Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPc3AVwwt6URrANTL3ZLRMRz1Y.roa
File: FYPc3AVwwt6URrANTL3ZLRMRz1Y.roa (raw, json)
Hash identifier: mdilKducWEAtvJ09z0NI60oHA4w91r8/TqINWMcgzuw=
Subject key identifier: 15:83:DC:DC:05:70:C2:DE:94:46:B0:0D:4C:BD:D9:2D:13:11:CF:56
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 0185CD561234B2B0DAF5E716A8EB460A8FE2
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPc3AVwwt6URrANTL3ZLRMRz1Y.roa
Signing time: Fri 20 Jan 2023 04:00:47 +0000
ROA not before: Fri 20 Jan 2023 04:00:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 194.5.85.0/24 maxlen: 24
193.19.108.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:cd:56:12:34:b2:b0:da:f5:e7:16:a8:eb:46:0a:8f:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jan 20 04:00:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1583dcdc0570c2de9446b00d4cbdd92d1311cf56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:f1:7c:03:4a:4a:03:67:6b:ad:5c:a6:18:60:
b8:bf:88:14:e0:6c:a0:e8:c3:69:7d:6d:6c:7b:89:
87:df:fd:4b:70:33:24:26:39:ff:8a:f1:7d:d6:2e:
38:b7:21:02:8b:fa:24:72:22:5f:43:6d:62:29:e6:
14:50:5d:04:71:d1:59:24:b2:7f:99:29:58:02:44:
05:27:ba:4e:76:71:2b:65:c1:3c:f9:29:ef:20:3c:
f8:3b:ec:cf:28:56:b1:87:2a:03:7c:de:a4:71:e5:
30:bb:21:99:37:f6:ac:b4:56:7f:d4:1f:b1:01:6d:
80:0d:4f:24:9c:e7:06:87:b7:d7:4a:81:bf:f9:d3:
51:b9:83:ed:51:90:d0:76:23:99:53:1d:1f:29:48:
36:a2:90:8c:ce:f4:dd:a8:81:77:7b:36:7d:a9:be:
e3:66:dd:0d:d3:9a:83:a3:5b:28:0e:2a:e4:ee:f9:
d7:b0:b5:12:96:cf:53:a2:e8:9d:45:4e:31:1d:9f:
be:50:d8:5a:df:65:35:bd:29:b1:5e:a7:86:4f:b2:
f5:7f:eb:83:a3:ca:09:e7:d1:a7:9d:9d:a1:53:23:
fc:d7:2e:d0:24:b1:a1:3b:0d:21:6b:55:31:6b:5e:
1b:e9:57:09:89:cb:92:0d:de:02:f0:db:0f:9d:64:
6b:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:DC:DC:05:70:C2:DE:94:46:B0:0D:4C:BD:D9:2D:13:11:CF:56
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPc3AVwwt6URrANTL3ZLRMRz1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.19.108.0/24
194.5.85.0/24
Signature Algorithm: sha256WithRSAEncryption
87:a4:d8:9a:8b:7f:1a:10:38:82:fe:23:87:f1:54:71:8c:b0:
4f:06:63:52:3b:34:08:c9:48:69:a1:77:89:de:0e:c8:9d:0b:
ae:8d:b9:db:75:8d:db:41:ee:58:9b:5e:e6:27:fb:ce:b1:58:
47:03:4e:67:b8:80:7e:f6:78:2c:6a:67:7c:65:02:d6:8a:a7:
e8:c3:b1:32:17:cc:b7:a5:00:e9:67:16:45:f1:89:89:61:7a:
46:46:67:1d:c6:6e:97:e7:5c:be:ec:c7:b6:91:96:f3:26:a3:
9c:c9:af:6c:8f:30:44:b3:aa:3e:72:fc:ea:b3:f5:f3:7a:59:
3e:58:6d:cb:52:f9:3d:82:7a:5a:03:51:1e:9d:ad:17:0b:47:
21:52:d2:2c:a9:67:75:36:4b:92:43:80:af:f9:dd:5f:78:7b:
fe:8c:d8:cf:a2:59:fc:79:b4:cf:65:73:b7:e9:7e:e7:9f:95:
28:b9:0e:f8:3f:d9:76:35:d0:05:65:9f:15:1f:63:89:bf:9c:
50:c3:82:1f:85:9c:a2:bf:2c:ea:59:a5:9b:68:32:60:61:27:
7f:cb:1f:26:ce:47:d8:8d:fa:44:17:c9:ac:4b:4d:a8:6f:cf:
f4:a9:47:38:7f:19:f2:c3:84:1f:cb:1b:47:2c:a4:33:6e:02:
71:d2:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:54 2023 by rpki-client on console-ams.rpki-client.org