Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/FHFfhhhi2PBlpLYRkNUSay9R-bc.roa
File: FHFfhhhi2PBlpLYRkNUSay9R-bc.roa (raw, json)
Hash identifier: dY0VJlS2x4p4R6E33hpqqt1bb+0Wjavo/BrtHND4m1s=
Subject key identifier: 14:71:5F:86:18:62:D8:F0:65:A4:B6:11:90:D5:12:6B:2F:51:F9:B7
Certificate issuer: /CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Certificate serial: 018B48D6750915B0EBC80AB78E469D7BDC2C
Authority key identifier: 4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/FHFfhhhi2PBlpLYRkNUSay9R-bc.roa
Signing time: Thu 19 Oct 2023 16:48:16 +0000
ROA not before: Thu 19 Oct 2023 16:48:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47678
IP address blocks: 213.110.160.0/19 maxlen: 22
94.45.64.0/19 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:48:d6:75:09:15:b0:eb:c8:0a:b7:8e:46:9d:7b:dc:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c3789ecf67e04298c5ee44c67d8fb7f5d6d95a1
Validity
Not Before: Oct 19 16:48:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14715f861862d8f065a4b61190d5126b2f51f9b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:36:69:e5:60:45:cb:fc:b4:8d:72:ac:ec:fb:
b7:db:12:80:62:02:1a:ce:8f:95:6a:e9:49:fb:3f:
a0:ae:43:61:80:eb:75:cc:c0:15:6f:99:d1:c0:50:
2f:12:ef:cf:4f:f0:10:6f:e8:c6:b6:5e:5b:e6:30:
d3:a0:57:fa:60:0c:de:e8:1c:79:b2:69:80:1f:88:
7f:14:be:83:bf:1c:3c:02:95:ec:a2:39:fc:b2:9e:
f1:d5:53:ca:ab:1d:93:4b:bf:f6:32:c6:89:87:8c:
7b:8f:e1:bb:49:5d:39:95:a1:7f:b0:71:d3:ec:91:
0d:cd:08:50:ad:ec:a8:22:f7:14:cc:a7:9c:fc:bf:
84:51:f7:3a:ef:49:28:65:a2:ec:87:b0:c7:75:ed:
b5:b2:9a:7e:79:73:84:a2:0e:8e:a7:5d:a4:7a:1e:
ab:28:d6:fc:fb:1a:8c:9c:af:8c:a9:22:b1:a2:cd:
4f:e6:35:39:2d:b2:6f:25:de:5d:a2:f5:15:10:a8:
f9:e9:c9:fd:4c:ef:6a:69:9a:e5:5b:f3:24:d0:23:
e2:e8:cb:ad:6e:7a:a0:66:fe:87:14:51:8b:81:e9:
5b:54:d9:b3:7b:bd:dd:d1:10:f1:86:ff:91:5d:71:
ce:8b:d5:24:7e:b7:f8:1e:02:01:1c:34:e6:00:e5:
f8:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:71:5F:86:18:62:D8:F0:65:A4:B6:11:90:D5:12:6B:2F:51:F9:B7
X509v3 Authority Key Identifier:
keyid:4C:37:89:EC:F6:7E:04:29:8C:5E:E4:4C:67:D8:FB:7F:5D:6D:95:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/FHFfhhhi2PBlpLYRkNUSay9R-bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/7ed7b1-b8f3-43f3-96e3-1dc54d1c03a3/1/TDeJ7PZ-BCmMXuRMZ9j7f11tlaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.45.64.0/19
213.110.160.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:90:ca:93:65:1d:49:3b:92:d8:7d:20:56:c9:05:4f:d4:66:
dd:89:ca:b8:8e:b5:3d:05:00:e8:fd:ea:7b:52:58:69:88:b1:
ae:80:7f:2e:28:1d:5c:0f:0f:40:11:fa:8a:a3:41:03:59:a8:
5b:71:e5:49:1a:46:16:9b:f4:fa:23:54:f1:8f:57:e1:20:f2:
71:19:b4:bc:e6:49:25:bb:09:59:aa:43:99:47:d5:95:78:d8:
95:b4:96:88:54:16:61:b9:61:79:ed:74:d3:4d:79:34:d3:16:
03:4e:d6:23:33:9d:bc:26:06:1e:f8:5a:f6:4c:e0:e5:97:ab:
d9:de:a3:54:52:ad:7c:a9:10:42:59:90:19:03:99:3f:95:69:
52:f9:be:c9:5f:4a:cd:de:3f:cd:cf:c3:ec:ab:1b:4d:b7:64:
3a:7d:1c:55:8b:1c:48:53:e5:38:9f:c2:14:b5:06:d8:e2:26:
4c:fa:0d:ee:90:64:f6:69:c5:07:bf:b3:a3:64:96:0f:8e:48:
f2:cd:e8:77:1d:69:1a:41:dd:3e:38:92:bd:b9:bb:8a:c1:52:
1d:2e:94:89:02:be:d4:73:bb:b0:1f:2c:e6:f5:11:31:64:75:
51:05:a0:d7:42:95:ee:cb:0a:3b:90:83:f8:c6:df:6d:51:00:
8d:c9:71:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:22:41 2024 by rpki-client on console-ams.rpki-client.org