Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/F-63WE4orIbOxdGGMnVD6L0nDLQ.roa
File: F-63WE4orIbOxdGGMnVD6L0nDLQ.roa (raw, json)
Hash identifier: 2fqL49NXxyJFO+mrP8tOkJ4wKV9iECJrE6lpZGLVLxM=
Subject key identifier: 17:EE:B7:58:4E:28:AC:86:CE:C5:D1:86:32:75:43:E8:BD:27:0C:B4
Certificate issuer: /CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Certificate serial: 01856E265F6F34CB771FBC0F40C0883AA90D
Authority key identifier: FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/F-63WE4orIbOxdGGMnVD6L0nDLQ.roa
Signing time: Sun 01 Jan 2023 16:24:46 +0000
ROA not before: Sun 01 Jan 2023 16:24:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201737
IP address blocks: 62.3.17.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:5f:6f:34:cb:77:1f:bc:0f:40:c0:88:3a:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0b0f1fdd64014e5057b848a19a239e849dbdd
Validity
Not Before: Jan 1 16:24:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17eeb7584e28ac86cec5d186327543e8bd270cb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ee:61:f4:4e:70:51:f3:59:b3:de:7b:34:cc:
9e:d0:95:90:0f:e2:39:65:2c:36:57:3c:ed:2d:9e:
39:d0:ad:39:20:7a:67:86:b1:1a:a5:a3:c3:f0:04:
a1:66:0d:0b:7b:5f:d1:f3:83:d9:3d:a0:7a:4e:76:
52:c6:b6:17:5f:bb:76:29:a7:7f:8b:9f:e2:d7:3f:
f3:ca:58:9c:d2:b7:4e:fb:08:75:15:62:e7:b1:bc:
c2:c3:69:a2:b2:f4:f3:59:18:35:46:69:3a:c4:93:
a2:39:ba:76:fd:d7:b0:92:f7:c8:83:e6:80:dd:9c:
1d:3e:e9:00:94:58:76:ec:ed:62:1e:43:f8:23:a3:
5d:a5:1f:16:68:68:a7:ca:ee:98:16:03:77:81:83:
11:2c:73:83:4c:9d:5a:c0:ad:e5:19:2d:16:5f:b9:
45:04:57:79:3f:96:9e:8d:80:4b:3d:1e:71:0e:14:
e0:13:e1:f8:dc:fb:d1:cb:c0:5e:46:27:62:52:4c:
3f:7a:78:2a:8b:65:24:cf:8e:a5:6d:e4:35:c1:54:
84:60:28:eb:64:a6:c8:43:b4:ea:04:05:e5:dd:56:
3b:a1:94:c7:f0:da:ae:55:2b:56:03:8f:85:77:91:
b5:2b:0a:b3:7f:e7:ac:85:7c:c2:c3:3c:44:4a:af:
bc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:EE:B7:58:4E:28:AC:86:CE:C5:D1:86:32:75:43:E8:BD:27:0C:B4
X509v3 Authority Key Identifier:
keyid:FB:A0:B0:F1:FD:D6:40:14:E5:05:7B:84:8A:19:A2:39:E8:49:DB:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6Cw8f3WQBTlBXuEihmiOehJ290.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/F-63WE4orIbOxdGGMnVD6L0nDLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/fd6977-8aae-4889-be6f-c711697fd3c3/1/1-6Cw8f3WQBTlBXuEihmiOehJ290.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.3.17.0/24
Signature Algorithm: sha256WithRSAEncryption
57:55:98:35:1a:87:29:84:7a:28:fc:16:d0:63:1e:15:7c:d2:
1f:04:bc:26:ef:5e:19:b2:67:e5:59:20:9b:05:0d:4f:cf:bf:
a0:0a:1e:7d:5f:7d:f7:a2:e1:8b:94:5e:3e:64:c1:b8:8b:15:
69:cf:43:b3:71:e0:2c:fb:18:57:7e:93:26:0c:5b:55:5e:17:
58:b1:17:b8:e5:ea:41:5c:ad:a6:5e:c0:07:db:f6:c5:68:04:
50:61:a5:ba:f1:e0:5c:3b:4a:79:40:10:2f:d4:02:f3:eb:6a:
19:21:8e:b8:8f:38:03:8e:71:d4:56:7a:c7:d2:f5:b4:f3:ef:
9c:59:89:58:27:c3:b8:d5:b5:c7:83:be:b8:f4:59:a8:65:3a:
e5:44:48:00:de:29:d6:9d:b8:d6:52:51:f7:23:68:fa:ba:9e:
f9:4c:a4:7e:49:de:d3:b2:2b:2e:56:06:e4:b5:72:40:b3:3f:
dc:6a:ad:d6:d7:43:b3:67:5e:17:9e:b4:0b:6f:89:b3:4f:f6:
47:cd:bb:56:40:05:7d:88:fa:a9:14:b2:b1:2a:82:c5:b5:38:
ba:d4:e5:45:6e:56:f0:35:41:2e:9d:dd:71:e6:9f:83:6a:d7:
ad:3a:bf:de:35:a3:42:2f:6d:ec:57:7b:01:a2:ab:5b:7a:1c:
68:0a:6d:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:31:49 2024 by rpki-client on console-fra.rpki-client.org