Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/gdsCJrydrhhcAIYgVILY9OLVEGs.roa
File: gdsCJrydrhhcAIYgVILY9OLVEGs.roa (raw, json)
Hash identifier: OcAQ8QXAwB2CY5aCzBZvDiUITgjWjvgXb8ginZLQtAU=
Subject key identifier: 81:DB:02:26:BC:9D:AE:18:5C:00:86:20:54:82:D8:F4:E2:D5:10:6B
Certificate issuer: /CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Certificate serial: 01856E268C95453FE25329BAA9D1BFD92E3B
Authority key identifier: FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/gdsCJrydrhhcAIYgVILY9OLVEGs.roa
Signing time: Sun 01 Jan 2023 16:24:58 +0000
ROA not before: Sun 01 Jan 2023 16:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3303
IP address blocks: 194.147.229.0/24 maxlen: 24
2001:67c:c0::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:8c:95:45:3f:e2:53:29:ba:a9:d1:bf:d9:2e:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc680ee1b27c3a6f07013c8fc25ebff0c67fb9d
Validity
Not Before: Jan 1 16:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=81db0226bc9dae185c0086205482d8f4e2d5106b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:19:6a:fb:65:03:29:0a:50:30:7e:1f:93:
bf:c7:f4:25:19:c4:9b:9b:5c:c2:c8:8a:53:70:54:
f9:b7:9a:d5:7e:68:bb:e6:7e:4c:bf:ec:c9:f2:3d:
3e:34:d5:29:1c:8f:cc:f4:24:3c:27:8e:68:bf:9b:
dc:f6:ad:2b:89:ee:f1:96:37:61:53:25:05:04:8b:
ca:a6:bd:2a:26:3d:cc:38:9e:f1:38:02:f0:bc:84:
d4:89:15:77:79:4b:d6:a6:1f:8e:7a:ec:a0:3b:a7:
2f:af:1e:42:cb:4a:de:db:a7:30:b0:05:d2:9a:26:
1b:ef:bb:18:eb:52:19:62:d4:69:88:c5:66:7d:74:
33:3c:42:56:60:9a:21:a2:8e:1a:64:39:44:c7:2d:
d5:e6:4f:33:3b:c5:a3:7f:01:04:76:bf:d7:4e:21:
09:51:86:56:66:02:90:02:0e:1c:c5:d7:a1:d2:6f:
d6:99:1d:b0:06:df:e4:6c:18:9c:e8:ce:44:84:93:
aa:d4:1e:fb:3f:9e:bd:74:19:7f:4d:7d:df:6d:b2:
96:70:0f:38:c0:14:cd:c7:99:99:bc:9a:c8:b1:86:
69:f9:0f:94:7d:5f:4f:63:62:31:1f:6c:e1:18:29:
63:4c:30:9f:5a:d1:9f:0d:ef:52:31:7e:67:e2:c4:
ff:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DB:02:26:BC:9D:AE:18:5C:00:86:20:54:82:D8:F4:E2:D5:10:6B
X509v3 Authority Key Identifier:
keyid:FD:C6:80:EE:1B:27:C3:A6:F0:70:13:C8:FC:25:EB:FF:0C:67:FB:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_caA7hsnw6bwcBPI_CXr_wxn-50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/gdsCJrydrhhcAIYgVILY9OLVEGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/a12e1c-1b10-4938-96d3-7bed26743bcc/1/_caA7hsnw6bwcBPI_CXr_wxn-50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.229.0/24
IPv6:
2001:67c:c0::/48
Signature Algorithm: sha256WithRSAEncryption
58:05:b8:4a:c1:93:34:b0:99:53:b7:db:c9:b5:bf:f0:da:19:
3f:2a:94:ef:3c:0d:56:ef:1a:a7:51:1a:ee:a7:3e:67:d4:7d:
a7:79:80:01:60:75:19:24:75:a1:72:1b:c1:d6:8e:2d:f2:71:
2a:9e:e1:8c:e9:3a:63:ca:68:d7:42:9e:4c:b0:68:27:21:fe:
51:13:d3:ec:13:e8:3b:d1:10:8c:2c:40:2e:83:f3:05:fd:5a:
dd:10:b4:a5:83:46:ff:aa:f5:43:85:ae:f1:3c:9a:fe:0e:b3:
53:e5:cb:14:78:44:79:b8:4b:85:6c:a1:67:36:d7:80:00:f5:
25:5e:97:c9:12:de:57:f5:38:a6:80:ea:37:ba:a3:2a:c7:14:
de:ba:22:ca:a3:73:83:29:c3:9b:19:1c:3c:1b:4c:b7:ff:74:
9a:f2:e8:cd:d4:1a:28:88:ba:40:1d:fb:7a:85:aa:02:ad:14:
ac:bf:7b:b5:5c:a7:f6:df:ec:1f:73:f1:23:19:1e:75:8f:b4:
ca:e6:5e:b3:d4:d3:ac:dc:ed:d6:d0:cc:60:a2:a4:eb:bc:7a:
9a:fe:74:72:33:0e:1d:1d:cd:29:5d:3b:24:03:94:95:a5:44:
87:6a:30:99:a1:9e:d7:18:1f:f5:2b:08:f5:07:c9:d9:df:d8:
b8:18:48:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:51:57 2024 by rpki-client on console-fra.rpki-client.org