Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fjrK5iKDbvfVh26C5019voA2i0U.roa
File: fjrK5iKDbvfVh26C5019voA2i0U.roa (raw, json)
Hash identifier: 9zmAGkACzCvoYTFvTAsvpbI9wZLhWsZRjoGumM/zmHI=
Subject key identifier: 7E:3A:CA:E6:22:83:6E:F7:D5:87:6E:82:E7:4D:7D:BE:80:36:8B:45
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 01856C53EF316FD30ED7A2C0E1902C65BFC9
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fjrK5iKDbvfVh26C5019voA2i0U.roa
Signing time: Sun 01 Jan 2023 07:55:18 +0000
ROA not before: Sun 01 Jan 2023 07:55:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41653
IP address blocks: 185.119.254.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ef:31:6f:d3:0e:d7:a2:c0:e1:90:2c:65:bf:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: Jan 1 07:55:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3acae622836ef7d5876e82e74d7dbe80368b45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:6b:62:3e:f1:61:56:4d:4f:b5:31:14:84:5b:
2f:95:3a:2c:94:06:56:6a:53:b8:0c:7e:61:d7:94:
d6:ae:6b:95:0c:45:ac:73:94:d9:d7:5a:87:78:d9:
d1:92:8c:17:8a:d9:3f:31:d1:58:82:b4:db:7b:a9:
c4:de:a2:0e:a1:64:15:dc:e0:8f:db:c1:0d:00:61:
69:b3:49:31:14:79:db:1f:e3:38:1a:19:2c:fe:f2:
fa:0a:3a:8f:d2:98:ea:f6:2a:47:e0:d8:da:8e:33:
1f:26:e0:f6:15:30:d2:0f:2b:71:4f:a8:a0:5a:8e:
44:36:1a:8b:7e:a0:96:ab:b3:95:b1:5d:9b:1e:9e:
52:b7:b8:d0:f6:e6:23:bb:3d:19:24:e3:ce:da:b7:
a0:ad:10:cc:7d:c9:ce:3d:7c:3f:c0:ff:30:18:44:
d5:d2:58:d9:7a:c1:8d:97:c5:33:44:98:c3:13:7f:
49:ee:a7:27:db:b4:99:a2:41:4b:04:af:6d:3e:ef:
4b:aa:1d:4b:c0:54:e8:e7:3a:1d:43:60:71:0a:bc:
62:de:c9:a5:b1:80:bb:16:0e:fd:09:d4:be:7a:57:
41:d0:04:c2:92:2d:36:05:49:1c:81:bb:31:6d:18:
6e:91:39:fb:d5:e6:66:b1:59:81:98:c0:1b:ca:87:
2f:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3A:CA:E6:22:83:6E:F7:D5:87:6E:82:E7:4D:7D:BE:80:36:8B:45
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/fjrK5iKDbvfVh26C5019voA2i0U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.254.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:91:39:95:5b:bb:69:e0:c7:27:24:62:3e:cf:d7:f4:02:95:
7b:08:4d:f0:c2:62:ca:fb:84:ab:6e:e6:21:ca:aa:c5:b8:77:
9a:42:c7:9e:6d:e9:f8:17:04:e0:61:28:46:f1:67:d9:7b:90:
a0:9e:c8:77:cb:a5:2a:a5:a8:03:bd:81:be:60:68:b0:cc:38:
82:18:dd:cb:b2:df:55:0b:3e:a1:54:47:b8:99:2a:6c:94:02:
69:5a:84:28:0f:91:04:76:3f:19:c8:04:40:04:e1:76:78:97:
79:72:43:3e:35:7f:9d:fa:15:2d:9a:90:20:c5:4f:d7:e0:f2:
f8:b5:8a:2b:fa:f5:d5:d5:6c:b8:34:8c:10:cd:85:09:1b:91:
06:6a:12:70:7b:fa:8e:44:05:e2:72:10:dc:32:89:23:d8:f5:
f5:8d:a1:fc:71:03:5c:2a:10:b1:fc:fc:fc:b8:61:b1:95:26:
b5:5d:83:91:ea:4b:6b:97:03:1c:59:70:d9:49:5c:97:25:88:
5f:83:83:f9:74:eb:43:ef:45:73:b9:20:af:40:cc:18:f8:e1:
fd:1f:4a:1e:37:e9:cf:86:97:1a:29:35:8b:f0:6d:64:2c:fc:
ab:f1:07:8f:43:83:ef:e4:a3:22:24:66:ce:84:01:9b:a2:3b:
bd:89:d7:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:00 2024 by rpki-client on console-ams.rpki-client.org