Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/Fw0YufGe9NToOOKLacBxwdgJWa8.roa
File: Fw0YufGe9NToOOKLacBxwdgJWa8.roa (raw, json)
Hash identifier: k1i0tlV1EbpkNPERDEOnM1+4eOaq6d5x77s/MF0vzos=
Subject key identifier: 17:0D:18:B9:F1:9E:F4:D4:E8:38:E2:8B:69:C0:71:C1:D8:09:59:AF
Certificate issuer: /CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Certificate serial: 0185715E97DFE62A19716516DF157A605E16
Authority key identifier: 3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/Fw0YufGe9NToOOKLacBxwdgJWa8.roa
Signing time: Mon 02 Jan 2023 07:25:02 +0000
ROA not before: Mon 02 Jan 2023 07:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209640
IP address blocks: 149.3.189.0/24 maxlen: 24
149.3.191.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:5e:97:df:e6:2a:19:71:65:16:df:15:7a:60:5e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3bfa6636fe6440acf293b75705a7a1dcada8420b
Validity
Not Before: Jan 2 07:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=170d18b9f19ef4d4e838e28b69c071c1d80959af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f6:59:cb:6f:33:58:80:c0:ff:36:38:af:28:
5b:5f:ba:ac:bb:34:9f:6c:46:a2:09:c8:55:fc:65:
9b:a3:62:06:8f:f8:d0:7a:2c:c1:b4:76:8f:f0:e2:
c2:9b:9e:90:74:99:ea:4a:05:0e:5b:56:d3:63:ce:
ae:15:76:93:75:26:a7:a0:21:9a:08:40:f5:89:72:
14:57:11:5c:5d:6d:3b:10:58:63:2d:9a:b7:30:7e:
f1:6b:2a:eb:b4:4c:80:0b:b2:e2:de:7f:63:fc:05:
51:16:4e:9d:39:28:5b:3f:62:ea:87:59:c8:2c:24:
c2:ec:f1:f1:50:d1:a7:b3:c8:b9:4c:5d:f7:ac:f1:
25:3a:bc:bd:c6:80:88:7c:8e:76:e7:03:3b:cb:14:
8b:45:52:8a:38:2d:62:54:32:57:c7:3a:fb:67:44:
1a:2e:5b:15:8b:17:53:98:e2:3d:dd:40:c2:40:c5:
60:e6:45:cc:6b:9b:f6:16:7f:dd:cb:19:8b:47:e1:
d1:e2:7b:05:13:fb:ed:fb:52:34:9a:5b:2e:69:a7:
96:64:79:d4:80:bd:75:1c:c5:1f:a2:44:a2:66:e0:
27:94:83:84:58:b7:93:a9:45:d8:92:53:e5:8d:7f:
c5:31:93:71:cb:6f:35:f1:af:64:71:31:4c:95:06:
97:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:0D:18:B9:F1:9E:F4:D4:E8:38:E2:8B:69:C0:71:C1:D8:09:59:AF
X509v3 Authority Key Identifier:
keyid:3B:FA:66:36:FE:64:40:AC:F2:93:B7:57:05:A7:A1:DC:AD:A8:42:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O_pmNv5kQKzyk7dXBaeh3K2oQgs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/Fw0YufGe9NToOOKLacBxwdgJWa8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/a47cdf-d21b-4f1d-8901-92ec515c595a/1/O_pmNv5kQKzyk7dXBaeh3K2oQgs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.3.189.0/24
149.3.191.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:38:b8:de:ff:62:67:a1:1c:76:00:51:06:bc:b9:81:2a:fe:
71:53:6a:af:03:8b:5e:c7:b6:1a:df:ed:8f:43:c6:e9:51:6b:
46:04:34:62:19:77:ba:a2:4c:9f:98:93:bf:d4:a2:b7:3e:99:
40:14:3f:6e:fa:6c:1c:94:aa:ca:fc:53:aa:db:2a:8b:37:3a:
1b:98:0a:76:9d:75:57:58:6e:01:65:be:ec:c6:bb:33:28:66:
bb:4b:0b:4c:af:45:68:33:0c:19:f4:bd:1e:22:05:d1:76:56:
f5:85:e3:26:87:2b:a7:c5:b9:9b:38:17:2e:b1:85:df:33:91:
4d:cc:4b:20:54:d0:fd:0e:5f:f0:f2:74:52:dd:22:cf:3f:34:
21:68:80:dd:2a:80:88:a2:af:50:89:1f:76:d2:1e:b7:3c:97:
a5:ee:01:f7:cb:0e:40:5a:c0:5c:ca:ce:f9:7d:a1:47:7a:ee:
b7:a5:df:5e:69:a0:da:59:79:d2:59:1f:0d:ed:b2:4e:62:01:
e4:f4:75:2d:14:18:d3:45:86:6a:0c:ef:31:0c:96:f4:d7:27:
1f:1c:79:0c:3b:5c:8f:4b:35:bc:cd:ca:1c:34:c5:86:34:60:
15:d7:66:c6:fe:f6:05:0d:62:89:41:f9:dc:ca:b9:d4:b3:00:
96:f6:72:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:40 2023 by rpki-client on console-fra.rpki-client.org