Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fxP6-qByNjqtP_7ERUcqq47D7Kk.roa
File: fxP6-qByNjqtP_7ERUcqq47D7Kk.roa (raw, json)
Hash identifier: CNf4fmooATt9mOq7RxFLY1vTz5MV3tSyuVC2e8NqhOg=
Subject key identifier: 7F:13:FA:FA:A0:72:36:3A:AD:3F:FE:C4:45:47:2A:AB:8E:C3:EC:A9
Certificate issuer: /CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Certificate serial: 0186191802FBF42C55E6059D23A37F41ECE9
Authority key identifier: 44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fxP6-qByNjqtP_7ERUcqq47D7Kk.roa
Signing time: Fri 03 Feb 2023 21:04:09 +0000
ROA not before: Fri 03 Feb 2023 21:04:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.127.164.0/23 maxlen: 23
2.58.66.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:19:18:02:fb:f4:2c:55:e6:05:9d:23:a3:7f:41:ec:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4474cf3e2fa892b5fdd3f30dc8275ee1062e1d06
Validity
Not Before: Feb 3 21:04:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f13fafaa072363aad3ffec445472aab8ec3eca9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e2:5b:6a:d8:fd:87:97:f4:63:b0:ca:44:f5:
6e:de:9b:4c:d3:52:39:6b:52:fb:d7:03:24:a5:2a:
6b:ef:aa:bb:52:c6:93:7f:3d:db:00:35:ed:df:ef:
47:e4:fa:38:2d:bb:87:31:1b:8d:de:e4:89:4a:0f:
3e:92:27:a1:6b:ae:9b:0e:47:4f:b6:25:a5:a4:96:
39:bb:b6:f9:96:86:b1:ff:2a:67:81:15:1f:aa:67:
63:c7:f0:bb:6a:0a:f9:ab:1f:8e:1f:9a:f4:54:c4:
02:b5:00:11:b9:cc:9b:c2:32:7b:e4:32:5d:20:30:
39:90:30:ad:c2:1f:40:07:43:67:74:e0:0c:ab:07:
a7:17:fe:74:d6:8e:b9:57:9c:68:1c:c4:08:74:6f:
23:b6:28:c1:08:77:36:eb:a4:5a:f7:fd:02:aa:ef:
99:c7:e4:9a:fc:7a:65:22:75:60:96:37:d8:d2:dc:
e3:ae:e2:95:30:d6:c4:0a:3a:0b:23:ee:3d:9d:02:
81:a8:d4:2b:9f:14:f5:da:c8:b1:43:74:ec:21:88:
cf:ac:4e:a3:00:36:91:a2:73:1f:d9:67:62:f5:69:
fa:ea:66:53:23:d6:64:cb:f1:73:29:cd:f4:a5:9e:
37:6b:88:57:22:0e:b2:df:f2:6f:a9:94:de:8d:94:
b6:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:13:FA:FA:A0:72:36:3A:AD:3F:FE:C4:45:47:2A:AB:8E:C3:EC:A9
X509v3 Authority Key Identifier:
keyid:44:74:CF:3E:2F:A8:92:B5:FD:D3:F3:0D:C8:27:5E:E1:06:2E:1D:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RHTPPi-okrX90_MNyCde4QYuHQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/fxP6-qByNjqtP_7ERUcqq47D7Kk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e20ba1-6ae8-4b43-a709-7545c04e1578/1/RHTPPi-okrX90_MNyCde4QYuHQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.66.0/23
185.127.164.0/23
Signature Algorithm: sha256WithRSAEncryption
