Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fjxVUmPtMLeu1COdmVfgjQ4aP2I.roa
File: fjxVUmPtMLeu1COdmVfgjQ4aP2I.roa (raw, json)
Hash identifier: GytoQ1cTsJ7zU8K+1bpCwm6r4WxzMmsBipI+v5C5yPI=
Subject key identifier: 7E:3C:55:52:63:ED:30:B7:AE:D4:23:9D:99:57:E0:8D:0E:1A:3F:62
Certificate issuer: /CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Certificate serial: 018A6A90461A627E1604E2A76054AB42FE9A
Authority key identifier: 21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fjxVUmPtMLeu1COdmVfgjQ4aP2I.roa
Signing time: Wed 06 Sep 2023 12:55:54 +0000
ROA not before: Wed 06 Sep 2023 12:55:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8769
IP address blocks: 193.182.245.0/24 maxlen: 24
193.234.82.0/24 maxlen: 24
194.71.221.0/24 maxlen: 24
193.234.18.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:6a:90:46:1a:62:7e:16:04:e2:a7:60:54:ab:42:fe:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2135c7f571eefeb67404ab6c45fd475551adaf1b
Validity
Not Before: Sep 6 12:55:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e3c555263ed30b7aed4239d9957e08d0e1a3f62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:43:d6:5f:1b:65:e7:11:4b:b7:d2:ae:54:de:
ce:0d:41:bc:7c:7c:89:91:f7:5d:e1:46:aa:8a:9c:
17:f6:45:69:d0:3c:79:a8:0c:13:0c:fc:38:dc:29:
93:85:1a:03:d6:c1:4f:00:7b:1c:0f:3d:1e:94:cd:
b5:01:99:62:79:75:b2:44:08:f0:f3:03:5b:ce:07:
3b:38:da:bd:ca:6b:1c:0c:7d:f0:ed:24:67:e5:5f:
b2:1f:da:f4:ed:87:af:05:e7:ff:cf:26:7d:37:06:
60:a4:ce:31:4c:4f:23:eb:99:ad:d8:57:c5:a9:a9:
b2:cd:e8:a8:ea:c4:55:29:05:c6:16:b4:60:55:d1:
8c:58:6f:1f:d8:62:29:34:94:a6:16:8e:cb:08:d5:
1a:e2:1a:ff:09:89:ee:6e:76:6d:a8:37:25:a5:1b:
a8:1e:02:7b:58:75:39:0a:48:57:28:1c:ef:a5:2a:
e4:6d:41:5d:ba:21:67:9f:b6:dd:c8:77:d2:c6:00:
5b:33:ba:aa:9b:4d:0b:b9:29:a2:df:73:1b:dd:87:
8e:32:3d:f9:c2:27:52:17:97:8f:84:39:26:d7:56:
f9:88:82:d8:37:6e:07:f0:ef:20:f2:61:45:e7:c4:
d5:c9:3c:17:b8:6b:d9:e7:07:51:a2:42:96:3e:6c:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:3C:55:52:63:ED:30:B7:AE:D4:23:9D:99:57:E0:8D:0E:1A:3F:62
X509v3 Authority Key Identifier:
keyid:21:35:C7:F5:71:EE:FE:B6:74:04:AB:6C:45:FD:47:55:51:AD:AF:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/fjxVUmPtMLeu1COdmVfgjQ4aP2I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/680b78-96af-4a85-ac02-943d03321326/1/ITXH9XHu_rZ0BKtsRf1HVVGtrxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.182.245.0/24
193.234.18.0/24
193.234.82.0/24
194.71.221.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:42:98:87:7b:3f:5f:f1:0d:1b:fd:2d:8c:9e:6a:d3:e3:fe:
bb:c6:1d:04:d4:89:1e:66:24:a4:d1:d0:87:54:e8:ce:ca:de:
38:a7:8c:b2:59:e2:8e:d0:57:84:b8:dd:fe:2e:e1:ba:ed:f4:
2f:c9:bc:a9:a3:07:ba:40:39:3a:01:38:a3:58:cf:36:df:b5:
9e:41:05:3e:e7:e3:ab:fc:6e:a4:c8:cc:dd:68:48:e1:b8:16:
20:d5:77:08:e0:fc:e7:67:49:9e:bc:4b:56:6d:68:ba:c0:62:
71:de:39:07:85:c6:b4:53:ba:0d:59:36:3d:c1:90:de:0f:97:
53:c4:8c:f0:90:20:2b:f1:eb:21:cb:7e:40:b5:be:c8:dc:aa:
f9:c1:da:2b:ca:7b:25:67:04:cc:0e:51:52:9c:cb:0e:0e:22:
9a:bc:ff:b9:0f:33:67:d6:e4:54:b0:89:85:1b:fb:51:af:72:
59:c2:87:22:ee:ac:d4:48:ee:c7:13:5c:b0:90:7e:b1:ea:87:
07:81:fa:3f:14:21:2c:6a:cf:fd:9d:64:fa:b0:9b:77:51:e9:
22:0b:6e:fd:e8:88:cd:e4:04:f1:99:e6:4e:be:9f:ea:f3:e6:
06:f6:ea:bd:2a:57:69:e3:0f:5d:20:c2:4d:e4:77:c5:44:67:
e9:ac:3b:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 06:33:20 2024 by rpki-client on console-ams.rpki-client.org