Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FZYywLGre8eqRqurGcMoOGXqo2U.roa
File: FZYywLGre8eqRqurGcMoOGXqo2U.roa (raw, json)
Hash identifier: zHN7f6JjOfDrZVhCrTmXskutAIq3FUvS/Vs+FIFpHeQ=
Subject key identifier: 15:96:32:C0:B1:AB:7B:C7:AA:46:AB:AB:19:C3:28:38:65:EA:A3:65
Certificate issuer: /CN=c2778de2a9be9802120382e750d159e95872c2ae
Certificate serial: 0185708CDD4D108CE99DD60C93373F024ED0
Authority key identifier: C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FZYywLGre8eqRqurGcMoOGXqo2U.roa
Signing time: Mon 02 Jan 2023 03:35:57 +0000
ROA not before: Mon 02 Jan 2023 03:35:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25184
IP address blocks: 83.147.193.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:8c:dd:4d:10:8c:e9:9d:d6:0c:93:37:3f:02:4e:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c2778de2a9be9802120382e750d159e95872c2ae
Validity
Not Before: Jan 2 03:35:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=159632c0b1ab7bc7aa46abab19c3283865eaa365
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f4:f1:b5:01:32:29:c2:90:52:8f:d1:79:a8:
a5:cb:a6:a6:37:9d:82:1b:95:76:7c:5d:26:07:3b:
47:fb:5a:52:6a:44:6b:5c:57:44:23:9c:e7:2b:49:
db:6b:90:2a:d4:98:2e:03:18:fd:8d:3e:f8:4f:f8:
b4:f9:25:8b:94:3e:a9:3a:78:c8:07:42:c3:1d:64:
99:15:05:6a:91:1b:8a:04:d9:c8:94:df:c9:b4:55:
26:f3:17:9e:49:9e:97:c1:5a:48:54:92:e0:6d:60:
52:22:2f:41:93:79:25:48:b2:9d:fb:71:96:06:10:
08:01:b3:15:84:7e:f5:e5:ed:f2:66:2e:16:c1:e3:
ff:ff:56:d2:1c:c0:57:b6:3f:e6:f1:de:63:21:f0:
62:e9:f6:5f:5c:ac:49:ab:b2:b8:e1:e4:2e:4f:fc:
93:f4:5c:f8:b7:54:26:59:43:73:fd:4b:93:f5:bc:
c5:c7:df:88:63:1e:6e:74:84:ca:d5:70:3c:42:b4:
78:c9:31:4b:2f:6e:a5:33:26:93:1b:d0:c5:9d:50:
54:0d:76:0b:db:08:58:20:47:6b:7b:20:f9:03:b7:
1d:b2:3c:d5:17:7a:02:5a:45:6c:7b:50:56:32:f9:
b6:4d:c0:39:c3:2e:4f:3b:ce:f8:dc:5b:d5:66:64:
04:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:96:32:C0:B1:AB:7B:C7:AA:46:AB:AB:19:C3:28:38:65:EA:A3:65
X509v3 Authority Key Identifier:
keyid:C2:77:8D:E2:A9:BE:98:02:12:03:82:E7:50:D1:59:E9:58:72:C2:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wneN4qm-mAISA4LnUNFZ6Vhywq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/FZYywLGre8eqRqurGcMoOGXqo2U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/410930-9d65-4be8-9eba-f98da54af434/1/wneN4qm-mAISA4LnUNFZ6Vhywq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.147.193.0/24
Signature Algorithm: sha256WithRSAEncryption
62:83:77:61:87:ba:52:d5:52:55:b6:13:6d:56:47:d7:29:44:
32:de:9c:e5:13:22:c6:15:6d:99:d4:36:2a:6a:ac:ac:b8:10:
3c:80:c1:9c:ba:be:c2:24:b0:e5:53:78:91:41:1f:9c:f1:98:
58:05:3c:24:17:c4:fe:7c:43:91:41:3f:e2:6d:d5:c1:ba:14:
cd:cb:c9:aa:c5:7d:8f:23:66:b4:68:a7:67:0f:62:ed:95:ac:
0d:c7:9d:84:ec:e5:42:4c:a8:5e:1f:04:ed:29:24:78:40:6a:
62:aa:53:da:2f:fb:2e:72:4b:1f:70:f0:c8:94:b2:e2:5a:bc:
94:ed:7b:2c:a5:78:20:44:7a:65:97:35:f0:8f:5d:f9:0a:e1:
37:c6:11:45:38:7f:b0:51:19:78:10:07:84:7f:24:fc:33:fe:
91:81:85:9e:57:21:5c:1e:f2:b9:b6:ff:5c:a0:82:39:04:90:
48:b1:0d:78:91:e5:a9:3d:6f:b0:fc:51:c2:a1:a3:f4:e8:f7:
b9:d5:51:82:58:d6:ea:4c:89:cb:95:77:e9:ba:16:13:72:76:
60:68:b0:c1:35:4a:41:7f:3e:fa:81:18:dc:06:61:6d:b5:c7:
4a:14:3e:34:d6:9a:ea:87:fe:e7:13:8f:69:e8:72:92:8c:2b:
8d:c6:3d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:37:28 2024 by rpki-client on console-fra.rpki-client.org