Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ftF-9SofizgAEPDr5enmPAS50ZA.roa
File: ftF-9SofizgAEPDr5enmPAS50ZA.roa (raw, json)
Hash identifier: TaOTcyidmP2YpDFyxruiWPfU3DffD7aoWnRdSriMW0U=
Subject key identifier: 7E:D1:7E:F5:2A:1F:8B:38:00:10:F0:EB:E5:E9:E6:3C:04:B9:D1:90
Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Certificate serial: 018A7444FCFC3C8F2C6C13966884C158D808
Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ftF-9SofizgAEPDr5enmPAS50ZA.roa
Signing time: Fri 08 Sep 2023 10:09:52 +0000
ROA not before: Fri 08 Sep 2023 10:09:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201340
IP address blocks: 194.170.8.0/24 maxlen: 24
194.170.245.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:74:44:fc:fc:3c:8f:2c:6c:13:96:68:84:c1:58:d8:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9
Validity
Not Before: Sep 8 10:09:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ed17ef52a1f8b380010f0ebe5e9e63c04b9d190
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b7:4a:ae:36:73:70:5b:82:b1:3e:e6:b9:94:
26:86:be:f4:fd:20:f1:7d:11:7b:ac:eb:c5:94:bf:
86:dc:7c:cc:1c:66:7c:da:2b:bf:99:6a:6d:28:77:
3b:f9:bb:85:25:08:5f:20:3c:9f:b2:1a:4d:cf:df:
52:8b:16:dd:a6:d3:78:d0:8c:b9:6e:ce:cd:8c:94:
b4:a3:19:4b:db:ee:88:ca:c7:49:ab:5e:74:ae:38:
72:14:53:c1:4a:03:fb:dd:a6:76:cd:e9:64:e4:07:
17:aa:ad:7a:d9:47:2c:94:7f:b6:0c:e4:79:f3:2d:
3f:1b:c9:99:8f:03:c8:9b:b0:c8:87:08:59:d4:07:
c3:44:ef:98:8b:89:35:d2:28:ac:e1:93:c2:e6:31:
7e:d8:e0:cd:50:34:5e:c5:ef:4f:ed:e4:ac:9e:ca:
d8:53:9d:57:4d:40:a4:b9:9a:50:a6:1a:a7:24:d3:
34:24:00:cd:1f:70:65:68:51:d4:26:f2:c8:c4:38:
b4:f2:6b:7d:9a:d0:56:55:33:7e:88:b7:df:0b:ed:
b5:87:b6:75:65:2f:a9:74:a7:cf:e8:09:86:3e:d9:
8b:47:ab:8c:1e:f2:79:1c:10:f6:14:bb:c8:c9:6c:
0a:b4:20:c3:88:23:6e:bb:84:50:27:9e:45:3f:fd:
7e:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:7E:F5:2A:1F:8B:38:00:10:F0:EB:E5:E9:E6:3C:04:B9:D1:90
X509v3 Authority Key Identifier:
keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/ftF-9SofizgAEPDr5enmPAS50ZA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.170.8.0/24
194.170.245.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:2d:2c:ba:8e:5b:73:cc:43:ab:7a:63:45:e6:3d:d4:55:a8:
b5:14:af:70:6a:5a:f0:bc:9d:eb:bd:8f:7b:b9:48:e5:d5:7c:
10:94:58:c2:ce:9c:23:39:c5:92:19:8c:13:87:bf:6f:bd:56:
d9:d0:94:8b:9c:cf:6d:56:22:3c:62:5b:28:ce:b7:08:30:5c:
b8:f2:5c:c9:4b:b6:1e:67:64:04:28:dd:f4:2e:8f:80:13:69:
03:ea:c2:79:5a:85:5d:7d:37:f8:ce:ec:ae:b5:31:0e:6e:e9:
78:73:db:02:b9:c2:af:ad:8e:73:a7:9c:f7:51:2e:6c:7d:be:
e0:ed:31:58:33:bf:28:13:11:86:03:4c:37:45:7c:66:8d:0d:
ae:ec:56:a9:33:0f:63:b3:7b:d9:75:c5:e7:60:b0:36:25:9d:
e3:2e:0d:f1:ce:3f:3f:b0:b6:3e:32:d3:92:75:1c:e0:d7:e8:
c4:9c:ec:16:6a:74:10:2f:93:0c:3d:cf:c6:e9:8c:41:c9:6a:
fc:27:1b:29:93:b7:c2:fe:96:92:e7:5b:5b:96:e1:84:cc:1a:
1f:2e:15:b1:70:31:89:ee:be:92:f7:a3:0f:da:16:08:de:69:
46:b0:fe:58:f3:48:ea:c1:54:aa:03:7b:de:e0:0b:20:81:9b:
65:58:91:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:19:45 2024 by rpki-client on console-ams.rpki-client.org