Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/FcTN7D5yRGer2Wj9Nf0GkrHU76U.roa
File: FcTN7D5yRGer2Wj9Nf0GkrHU76U.roa (raw, json)
Hash identifier: xUAv3Cfa89ElfOi7KhHQRV3UpWY98U4GY4Ia/n4Pn+Q=
Subject key identifier: 15:C4:CD:EC:3E:72:44:67:AB:D9:68:FD:35:FD:06:92:B1:D4:EF:A5
Certificate issuer: /CN=440934d517c506412496b808b7df25ca0fd6455f
Certificate serial: 01856E14463F26152FD4C42B1BC314DF8F24
Authority key identifier: 44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/FcTN7D5yRGer2Wj9Nf0GkrHU76U.roa
Signing time: Sun 01 Jan 2023 16:05:00 +0000
ROA not before: Sun 01 Jan 2023 16:05:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 194.146.0.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:14:46:3f:26:15:2f:d4:c4:2b:1b:c3:14:df:8f:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440934d517c506412496b808b7df25ca0fd6455f
Validity
Not Before: Jan 1 16:05:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c4cdec3e724467abd968fd35fd0692b1d4efa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e4:53:49:02:47:66:71:65:ee:4f:e5:f8:b3:
e0:81:b3:e2:9b:f0:cc:6f:fa:e9:4a:fd:c1:2d:c1:
2d:3c:ae:0d:3e:f0:2b:aa:ab:ad:2d:95:b4:01:e8:
64:f1:47:54:58:83:30:91:b9:d5:59:88:40:9e:32:
8d:05:2c:d9:ce:5b:1b:a0:e3:21:a7:82:88:fe:82:
f4:ec:06:f6:11:1d:81:4f:95:91:00:ed:66:69:83:
43:75:67:98:fb:2f:b6:ad:a1:e7:32:3e:77:18:34:
fe:b3:3b:fe:74:8a:98:31:13:78:09:41:b2:be:d6:
50:42:c7:32:25:fe:25:03:2e:42:ed:3a:56:a1:5e:
b9:14:23:de:b1:63:ca:f7:73:00:06:82:b3:80:29:
48:e5:83:1c:3e:45:77:1d:0f:a0:e5:be:15:7f:27:
dc:f2:5e:38:fb:5c:1c:6b:4e:77:15:59:f6:50:ca:
55:12:1b:94:ec:c1:93:8e:e2:a1:fc:7d:33:4c:e9:
c4:22:93:14:5b:61:b1:9f:37:ed:eb:4a:4d:59:00:
1e:0b:56:7e:b8:57:cd:af:4d:d6:9b:53:c7:9d:18:
c8:b2:e7:5c:26:43:9c:bc:4e:e3:99:0d:05:3c:44:
62:f1:e2:f6:24:8a:bc:15:d7:c1:1e:a2:ab:c4:16:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:CD:EC:3E:72:44:67:AB:D9:68:FD:35:FD:06:92:B1:D4:EF:A5
X509v3 Authority Key Identifier:
keyid:44:09:34:D5:17:C5:06:41:24:96:B8:08:B7:DF:25:CA:0F:D6:45:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RAk01RfFBkEklrgIt98lyg_WRV8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/FcTN7D5yRGer2Wj9Nf0GkrHU76U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/01b725-9eac-4241-b1ed-da413bff046b/1/RAk01RfFBkEklrgIt98lyg_WRV8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.146.0.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:54:17:46:63:81:e0:64:03:96:32:e7:2d:7f:8e:cb:ea:04:
f7:7c:23:4d:40:1a:24:8c:dd:a9:ea:17:03:34:b8:2f:28:89:
fd:80:74:cd:88:72:19:9a:fe:3f:e7:14:77:44:eb:9e:36:82:
c9:87:a0:18:e8:69:80:61:15:09:a1:42:c0:80:67:96:65:50:
bd:79:22:02:00:72:1f:9a:d6:12:03:b1:aa:d5:4f:26:62:20:
da:ee:7e:e9:23:66:7b:cc:15:a3:3d:ca:ca:bf:f5:79:c5:da:
40:0d:7e:15:a3:5a:ef:96:b4:c1:87:18:48:74:dc:ab:f4:9b:
bb:07:d0:68:ea:d3:26:11:00:1c:ca:66:be:4b:e3:22:ae:23:
22:31:f4:9e:e8:a7:34:4e:d3:65:4a:aa:ed:41:b3:e7:32:12:
f0:04:d5:5f:16:36:ef:78:ee:9f:22:ff:20:51:31:f2:64:19:
5a:b4:64:fc:18:eb:a5:ea:b1:57:24:bb:14:bb:19:f7:a9:31:
0f:08:04:40:90:19:3b:cf:80:f3:0a:18:07:38:27:b6:62:d9:
b4:c8:30:65:0a:88:7a:9f:68:8e:4d:e1:c9:f8:ba:c2:e0:32:
18:9a:b7:53:16:8e:1b:46:48:21:8d:fd:2d:60:e6:65:4e:a7:
8c:75:ad:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:33 2024 by rpki-client on console-fra.rpki-client.org