bc:e3:c3:7a:4d:1e:80:b1:73:c8:ad:8c:85:10:d8:74:2d:57:
80:96:82:e9:2b:d6:68:9f:ca:2f:b3:2f:9c:c0:21:f1:d3:56:
ad:db:49:74:49:d6:41:67:87:fe:53:be:f8:8d:47:39:c3:00:
74:4c:41:ad:e6:63:61:4c:9d:aa:d6:7e:c6:eb:b5:9c:e3:0c:
cb:aa:5d:3f:e8:c0:82:d5:c3:9b:f5:7d:75:84:08:4d:df:1b:
e8:7e:62:68:34:30:88:c3:48:b0:22:c3:f3:a7:c6:e0:a6:3f:
03:30:65:76:b4:23:47:97:e1:fd:6a:81:93:e6:77:97:89:2a:
38:b7:d2:f2:39:ba:76:8c:27:4b:24:1e:14:f5:94:d0:0d:5d:
7e:9c:fd:e1:d2:ee:0b:ef:0b:30:8f:cb:46:12:01:98:4e:fa:
90:2e:cc:25:d9:32:9c:74:23:15:80:19:8b:18:a0:93:18:ca:
53:cd:cf:8c:d1:c0:72:39:d3:0b:98:6e:de:89:45:3d:b2:16:
07:86:6b:29:e3:0e:66:64:e0:06:bb:e1:25:9d:87:9d:fd:24:
ec:7d:63:b2:2c:a3:ae:bb:e0:0a:9b:c9:a3:52:c3:07:d7:d8:
80:93:26:50:c0:b8:08:b1:2a:ed:20:e8:3c:86:ea:a1:6f:72:
6e:3c:bc:5e
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAYYZGAL79CxV5gWdI6N/QezpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0NzRjZjNlMmZhODkyYjVmZGQzZjMwZGM4Mjc1ZWUxMDYy
ZTFkMDYwHhcNMjMwMjAzMjEwNDA5WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg3ZjEzZmFmYWEwNzIzNjNhYWQzZmZlYzQ0NTQ3MmFhYjhlYzNlY2E5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuJbatj9h5f0Y7DKRPVu3ptM01I5
a1L71wMkpSpr76q7UsaTfz3bADXt3+9H5Po4LbuHMRuN3uSJSg8+kieha66bDkdP
tiWlpJY5u7b5loax/ypngRUfqmdjx/C7agr5qx+OH5r0VMQCtQARucybwjJ75DJd
IDA5kDCtwh9AB0NndOAMqwenF/501o65V5xoHMQIdG8jtijBCHc266Ra9/0Cqu+Z
x+Sa/HplInVgljfY0tzjruKVMNbECjoLI+49nQKBqNQrnxT12sixQ3TsIYjPrE6j
ADaRonMf2Wdi9Wn66mZTI9Zky/FzKc30pZ43a4hXIg6y3/JvqZTejZS2WwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFH8T+vqgcjY6rT/+xEVHKquOw+ypMB8GA1UdIwQY
MBaAFER0zz4vqJK1/dPzDcgnXuEGLh0GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDkt
NzU0NWMwNGUxNTc4LzEvZnhQNi1xQnlOanF0UF83RVJVY3FxNDdEN0trLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjBiYTEtNmFlOC00YjQzLWE3MDktNzU0NWMwNGUxNTc4
LzEvUkhUUFBpLW9rclg5MF9NTnlDZGU0UVl1SFFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBAjpCAwQB
uX+kMA0GCSqGSIb3DQEBCwUAA4IBAQC848N6TR6AsXPIrYyFENh0LVeAloLpK9Zo
n8ovsy+cwCHx01at20l0SdZBZ4f+U774jUc5wwB0TEGt5mNhTJ2q1n7G67Wc4wzL
ql0/6MCC1cOb9X11hAhN3xvofmJoNDCIw0iwIsPzp8bgpj8DMGV2tCNHl+H9aoGT
5neXiSo4t9LyObp2jCdLJB4U9ZTQDV1+nP3h0u4L7wswj8tGEgGYTvqQLswl2TKc
dCMVgBmLGKCTGMpTzc+M0cByOdMLmG7eiUU9shYHhmsp4w5mZOAGu+ElnYed/STs
fWOyLKOuu+AKm8mjUsMH19iAkyZQwLgIsSrtIOg8huqhb3JuPLxe
-----END CERTIFICATE-----
Generated at Thu Jul 20 00:08:23 2023 by rpki-client on console-ams.rpki-client.org