Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/F6-tanNjPd6CvNEQctb2oWIgPsk.roa
File: F6-tanNjPd6CvNEQctb2oWIgPsk.roa (raw, json)
Hash identifier: Bbx3FtQm2d7ZYizC7vN80Vo0HsKofnOTmu+zy2blSdQ=
Subject key identifier: 17:AF:AD:6A:73:63:3D:DE:82:BC:D1:10:72:D6:F6:A1:62:20:3E:C9
Certificate issuer: /CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Certificate serial: 01856FC284931F293C1F274E18D59D7BEF24
Authority key identifier: 19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/F6-tanNjPd6CvNEQctb2oWIgPsk.roa
Signing time: Sun 01 Jan 2023 23:54:56 +0000
ROA not before: Sun 01 Jan 2023 23:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44725
IP address blocks: 5.250.192.0/19 maxlen: 19
37.114.128.0/18 maxlen: 18
185.91.208.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:c2:84:93:1f:29:3c:1f:27:4e:18:d5:9d:7b:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1904ce28eae682c97acd2d862fee2897c3b096fd
Validity
Not Before: Jan 1 23:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=17afad6a73633dde82bcd11072d6f6a162203ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bf:c9:00:57:c4:6d:7c:13:0a:2e:9d:c3:ec:
a3:a2:4f:32:c3:e4:98:09:57:ae:ff:16:04:1d:09:
ea:06:60:d2:4d:78:3f:e3:ba:64:81:7f:30:f4:f1:
2e:0c:a3:24:09:6c:b4:48:b7:cd:b0:71:b1:b3:09:
2d:d8:4b:a6:ee:8d:2f:fe:68:f6:0a:b2:51:d0:52:
2d:16:41:1d:62:ef:1e:28:b5:e2:01:a9:7f:40:04:
4a:76:ae:41:b9:3b:e2:e4:ab:cd:14:0b:2f:a1:d7:
e5:b1:34:19:b3:0a:07:1c:63:b4:66:e6:ec:7e:84:
3f:e9:46:2d:d6:24:77:61:b7:f8:63:44:f2:00:d0:
f4:32:83:b9:74:cd:1e:21:29:ab:90:c6:60:0f:bf:
b1:e9:f5:55:df:a6:5d:27:64:a8:0d:aa:ce:44:36:
ea:14:1e:8d:de:5f:a7:8c:cf:8c:7f:6d:99:6f:98:
c2:10:7e:4a:6e:eb:99:68:56:d7:93:58:5c:f9:a3:
ca:1f:0a:93:b7:7d:7e:37:ce:e6:10:77:61:46:49:
92:b2:a6:be:f0:90:dd:01:c9:19:a6:ec:22:13:05:
fd:ec:94:b0:14:0e:08:f6:cd:85:6c:59:f5:6f:34:
5a:a9:57:12:e4:8f:27:bc:05:48:8e:d3:0f:1d:c5:
ce:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:AF:AD:6A:73:63:3D:DE:82:BC:D1:10:72:D6:F6:A1:62:20:3E:C9
X509v3 Authority Key Identifier:
keyid:19:04:CE:28:EA:E6:82:C9:7A:CD:2D:86:2F:EE:28:97:C3:B0:96:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GQTOKOrmgsl6zS2GL-4ol8Owlv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/F6-tanNjPd6CvNEQctb2oWIgPsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/d048f6-341c-4c64-b3d9-15d5deb228dd/1/GQTOKOrmgsl6zS2GL-4ol8Owlv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.192.0/19
37.114.128.0/18
185.91.208.0/22
Signature Algorithm: sha256WithRSAEncryption
88:b6:c5:55:4d:03:24:87:a9:0c:75:5b:b9:26:89:2a:84:97:
dc:d0:62:0f:5c:6a:67:7d:6b:aa:1a:39:e7:37:94:14:aa:89:
a5:21:17:4b:37:9b:83:dc:91:1f:70:5f:41:75:bc:9d:7e:9f:
9f:64:90:b9:06:73:bf:64:fa:79:09:b7:06:e1:1a:7a:51:3f:
18:21:dc:98:8f:be:40:8d:6a:a3:c0:3c:9d:e5:9e:8a:a2:16:
ad:ae:a7:a3:98:07:0d:a1:05:be:e3:e5:ef:fa:a7:b4:9a:d0:
da:bb:40:87:9e:6b:37:e9:42:61:7d:bf:d9:07:25:b4:8f:dc:
2e:98:98:7a:2c:b3:44:d1:a4:97:b3:20:a7:24:60:25:cf:73:
de:00:d3:e8:ec:73:fc:70:89:f5:ac:79:bd:1d:d2:cd:ce:03:
8a:b0:35:8d:26:db:f6:7e:4b:32:16:3d:1e:45:1b:cf:b1:fa:
f0:69:92:54:36:44:44:c8:04:a3:bc:32:2f:cf:8c:8a:57:33:
a2:fb:8f:c9:47:d5:3d:b8:08:07:14:ee:1e:9b:31:ba:03:07:
80:62:c4:b2:b6:dc:14:8a:4e:af:d9:3c:51:14:ae:43:b8:f0:
0d:ed:4f:9e:fc:69:89:17:f0:e4:e4:cc:22:c5:e8:ec:ca:45:
3d:31:94:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:30:58 2024 by rpki-client on console-ams.rpki-client.org