C545C
Authority key identifier: C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/FU_YU03b2sAHqcPfzZBhBVqVpxc.roa
Signing time: Mon 02 Jan 2023 06:44:44 +0000
ROA not before: Mon 02 Jan 2023 06:44:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61211
IP address blocks: 194.36.46.0/23 maxlen: 24
194.36.45.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:b1:f0:18:1c:1c:bd:3d:63:c8:25:4a:0c:54:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c9b59f41779e6f2435f59f1a171c080a5a7a44d2
Validity
Not Before: Jan 2 06:44:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=154fd8534ddbdac007a9c3dfcd9061055a95a717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:6b:fd:99:bb:2f:a4:c9:c1:ad:9b:97:17:ce:
df:9e:49:14:c1:6f:cb:e2:d7:91:89:dd:02:5e:97:
34:71:d5:1a:84:66:34:29:eb:59:d5:64:4b:c7:8a:
d0:09:18:47:6b:a1:48:d4:00:f4:70:12:6e:dd:56:
99:b3:8c:48:39:a7:b9:51:64:25:d7:f2:9f:86:cf:
85:9a:a0:1e:75:36:7a:3a:da:55:93:54:65:8e:4f:
8a:a7:22:14:4b:19:b9:23:5b:a7:a3:ca:14:7b:d6:
ca:5c:a6:d2:a2:24:e8:84:dd:1d:4a:af:99:61:47:
a0:d3:1b:b5:83:09:b8:6f:5b:3d:2f:c6:1b:6e:d9:
a7:7c:bc:8c:a3:78:4d:63:ab:69:ad:1b:91:42:e8:
1b:2d:86:8a:87:1e:82:b0:59:6f:f9:ab:17:e0:8c:
82:54:b6:38:68:ec:e8:d0:4a:e4:97:e1:fd:03:53:
1a:b7:e8:29:8f:32:22:e1:f8:63:05:be:55:51:c7:
36:37:21:21:96:b4:0d:c8:72:14:ac:7c:b5:ba:c8:
58:ad:e6:1a:77:f4:91:41:c5:9a:e7:ad:55:e9:17:
56:72:36:de:70:97:2f:b5:1c:6c:f8:6f:0a:b9:9c:
be:60:ac:7c:f7:20:59:cb:de:81:24:be:e4:d9:7d:
0f:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:4F:D8:53:4D:DB:DA:C0:07:A9:C3:DF:CD:90:61:05:5A:95:A7:17
X509v3 Authority Key Identifier:
keyid:C9:B5:9F:41:77:9E:6F:24:35:F5:9F:1A:17:1C:08:0A:5A:7A:44:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ybWfQXeebyQ19Z8aFxwIClp6RNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/FU_YU03b2sAHqcPfzZBhBVqVpxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/027c8b-4009-4da6-ae97-72367cbb19ef/1/ybWfQXeebyQ19Z8aFxwIClp6RNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.36.45.0-194.36.47.255
Signature Algorithm: sha256WithRSAEncryption
8f:4a:a6:5f:a4:1e:12:9a:dd:4d:3e:5e:b4:42:1a:b4:63:a8:
7a:18:c9:a2:4a:00:61:e4:fe:2c:93:2d:42:64:58:00:20:d8:
84:26:a5:c0:17:e5:2f:87:b9:08:b3:e3:2f:6e:14:1b:ae:d2:
0e:ca:cf:8e:d0:0a:cd:96:24:39:5e:fd:01:9d:f3:96:8e:aa:
20:72:7a:b6:a9:98:a6:26:0d:d2:72:05:dc:ab:9c:b4:aa:0c:
2e:cb:7c:a3:76:42:51:27:25:d2:d3:32:bd:29:1f:9f:09:67:
6e:fd:f2:8d:6c:1f:c0:7c:5f:95:a1:35:3d:85:47:ef:17:24:
5e:a9:97:5f:d3:d4:56:fb:14:5d:de:95:bd:78:44:17:60:f7:
f2:d3:23:38:3a:4b:18:b5:9d:7a:2f:2f:38:5f:d3:27:9c:8b:
b0:93:3b:9a:16:cf:48:b3:53:eb:b9:98:5e:22:b0:e0:23:3e:
30:76:03:1b:95:57:06:32:ac:99:fa:8a:64:57:4d:0f:d6:dc:
e7:d5:ee:27:1d:01:b5:0d:d2:1b:66:d6:05:ab:49:16:f2:6c:
50:46:37:40:63:15:43:a9:20:f6:93:77:e4:1a:72:91:a7:3b:
38:e9:40:4a:0f:32:72:e7:ab:a0:c7:90:cf:67:5e:ae:fa:ce:
b4:61:32:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:26 2024 by rpki-client on console-ams.rpki-client.org