Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F2TuDNC8ba1cLz0eM27m5kFeXrY.roa
File: F2TuDNC8ba1cLz0eM27m5kFeXrY.roa (raw, json)
Hash identifier: ffXc4WfXS9he4nmcU2LQM5T1WMpvGcfXIKcoZtZy7IU=
Subject key identifier: 17:64:EE:0C:D0:BC:6D:AD:5C:2F:3D:1E:33:6E:E6:E6:41:5E:5E:B6
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAEAE02A52465B94AF9BD7D30CAC17
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F2TuDNC8ba1cLz0eM27m5kFeXrY.roa
Signing time: Sun 01 Jan 2023 10:05:15 +0000
ROA not before: Sun 01 Jan 2023 10:05:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43289
IP address blocks: 192.121.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:ea:e0:2a:52:46:5b:94:af:9b:d7:d3:0c:ac:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1764ee0cd0bc6dad5c2f3d1e336ee6e6415e5eb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:65:31:4f:2c:e1:1d:b3:ff:02:b0:f2:3d:f3:
ac:4e:8d:f4:84:d6:aa:05:b3:5b:f5:29:b8:f8:dc:
22:5c:b5:f6:10:ef:f3:bc:c7:2b:86:14:9f:ff:c8:
85:d7:0b:af:5e:09:31:63:ca:f7:ca:e4:59:75:18:
86:4c:88:71:9d:32:41:09:cc:05:4a:6d:01:5f:79:
43:6b:85:f8:90:75:d3:56:c5:5a:b2:2a:f2:97:3b:
f3:ff:f2:6b:75:c9:ac:40:eb:e6:d4:58:f6:d6:ca:
58:49:50:05:46:5a:33:31:8f:ff:30:be:ae:68:0c:
f0:f7:6e:40:14:0b:b0:7c:52:99:41:a7:0e:a2:93:
01:6b:d6:ca:f7:83:30:f0:ad:aa:e0:3c:90:2f:80:
6b:67:90:30:45:ef:9e:9b:20:09:31:06:0c:d1:2f:
31:b7:c4:18:de:f1:89:64:d8:51:78:9d:9b:d3:35:
54:a8:36:8e:7e:c3:b0:0c:f1:96:96:b7:42:77:84:
76:bf:f4:cc:23:5b:cd:e3:a7:f5:e4:e8:1e:b3:69:
c9:41:f6:d6:6c:72:2d:f3:33:6e:92:5c:a6:6f:ba:
f2:2b:e2:29:e1:a9:f3:52:0f:d1:83:20:64:0d:b2:
9f:de:b5:b8:74:37:22:3b:b9:d0:5e:b2:a3:82:e6:
7d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:64:EE:0C:D0:BC:6D:AD:5C:2F:3D:1E:33:6E:E6:E6:41:5E:5E:B6
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/F2TuDNC8ba1cLz0eM27m5kFeXrY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.121.87.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:78:76:c2:bd:32:3f:b2:de:ef:cd:96:42:e3:0a:a8:46:d2:
d3:ce:c6:71:fd:98:f4:31:1d:b8:86:eb:0f:a0:66:e3:ec:ba:
76:95:71:5a:12:f7:b8:56:8e:73:c5:b8:ad:f8:28:4d:94:67:
8e:8e:a9:66:d2:f2:bb:ec:17:3a:19:8a:92:0b:d4:0e:13:97:
6d:bb:ee:25:a6:42:4f:fa:90:d7:04:20:66:72:2e:ab:5b:d3:
ca:10:71:05:6c:cf:08:ee:a8:e1:d9:fc:f8:b1:48:57:a7:0b:
70:0c:a6:18:89:01:c8:2b:dc:c5:5c:3c:b0:9a:e1:ba:cd:8e:
9c:5e:ad:80:08:71:12:16:32:38:d6:ce:84:bc:5e:77:d9:ed:
31:b4:f3:ce:94:b4:b5:8d:fa:8a:c3:7a:52:db:52:0a:1b:05:
95:fa:a3:1e:84:45:b4:5f:27:f8:3a:c5:51:6a:3e:2f:62:0f:
ee:c5:e7:bb:1e:67:35:e4:29:60:55:90:b7:77:a8:60:c6:ea:
d6:66:84:ab:39:98:48:fa:26:ec:f6:77:a5:f5:db:d6:16:db:
5e:b9:90:1d:a6:91:a1:bc:e0:87:cd:37:8e:4f:e0:10:16:ed:
e9:db:c5:51:d3:ec:c3:6d:d5:9f:3e:46:90:85:b5:ec:6c:0a:
6a:3a:e6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org