Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPqHVR6S895YQKzt5YsBne726k.roa
File: FYPqHVR6S895YQKzt5YsBne726k.roa (raw, json)
Hash identifier: cHZcdUhc+2FcoH2z3mDwEjcl+BXG53Kli9uhVpJC30w=
Subject key identifier: 15:83:EA:1D:54:7A:4B:CF:79:61:02:B3:B7:96:2C:06:77:BB:DB:A9
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01892F241FA0FC136032C9CD96C9DB9410EB
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPqHVR6S895YQKzt5YsBne726k.roa
Signing time: Fri 07 Jul 2023 06:57:23 +0000
ROA not before: Fri 07 Jul 2023 06:57:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 89.35.154.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:2f:24:1f:a0:fc:13:60:32:c9:cd:96:c9:db:94:10:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Jul 7 06:57:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1583ea1d547a4bcf796102b3b7962c0677bbdba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:24:10:d7:da:3a:5a:b3:6a:fe:a4:6c:fc:fa:
ff:76:aa:1f:2d:35:5b:00:ae:f6:e1:fc:55:de:56:
b3:bd:06:48:8c:2f:c2:ad:a9:f6:ef:27:16:dc:2d:
22:57:8b:c9:d5:80:d9:23:ad:32:d0:28:51:26:56:
d2:fd:a3:cf:3b:d8:08:42:44:bc:0b:5d:f7:9c:f1:
e3:37:de:b1:d5:a8:df:ff:d9:85:c1:40:89:bf:fd:
67:5c:b3:cb:66:27:52:72:ae:71:c1:43:b1:40:88:
81:81:e9:a9:1c:33:2b:1f:a8:a2:68:f2:91:78:02:
72:83:3e:a8:2f:fd:c9:a2:6b:fd:c8:25:2d:a1:ae:
2f:e8:ab:12:34:9d:06:cf:f4:93:83:7e:08:c4:ca:
bb:17:8c:b0:26:1e:63:f2:d1:f8:dc:72:b1:ce:dd:
24:47:b1:60:5d:eb:f7:e0:1c:7b:29:ea:6c:6b:fc:
73:99:da:15:f3:11:42:83:66:d8:df:fc:32:b0:94:
09:15:32:c9:d3:62:51:b2:62:2b:e1:31:e1:2a:55:
8d:31:30:79:fc:16:68:3c:6c:3f:0d:6b:c2:ce:1d:
1d:c1:e3:61:35:34:5e:f3:6e:a8:d9:1e:a0:0b:b0:
19:01:16:11:02:88:55:ff:7a:8f:8f:69:79:24:b7:
4e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:83:EA:1D:54:7A:4B:CF:79:61:02:B3:B7:96:2C:06:77:BB:DB:A9
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/FYPqHVR6S895YQKzt5YsBne726k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.154.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:28:3a:4b:ed:61:de:d5:b6:8c:11:7b:18:a4:3b:4d:9e:2d:
a0:1c:35:71:7e:6b:ff:af:b9:9d:da:04:3f:93:48:6a:08:c0:
e8:d0:ea:bb:83:2d:78:59:fd:4f:31:e9:ee:eb:27:9c:7b:37:
bc:27:5d:dc:22:18:4a:8b:8c:e3:b5:82:7b:fc:78:fa:e6:89:
fe:24:1f:0c:5a:e2:68:bc:6f:54:1c:ae:86:61:7e:27:2e:e7:
47:3a:f7:e2:a7:f4:84:ac:ee:ef:ec:60:64:83:be:57:20:5a:
5b:af:3a:98:44:5b:93:b1:54:de:0f:9f:f6:9b:65:26:64:74:
6f:aa:fb:ab:40:27:08:3f:0a:bb:b0:7a:90:08:5d:d7:75:69:
94:ca:c9:fa:63:19:52:ad:80:92:34:b4:27:07:df:cc:da:bc:
31:65:1a:74:46:fc:bc:c7:9d:b5:86:de:c3:22:c9:9c:a1:ed:
5d:62:87:f9:e7:db:2f:7b:1e:70:2e:f8:1a:09:81:c0:a7:ab:
da:ed:02:7e:d5:50:3a:c0:d0:e7:d9:23:48:32:9e:b4:87:9f:
79:81:8d:52:63:a4:32:ce:e7:d5:58:a3:62:1c:f2:44:d2:5a:
0e:20:1f:6c:8b:ab:5f:22:af:cb:f9:27:dd:ee:6a:26:47:a7:
70:a8:c4:ce
-----BEGIN CERTIFICATE-----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Generated at Fri Aug 4 05:07:54 2023 by rpki-client on console-ams.rpki-client.org