Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/FuXjU3s4hsnuNQCw20P_LeZGVSE.roa
File: FuXjU3s4hsnuNQCw20P_LeZGVSE.roa (raw, json)
Hash identifier: vhKn1qToxBMvki5k0AmqQ/RTZzCZqOmBgwrpEK6RAnU=
Subject key identifier: 16:E5:E3:53:7B:38:86:C9:EE:35:00:B0:DB:43:FF:2D:E6:46:55:21
Certificate issuer: /CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Certificate serial: 018C6D2FEBF638DDB43398275DB4D0DCBE28
Authority key identifier: 3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/FuXjU3s4hsnuNQCw20P_LeZGVSE.roa
Signing time: Fri 15 Dec 2023 11:15:06 +0000
ROA not before: Fri 15 Dec 2023 11:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 14445
IP address blocks: 80.73.247.0/24 maxlen: 24
164.152.216.0/24 maxlen: 24
2a11:1680::/48 maxlen: 48
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:6d:2f:eb:f6:38:dd:b4:33:98:27:5d:b4:d0:dc:be:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d92bc045ab9cc9f017e8bf7ffe423da804a614f
Validity
Not Before: Dec 15 11:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16e5e3537b3886c9ee3500b0db43ff2de6465521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:8e:94:7c:99:59:68:0e:09:64:28:ca:43:
a6:00:e7:8a:fe:21:44:83:9e:6b:5e:f3:9d:54:38:
41:b5:83:5b:a2:fd:a6:58:73:c4:b8:69:d2:2b:f0:
f0:07:ba:f0:f9:13:58:e6:d7:43:db:93:9e:d3:f6:
f2:dd:bf:8e:a0:65:da:10:bc:cc:34:cd:70:49:b8:
8c:56:ea:87:81:3f:2b:ed:97:20:48:e0:56:17:c0:
09:f0:af:66:28:3b:0a:dc:96:a4:ad:47:d6:de:08:
0a:4e:5a:75:6f:55:35:ec:fc:de:c3:87:87:85:06:
c6:60:1f:d0:f7:4b:05:9c:a0:d7:19:75:95:13:88:
10:21:b6:8a:2a:e2:16:25:f1:ad:b7:fd:a5:5d:c9:
55:ed:37:dc:32:bb:df:9a:9e:f8:4e:cd:50:68:2d:
13:44:5c:d8:96:ee:43:e4:51:c9:e6:b0:c2:c6:a2:
3c:5e:6d:6b:05:e7:cf:1e:1b:9f:e6:34:03:b6:3d:
ce:42:be:cf:f8:7f:8c:6f:63:ed:61:14:ee:69:3c:
f9:a2:be:7a:d3:47:7d:b2:8d:3b:a0:84:5d:44:a7:
07:75:28:81:a1:2e:f2:cd:f1:31:8f:39:a6:51:eb:
23:36:5b:3e:a5:07:32:b8:f3:37:db:fd:b3:0e:0a:
18:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E5:E3:53:7B:38:86:C9:EE:35:00:B0:DB:43:FF:2D:E6:46:55:21
X509v3 Authority Key Identifier:
keyid:3D:92:BC:04:5A:B9:CC:9F:01:7E:8B:F7:FF:E4:23:DA:80:4A:61:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/FuXjU3s4hsnuNQCw20P_LeZGVSE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/3626dc-221f-4b9a-bb68-3e3812ffa147/1/PZK8BFq5zJ8Bfov3_-Qj2oBKYU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.73.247.0/24
164.152.216.0/24
IPv6:
2a11:1680::/48
Signature Algorithm: sha256WithRSAEncryption
9a:1a:81:fb:9c:3c:97:05:e0:41:5f:17:59:60:84:4d:17:da:
2e:85:b7:bc:d7:e9:90:4f:37:3c:a9:2e:43:ac:78:28:58:7c:
11:6f:99:ca:b5:66:82:c2:09:f7:5a:88:a3:3d:7a:22:a5:d3:
d8:9b:fc:b2:f4:84:c7:19:f5:36:ff:7b:d9:e3:cb:70:a1:7e:
21:8d:0b:1f:e1:5f:ac:07:f2:45:81:32:4a:d5:2d:47:29:3f:
d7:fe:f5:2f:51:c3:c9:03:8e:5c:3f:51:62:c9:dc:44:7c:ad:
11:6e:60:aa:92:5f:9c:7e:c4:24:b5:c0:af:f1:ba:8c:d9:e3:
f0:96:1c:8c:01:3f:f7:ed:fc:44:4c:ba:39:9f:aa:d9:3a:6c:
ad:33:fb:62:dd:6f:76:c8:bf:1c:e5:de:99:05:f5:1c:a2:fa:
3f:06:b1:09:74:10:83:5a:6f:42:79:ef:22:fc:2e:05:9d:f7:
d1:7b:71:48:5c:7f:0c:ed:f0:c8:5b:50:80:17:a9:44:68:82:
2e:92:5d:cc:30:41:11:01:16:5e:08:ca:5a:c8:ec:d3:50:24:
f2:c0:78:24:28:27:63:1e:77:6d:c2:c2:24:82:cb:9b:d5:54:
f4:8c:59:6f:20:f2:98:44:f5:45:99:d7:9f:99:78:3f:e2:29:
66:f0:64:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 11:40:19 2024 by rpki-client on console-fra.rpki-client.org