Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/FTBP2HCzz3GBAEEZE39gvl0c_7c.roa
File: FTBP2HCzz3GBAEEZE39gvl0c_7c.roa (raw, json)
Hash identifier: CtI/6UBSYDmnZ3wBocp3MxjJbD6Gm5UfmcZ5XveX3p0=
Subject key identifier: 15:30:4F:D8:70:B3:CF:71:81:00:41:19:13:7F:60:BE:5D:1C:FF:B7
Certificate issuer: /CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Certificate serial: 0185719E716DFD247510FC827C95AD3631F4
Authority key identifier: 6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/FTBP2HCzz3GBAEEZE39gvl0c_7c.roa
Signing time: Mon 02 Jan 2023 08:34:47 +0000
ROA not before: Mon 02 Jan 2023 08:34:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20473
IP address blocks: 185.223.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:9e:71:6d:fd:24:75:10:fc:82:7c:95:ad:36:31:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ab75929e735ce65a66bd82dca8b651d9856cd2c
Validity
Not Before: Jan 2 08:34:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15304fd870b3cf7181004119137f60be5d1cffb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ff:63:04:4e:ab:cf:cc:f5:7f:1b:b0:93:c6:
40:2b:56:ea:1a:4c:ae:80:aa:3a:9f:1a:a5:78:dc:
06:4d:3e:a1:3e:1c:80:e5:25:69:f5:4e:3c:0d:12:
37:de:44:df:ed:e3:f8:e3:ff:5b:a1:3a:12:7b:d4:
f2:24:86:6e:69:68:bb:73:33:5b:fb:eb:72:da:4f:
4d:dd:42:c3:46:72:e6:85:94:81:f1:19:2f:eb:0f:
d2:ef:42:4f:9f:f2:73:71:22:d0:88:63:0d:55:07:
33:b6:98:1c:3f:21:99:27:eb:20:09:e4:96:7b:dc:
b2:4d:f8:7e:d7:06:07:00:97:f3:88:26:7c:ae:fa:
ad:c6:72:e6:e1:ec:78:4b:a9:5f:82:4b:ea:5e:89:
8c:f1:0b:0e:75:cd:38:e8:71:2f:09:72:17:53:d2:
2e:93:c5:07:48:d1:6f:dc:ae:f5:be:7d:9d:f3:ec:
1a:07:cc:9c:81:67:a6:b0:eb:b9:30:52:c9:97:cd:
f9:cf:54:c4:00:ee:4a:50:d5:d5:ae:21:84:17:12:
dc:55:97:35:3a:56:fc:bd:a8:0e:12:bc:c4:1d:81:
a6:56:b7:8d:60:85:29:23:1b:53:55:cc:b4:37:5c:
f8:3a:ef:28:78:8e:77:0d:83:c0:2a:a6:64:7e:2b:
b7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:30:4F:D8:70:B3:CF:71:81:00:41:19:13:7F:60:BE:5D:1C:FF:B7
X509v3 Authority Key Identifier:
keyid:6A:B7:59:29:E7:35:CE:65:A6:6B:D8:2D:CA:8B:65:1D:98:56:CD:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ardZKec1zmWma9gtyotlHZhWzSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/FTBP2HCzz3GBAEEZE39gvl0c_7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/9d1c8f-c634-46aa-aff8-7c2b21ff6ceb/1/ardZKec1zmWma9gtyotlHZhWzSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.161.0/24
Signature Algorithm: sha256WithRSAEncryption
37:b3:fd:48:9c:f2:fd:94:2a:8b:c8:dc:7c:9a:fb:0b:47:84:
9e:10:0b:1b:e3:d6:88:d5:e3:93:b8:19:ee:23:db:27:86:9d:
d1:74:6b:03:5b:e7:c6:63:5c:3c:07:c7:f4:41:41:f1:dd:88:
07:50:2c:08:d4:2e:b0:58:7d:cc:cf:9b:1a:3b:b9:8b:df:c5:
ba:09:04:f9:aa:3c:b5:f7:1b:da:13:62:5a:51:3d:05:d9:f4:
e3:db:60:04:79:4b:9a:03:4d:38:01:aa:e8:af:01:c8:dc:19:
d0:99:8b:e3:82:56:c8:6c:74:92:0a:ca:c6:9f:02:52:2c:4f:
ee:e9:36:63:7e:11:32:f9:6b:21:81:0b:14:f9:e2:c5:5d:d5:
70:4c:86:20:5c:ac:52:29:f4:a7:1a:b5:c0:62:85:68:ea:f3:
05:44:a9:e6:c1:39:86:ff:f8:eb:8b:4a:6e:3d:ce:5e:4a:a7:
a5:ab:8c:29:fb:ab:dd:74:8d:2a:4f:9b:69:8e:a7:04:f4:82:
97:a4:af:70:0a:de:80:95:1a:33:1d:91:64:5b:ad:95:04:6a:
48:e2:e5:14:e9:86:f4:b5:07:c6:47:8d:80:f4:13:81:ad:0b:
9a:04:3b:c0:d0:f7:26:03:d0:a6:83:1a:67:c2:cb:df:65:6a:
e9:d8:e4:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:45 2023 by rpki-client on console-ams.rpki-client.org