Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fcvsNTCkWI0MqzRthoB-Sl772r8.roa
File: fcvsNTCkWI0MqzRthoB-Sl772r8.roa (raw, json)
Hash identifier: mFzfIq/DWK1Bx360wRX8gm8I6uADyNtogEciuyFP9qI=
Subject key identifier: 7D:CB:EC:35:30:A4:58:8D:0C:AB:34:6D:86:80:7E:4A:5E:FB:DA:BF
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCAE19300036780DA54EF709B20577E
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fcvsNTCkWI0MqzRthoB-Sl772r8.roa
Signing time: Sun 01 Jan 2023 10:05:13 +0000
ROA not before: Sun 01 Jan 2023 10:05:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 33980
IP address blocks: 192.165.72.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ca:e1:93:00:03:67:80:da:54:ef:70:9b:20:57:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dcbec3530a4588d0cab346d86807e4a5efbdabf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:cf:83:c8:e1:51:a4:4e:ce:55:4e:fe:7d:f0:
0a:a3:1b:5e:65:e3:f6:1e:af:0b:b1:6c:2b:0a:e0:
ad:59:d4:cf:6a:d8:5a:f2:51:c2:11:3d:75:38:27:
ea:1e:fe:59:7d:fd:55:5f:b1:de:3e:26:25:5e:b5:
a7:7a:13:17:e6:09:c9:f6:12:02:50:29:32:a3:a4:
c5:57:8b:b0:3c:fe:97:6f:9c:a7:f2:f3:c6:71:b7:
4a:cd:e5:3a:b3:af:a2:0d:67:17:f6:5c:80:29:b0:
21:30:ea:0d:1b:56:0f:8f:94:f8:d7:ef:b0:7b:37:
75:4a:c2:fe:46:cc:a2:60:48:89:a3:4a:2d:57:09:
d2:34:89:06:83:57:1c:30:a6:71:98:9e:14:d3:51:
a6:dd:22:f4:28:80:bd:bf:d7:da:0d:de:e9:23:b6:
aa:1d:19:04:2a:51:52:a9:9c:21:f6:39:7e:9b:1f:
78:6d:53:6c:28:f6:b8:5e:a0:63:60:e8:92:27:94:
03:89:01:77:68:9e:ad:d2:a1:6f:9a:72:fd:58:91:
5f:a2:27:da:5b:24:67:f2:c1:ad:b3:f2:d3:54:40:
a5:42:69:40:e2:9d:b0:72:a1:b6:1c:83:d4:f7:3f:
60:51:82:52:38:72:04:14:8b:eb:84:ed:92:b3:e0:
2c:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:EC:35:30:A4:58:8D:0C:AB:34:6D:86:80:7E:4A:5E:FB:DA:BF
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fcvsNTCkWI0MqzRthoB-Sl772r8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.165.72.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:54:49:80:9a:ae:94:32:24:c9:2a:76:94:32:e3:a4:a4:60:
61:27:21:b4:3d:db:cf:e4:80:09:22:8a:4b:ba:5e:3d:b0:b7:
a0:81:ea:e4:57:91:70:11:0a:55:38:24:70:3e:69:c5:81:57:
9b:81:7c:ce:70:dd:30:8d:8f:07:f4:4d:1f:37:70:a1:45:20:
90:ab:b7:8c:7a:d4:86:d0:66:17:5d:99:2e:8b:c8:c2:b2:29:
80:c6:0f:aa:1b:d6:6b:27:08:75:5d:31:04:ce:7d:0e:ff:c2:
b4:f6:9b:74:21:3e:a0:39:9f:be:12:38:0e:06:c1:2e:e2:59:
7b:2b:d1:97:c0:80:fb:0a:1d:c2:ec:ad:68:fa:90:74:41:cd:
da:64:64:03:04:e6:66:2a:9e:55:50:2e:d7:d9:90:a7:bc:40:
85:e4:15:8f:ad:64:fc:d9:6d:b8:8d:8d:f5:4e:7b:e2:46:fa:
ca:8c:d7:a5:80:f1:33:65:be:5f:c2:84:de:c3:4d:36:6d:3a:
ca:9f:8b:95:d0:96:06:1f:87:28:d9:dd:f7:c4:25:32:72:ec:
53:b7:ab:e8:e2:da:d9:f1:62:6e:e2:df:2f:5c:4e:66:c4:f7:
8a:9d:d0:0d:92:d2:b4:f0:a8:8a:7d:59:f3:9f:66:2d:e7:02:
0c:60:fa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:52:53 2024 by rpki-client on console-fra.rpki-client.org