Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/f9oBYOsFcPke-tJjmpbJWisZ1Cs.roa
File: f9oBYOsFcPke-tJjmpbJWisZ1Cs.roa (raw, json)
Hash identifier: PH0DYiD6SalI3qviGb93/1C1tzKoitye8xetA8OJ//U=
Subject key identifier: 7F:DA:01:60:EB:05:70:F9:1E:FA:D2:63:9A:96:C9:5A:2B:19:D4:2B
Certificate issuer: /CN=b6fa40adbe936b184f844586a0f90d1230b68537
Certificate serial: 018572B42229C336DC47FC402E62BAC43BB4
Authority key identifier: B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/f9oBYOsFcPke-tJjmpbJWisZ1Cs.roa
Signing time: Mon 02 Jan 2023 13:38:05 +0000
ROA not before: Mon 02 Jan 2023 13:38:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51778
IP address blocks: 194.5.228.0/22 maxlen: 22
194.5.228.0/23 maxlen: 23
2a0c:e740::/33 maxlen: 33
Validation: Failed, certificate revoked on Mon 04 Sep 2023 09:38:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:b4:22:29:c3:36:dc:47:fc:40:2e:62:ba:c4:3b:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fa40adbe936b184f844586a0f90d1230b68537
Validity
Not Before: Jan 2 13:38:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fda0160eb0570f91efad2639a96c95a2b19d42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2d:e3:59:26:5b:ae:b3:39:a7:0c:f3:ab:34:
c0:8e:79:ad:a7:00:35:99:c8:55:78:96:4e:d6:0b:
d7:f3:e7:6c:1a:5f:c4:82:43:b4:a7:23:70:cf:6d:
0c:40:69:c0:12:30:9f:25:e2:fc:81:aa:2d:89:07:
ac:d2:fb:1c:a0:fc:20:db:b0:6b:5c:6b:f3:d0:ca:
cb:02:81:ba:d4:1a:84:ed:e4:e5:7b:a7:90:d7:87:
95:c9:53:6f:f5:88:23:90:55:43:b1:d1:49:66:78:
59:d1:be:17:43:ac:d5:cd:22:94:4e:49:11:1b:76:
dc:0a:8c:83:b3:c0:0e:08:1b:6e:c5:26:45:81:c0:
90:f1:00:b2:20:2c:ea:f3:a1:34:b6:1d:57:6c:0c:
f2:38:e3:ab:af:0c:fc:09:78:98:b5:bd:8c:e7:f7:
3f:b7:95:1a:5f:d9:6a:60:7e:f2:28:3c:f0:25:71:
f9:c1:00:48:f1:4e:31:46:41:3e:f8:f1:e5:91:a0:
bc:ca:b1:64:e3:11:78:e6:5a:ed:d2:24:33:5d:0c:
a5:a4:6b:47:db:16:25:f8:ea:32:5f:1c:f3:74:9a:
d7:42:62:bc:45:37:ee:1e:c7:48:1a:b9:1d:48:8a:
67:b5:14:56:15:29:46:7c:ba:58:0b:8d:fd:ed:04:
f9:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:DA:01:60:EB:05:70:F9:1E:FA:D2:63:9A:96:C9:5A:2B:19:D4:2B
X509v3 Authority Key Identifier:
keyid:B6:FA:40:AD:BE:93:6B:18:4F:84:45:86:A0:F9:0D:12:30:B6:85:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tvpArb6TaxhPhEWGoPkNEjC2hTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/f9oBYOsFcPke-tJjmpbJWisZ1Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/eeb1b2-e3c3-413d-a164-80d4782437ff/1/tvpArb6TaxhPhEWGoPkNEjC2hTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.5.228.0/22
IPv6:
2a0c:e740::/33
Signature Algorithm: sha256WithRSAEncryption
72:72:eb:11:37:8b:6c:da:35:27:bb:62:bb:98:5a:68:c3:b6:
49:e4:79:2d:35:18:14:ef:ef:fe:22:d7:6d:3f:24:90:c4:4c:
a4:d5:80:41:0e:84:74:ea:53:67:fa:7a:d5:cc:01:52:70:ec:
a3:cc:13:4b:bb:eb:d7:7b:59:25:0b:2f:89:b8:00:5e:01:fd:
c9:f5:ae:50:69:4b:7e:be:c9:8c:e3:03:0d:5c:ef:04:91:ab:
ae:18:71:91:ed:4c:ec:06:68:26:a4:55:0b:26:b0:84:f9:ff:
7d:e7:c3:37:2b:69:a7:ab:fc:d5:72:c0:1a:80:10:64:0c:19:
5b:15:0e:22:bc:b5:ed:87:bb:fa:c8:fd:4b:41:00:02:37:cf:
b4:d5:0e:5e:3b:eb:8b:20:43:d2:a4:13:f1:d4:e8:ba:a1:9c:
50:8a:e9:b0:28:b8:10:ca:90:18:79:8f:f0:10:1c:d8:db:40:
f4:0c:30:20:b5:c2:90:2a:aa:63:ab:88:db:b3:f4:79:e4:1f:
57:67:b6:64:3c:71:14:a1:9c:ff:ce:13:a7:8f:9a:f3:ee:5e:
3a:d0:74:16:6d:cd:e9:b8:3f:b5:97:c6:a8:c0:aa:04:91:6b:
56:19:d3:df:45:2d:df:2a:f3:7e:92:5f:ac:d9:28:d7:c0:fa:
a1:4b:56:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:51 2024 by rpki-client on console-fra.rpki-client.org