Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ffuWwPdHq505n61_YnsDJMmJq6o.roa
File: ffuWwPdHq505n61_YnsDJMmJq6o.roa (raw, json)
Hash identifier: IQRWx6gTOlluU3t/sNgvGGQjpta5XTFBbCgCNLo76l4=
Subject key identifier: 7D:FB:96:C0:F7:47:AB:9D:39:9F:AD:7F:62:7B:03:24:C9:89:AB:AA
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 01856CCB0F2BBB058402C8E717DDD2390534
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ffuWwPdHq505n61_YnsDJMmJq6o.roa
Signing time: Sun 01 Jan 2023 10:05:25 +0000
ROA not before: Sun 01 Jan 2023 10:05:25 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208822
IP address blocks: 194.68.172.0/24 maxlen: 24
194.103.196.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:cb:0f:2b:bb:05:84:02:c8:e7:17:dd:d2:39:05:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Jan 1 10:05:25 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dfb96c0f747ab9d399fad7f627b0324c989abaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:b8:c3:44:a1:9e:6b:5e:81:de:20:6b:4f:
45:5e:91:fe:27:78:86:22:19:fc:d9:7e:b9:0e:49:
73:f9:1c:24:90:96:60:93:11:89:25:33:2a:8c:4c:
f2:c0:aa:0c:5e:61:53:17:35:c3:9f:7b:35:8a:37:
c8:15:c2:68:71:7c:c1:b1:eb:73:1f:ba:1a:90:4c:
48:f8:f9:e7:2c:bd:d6:c2:8f:46:f1:78:18:6f:2f:
fc:42:a7:c2:31:85:05:d7:31:80:2f:59:57:c8:a1:
17:d8:96:96:27:5b:52:f0:ae:83:b4:b5:98:a4:80:
f3:bf:b6:d7:11:a0:12:2f:35:67:67:64:e3:ad:9b:
0c:44:eb:48:f2:ad:0c:05:e9:82:7a:ef:f1:8a:e5:
77:9e:e3:4a:9e:e6:54:0e:07:52:99:2e:d2:8d:eb:
16:23:98:b4:5b:c1:40:69:ec:4e:4e:3b:ca:59:a5:
86:32:45:6d:1c:ff:36:7a:2c:5b:55:b0:11:e4:3d:
c3:d2:0f:95:19:dd:e7:e6:20:c8:b5:f2:88:a1:90:
60:f1:94:a3:15:fe:91:3e:95:ef:1b:22:88:6b:27:
32:06:86:8c:c7:3a:8a:4e:1d:b1:6d:bb:89:55:0f:
49:df:ed:fe:7a:b0:a2:dc:b5:cc:9b:b5:12:03:b4:
4d:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:FB:96:C0:F7:47:AB:9D:39:9F:AD:7F:62:7B:03:24:C9:89:AB:AA
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ffuWwPdHq505n61_YnsDJMmJq6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.68.172.0/24
194.103.196.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:0f:f3:f4:d1:14:8a:4c:31:27:63:56:8b:e5:42:66:d5:71:
2f:2a:02:ad:72:bd:88:43:c0:82:29:ae:a1:97:61:50:43:f7:
e0:4a:cb:c4:7f:5c:5d:12:d3:b5:2d:16:7d:de:37:1e:de:24:
62:a2:f8:a1:15:87:70:d9:1a:03:50:b1:a6:48:93:fe:a3:96:
03:22:de:a8:21:8e:7f:e6:c4:1e:98:1f:d0:df:da:69:ce:49:
ba:62:e2:d6:4e:0c:b1:a1:07:38:b5:94:0e:46:02:95:d4:36:
d5:e3:f0:05:32:df:27:ba:20:2c:bb:bd:e0:e4:25:e4:c5:e3:
43:7c:3a:3d:bb:be:eb:b0:2b:b1:d5:f3:d1:21:e3:66:21:33:
84:76:1e:27:ed:ad:db:bf:41:26:97:ec:12:41:77:36:94:e9:
ba:ef:33:4c:c4:86:5b:9f:65:89:ec:9d:4f:34:f5:f7:7d:6a:
91:95:06:b9:e5:bc:0a:10:bc:ba:f3:3d:59:ef:7c:bf:b9:cd:
6f:53:56:d5:43:de:27:95:df:4b:2a:9c:38:fb:d3:23:5e:de:
62:07:2d:52:9d:7d:07:2c:d4:89:67:55:ae:31:62:80:0a:7a:
e4:ff:b5:93:ab:52:3b:81:89:7a:5d:5e:fc:b4:17:32:c1:d5:
9c:8f:c1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org