Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/pFApGDt6JUO-4MojH_aG-WuXFTY.roa
File: pFApGDt6JUO-4MojH_aG-WuXFTY.roa (raw, json)
Hash identifier: Epl+RkQaMxB3lkgw84KlaeFT4o1O7pqLiGv6oJeZuns=
Subject key identifier: A4:50:29:18:3B:7A:25:43:BE:E0:CA:23:1F:F6:86:F9:6B:97:15:36
Certificate issuer: /CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Certificate serial: 01856F94D5B4BC5EDAC96EADC3D318A4EF56
Authority key identifier: C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/pFApGDt6JUO-4MojH_aG-WuXFTY.roa
Signing time: Sun 01 Jan 2023 23:05:03 +0000
ROA not before: Sun 01 Jan 2023 23:05:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 15542
IP address blocks: 194.13.240.0/20 maxlen: 24
2001:67c:2b0c::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:d5:b4:bc:5e:da:c9:6e:ad:c3:d3:18:a4:ef:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c58afa22f98a37f6d8d0293a9b319416ec94d386
Validity
Not Before: Jan 1 23:05:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a45029183b7a2543bee0ca231ff686f96b971536
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:31:a3:97:37:56:a0:0f:28:da:4b:24:60:61:
6a:ee:6e:92:07:b5:73:91:f7:cc:a1:af:16:30:90:
7d:d7:cf:e0:2b:ae:e6:0d:ea:b1:f7:cb:b7:6b:e3:
af:ba:7e:eb:11:b7:7c:b8:f2:d4:e3:83:d5:56:22:
e1:d8:7b:fa:64:51:4b:7d:5c:cb:81:fd:29:e6:88:
eb:c8:ca:1b:12:69:11:18:80:32:70:0c:e9:5d:a6:
96:28:18:e0:f0:59:7f:f3:5f:de:4e:30:66:25:a6:
a5:e6:88:ca:7f:dd:51:82:8a:65:e5:91:d2:32:bc:
bc:db:4d:7e:c7:31:ef:7a:7e:7e:49:94:3c:7c:cb:
cb:a9:f7:79:16:9e:6b:79:bf:28:dc:50:cf:d1:ba:
ce:44:22:7f:7c:9b:12:45:2c:47:6e:f9:e7:3b:45:
e4:e5:2f:2a:15:28:73:d4:65:9a:cd:51:5c:21:39:
e4:c8:0b:a5:77:fc:19:d0:23:63:28:12:e3:57:84:
7a:ee:77:f3:41:cd:25:92:3b:c6:af:e4:40:80:00:
a4:d6:c3:24:65:dc:2a:49:f4:50:ff:80:c6:ef:01:
d0:b3:46:00:d7:6e:88:a6:13:d0:37:a1:86:d6:f3:
2a:e7:ea:50:a0:5a:85:dc:f0:ae:f3:e0:b3:3b:9a:
4a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:50:29:18:3B:7A:25:43:BE:E0:CA:23:1F:F6:86:F9:6B:97:15:36
X509v3 Authority Key Identifier:
keyid:C5:8A:FA:22:F9:8A:37:F6:D8:D0:29:3A:9B:31:94:16:EC:94:D3:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/pFApGDt6JUO-4MojH_aG-WuXFTY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/758c8a-613e-4e2a-8fe1-91228620570e/1/xYr6IvmKN_bY0Ck6mzGUFuyU04Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.13.240.0/20
IPv6:
2001:67c:2b0c::/48
Signature Algorithm: sha256WithRSAEncryption
d0:b2:0f:1f:30:aa:77:03:25:91:d6:e0:90:0b:f5:54:6c:c7:
8e:64:49:55:b4:4e:ff:29:4e:72:0c:3a:b4:81:07:8b:00:24:
29:65:7e:82:b2:ed:3e:47:76:35:25:f4:ee:23:9d:f6:1e:2a:
3a:ba:9d:d3:ed:9f:01:08:88:34:2f:87:fe:53:bd:0f:93:8b:
d9:7f:32:89:3f:e7:58:26:75:5b:90:cb:75:4b:7b:87:4f:ef:
02:c6:5e:50:d5:cd:48:2a:ed:1d:59:b4:2f:af:05:72:ac:af:
b4:40:4e:2f:1f:42:ab:b9:61:77:83:0a:8d:54:66:47:4d:f2:
af:91:3e:40:51:e2:1b:86:f4:ca:eb:0c:ba:53:5d:53:7d:23:
07:85:d3:2e:4e:a1:04:48:42:78:3a:eb:73:f3:18:9b:65:fc:
21:45:30:a1:8b:54:4d:84:c6:2a:14:58:44:5c:46:f4:e5:6a:
0e:98:c4:1a:a6:d0:1c:43:f4:cb:13:94:74:d8:de:8c:2d:17:
fe:ea:0f:3f:98:c8:95:2c:d3:bf:2a:4c:7c:0c:82:1b:e6:d1:
14:8f:5f:4e:2d:a7:b1:02:20:8e:3e:23:0b:90:b2:dc:e4:b4:
90:73:01:64:58:45:e2:ad:42:23:96:69:5d:da:3c:1d:b4:e5:
de:9c:98:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:12 2024 by rpki-client on console-fra.rpki-client.org