Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FDtQOROwADQ2LNa_EycqtidfiPU.roa
File: FDtQOROwADQ2LNa_EycqtidfiPU.roa (raw, json)
Hash identifier: 3lVLGiZxxnLmlwZB8ZVs6ld/3ubv2O3ZYvNZiQIf+ro=
Subject key identifier: 14:3B:50:39:13:B0:00:34:36:2C:D6:BF:13:27:2A:B6:27:5F:88:F5
Certificate issuer: /CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Certificate serial: 018C7A3D98359076DACC997AE1C7566AB528
Authority key identifier: 67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FDtQOROwADQ2LNa_EycqtidfiPU.roa
Signing time: Mon 18 Dec 2023 00:05:06 +0000
ROA not before: Mon 18 Dec 2023 00:05:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207713
IP address blocks: 91.240.243.0/24 maxlen: 24
193.43.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:7a:3d:98:35:90:76:da:cc:99:7a:e1:c7:56:6a:b5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=67955b1aa1c0284d2843b96f26c5fe751e66946f
Validity
Not Before: Dec 18 00:05:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=143b503913b00034362cd6bf13272ab6275f88f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8e:af:59:77:94:14:6c:ff:69:cc:f8:1a:a6:
b9:c5:23:70:33:60:66:cb:95:85:63:07:92:6b:e6:
cf:c2:1b:42:12:1a:c5:29:8f:36:37:cf:95:35:7d:
1a:d5:f8:e0:b8:f0:72:b1:fd:5f:d8:8c:a7:f3:00:
4e:c2:48:80:fe:f2:b2:f7:01:73:84:0d:55:c7:90:
ab:ac:f3:50:ff:9b:bb:f6:39:71:52:16:09:5a:dd:
6f:23:6c:50:a3:a7:c8:86:6a:e8:73:26:42:7b:1e:
b4:65:26:a3:c2:93:95:29:13:8b:05:bf:c3:b3:d0:
ce:60:38:29:9b:1d:76:77:28:c8:6a:d4:42:76:64:
ad:b8:58:02:e6:72:ed:d7:8c:e5:a8:8c:07:c1:6a:
c0:79:03:4c:12:58:11:79:79:11:2e:28:8b:dc:6c:
f6:04:71:e4:93:84:68:b0:de:f8:f5:69:f6:20:47:
e1:b1:59:8d:cf:a7:32:62:5b:5a:d6:05:e9:de:2c:
84:6a:08:70:5c:36:5d:f9:7a:a8:94:28:c5:54:d4:
ad:f5:73:f2:8f:95:26:0f:5e:b9:99:41:29:cb:19:
1b:fe:35:20:a2:45:e6:a1:27:77:0c:bd:9f:21:80:
da:90:04:52:92:fb:26:51:b0:49:ea:0a:59:50:46:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3B:50:39:13:B0:00:34:36:2C:D6:BF:13:27:2A:B6:27:5F:88:F5
X509v3 Authority Key Identifier:
keyid:67:95:5B:1A:A1:C0:28:4D:28:43:B9:6F:26:C5:FE:75:1E:66:94:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/FDtQOROwADQ2LNa_EycqtidfiPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/631925-6b0e-4ea5-91d7-08ad94101d7e/1/Z5VbGqHAKE0oQ7lvJsX-dR5mlG8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.243.0/24
193.43.249.0/24
Signature Algorithm: sha256WithRSAEncryption
96:47:6c:3d:e7:15:1e:e0:15:7a:bd:8d:eb:d6:90:8d:36:fb:
75:c6:94:1a:2f:2b:73:3a:0e:b7:e2:30:ab:37:14:ba:6b:a4:
0d:72:4c:66:bb:48:02:9a:b2:1a:86:7f:77:04:ff:4b:3b:aa:
1e:ee:43:89:68:6a:ac:ac:6a:da:9e:20:83:52:e8:9d:7d:a1:
6d:66:bf:c5:66:d5:e9:d4:2c:ab:4d:bc:57:19:c7:56:80:71:
a0:c5:07:3e:3a:51:a8:d7:5a:25:0d:e8:52:86:b0:6b:ef:bf:
d8:b2:1d:6d:a6:71:ad:51:39:c7:3d:3d:59:34:f8:ec:97:21:
eb:37:c9:48:c3:5e:b3:cf:64:56:0c:1d:59:53:3a:1b:48:08:
4f:85:b3:1f:70:91:fa:3d:0f:14:0a:2c:e4:d0:9c:11:1a:eb:
03:8d:0c:b7:16:ea:d3:30:62:c5:b0:c9:b2:63:af:ba:ba:07:
38:15:da:8b:b0:24:0a:ee:29:bf:be:1c:10:00:ca:2b:57:5f:
37:66:84:fd:05:50:99:5f:da:a5:db:bd:77:af:97:71:67:a2:
8f:29:13:fc:e5:a4:a1:de:aa:f7:70:9c:dd:04:d6:13:f3:ea:
85:60:8e:a5:4c:33:96:d6:d1:58:b2:61:fa:5e:46:35:d0:5f:
52:11:11:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:40 2024 by rpki-client on console-ams.rpki-client.org