Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Fsq8uuVzHkKv1PdMcByv1AwIJE8.roa
File: Fsq8uuVzHkKv1PdMcByv1AwIJE8.roa (raw, json)
Hash identifier: guOb76gbce/6xuN9VbBv49UXvwoDFM4+28c39O5pM4w=
Subject key identifier: 16:CA:BC:BA:E5:73:1E:42:AF:D4:F7:4C:70:1C:AF:D4:0C:08:24:4F
Certificate issuer: /CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Certificate serial: 01862A596F42AEEA8690D490AC008CD9B010
Authority key identifier: 7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Fsq8uuVzHkKv1PdMcByv1AwIJE8.roa
Signing time: Tue 07 Feb 2023 05:29:09 +0000
ROA not before: Tue 07 Feb 2023 05:29:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 164.215.96.0/22 maxlen: 22
5.10.244.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:2a:59:6f:42:ae:ea:86:90:d4:90:ac:00:8c:d9:b0:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d06a42bb2446e51f192ea375bdf7eec5a51c77f
Validity
Not Before: Feb 7 05:29:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16cabcbae5731e42afd4f74c701cafd40c08244f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:be:af:6f:2d:17:66:42:fe:97:6f:6a:ae:9e:
0e:60:ce:58:87:cb:f0:e8:9f:76:36:73:cb:ce:3c:
bc:18:8a:28:51:5b:d6:21:66:f5:c6:7e:46:5f:8b:
a2:36:ed:8b:14:4d:98:c5:2a:5e:b8:a3:03:e1:59:
43:3c:48:c8:a1:92:43:9f:c2:3a:5b:93:dc:54:da:
e7:4e:b7:c1:a1:0a:3c:ab:1e:8a:37:99:b6:66:1b:
d8:b2:12:07:fd:26:da:21:f3:a6:bf:bf:ef:0a:43:
27:15:b8:73:95:aa:dc:6c:ad:b5:ff:f2:ff:78:04:
81:7b:98:2f:9a:1f:fe:d8:96:f0:16:0d:3a:02:a6:
29:55:14:8b:2b:22:98:8c:2a:1f:7a:ed:f8:ed:2e:
cf:2a:d4:80:9c:c5:cf:fb:3d:0a:db:b0:7d:45:71:
cc:5b:2f:22:be:b6:1b:b1:15:30:85:c7:de:2d:47:
40:11:65:26:cb:fe:fa:ad:78:01:58:90:54:8c:a6:
bc:88:94:20:50:2d:a5:0f:1b:a7:82:65:fd:fc:af:
c6:f2:15:e2:2e:a1:78:75:2c:59:26:b0:f7:60:af:
69:15:23:47:6a:47:32:fc:3a:12:57:a1:c2:6e:7f:
f5:37:de:38:47:c5:c8:ea:40:34:cc:71:5e:a6:4a:
54:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:BC:BA:E5:73:1E:42:AF:D4:F7:4C:70:1C:AF:D4:0C:08:24:4F
X509v3 Authority Key Identifier:
keyid:7D:06:A4:2B:B2:44:6E:51:F1:92:EA:37:5B:DF:7E:EC:5A:51:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fQakK7JEblHxkuo3W99-7FpRx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/Fsq8uuVzHkKv1PdMcByv1AwIJE8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/78002a-4fc0-4dbf-8585-2cf806b2d0f2/1/fQakK7JEblHxkuo3W99-7FpRx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.244.0/22
164.215.96.0/22
Signature Algorithm: sha256WithRSAEncryption
58:d9:31:ff:ac:18:27:cd:25:cb:2d:ab:75:a0:1b:b9:4b:3a:
1f:6b:28:97:e4:54:5b:dd:28:3a:5a:cf:d3:4e:78:64:39:52:
cb:7e:3f:e5:93:96:58:47:07:fb:78:b1:7c:ef:b3:22:73:f8:
8c:3f:b7:d1:62:be:ba:8e:f8:21:85:01:b8:1d:3d:c3:7e:65:
78:fc:08:d1:88:6d:59:c5:f2:e6:99:78:ac:7c:d7:ef:f1:b1:
e8:a3:d0:fe:9a:44:12:97:0a:ee:82:ee:57:b9:d7:ac:e7:b6:
0c:be:33:6a:66:10:17:c1:4f:32:94:c3:89:80:13:95:46:be:
6d:30:04:9c:3b:75:4d:0e:14:02:95:85:04:57:35:a0:ac:a5:
4e:31:8c:4f:6b:73:cd:c2:14:3d:2c:4f:57:fd:09:4d:32:62:
8c:79:7a:79:3a:ef:c8:4a:9a:85:15:f1:c5:0a:60:e5:f5:49:
d2:fa:f0:f7:f8:8c:8e:44:89:cc:fc:01:0f:7d:a5:54:40:1d:
b0:4b:05:54:46:c0:7d:76:cf:5d:0c:38:bb:6d:ee:91:90:e2:
04:a3:2a:87:cf:8f:88:e8:0f:3f:82:95:9a:f4:6a:b0:0d:fd:
05:c7:49:08:c2:ae:07:dd:73:6b:ca:c0:62:bd:70:bd:0a:b4:
60:49:3f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 25 11:37:45 2023 by rpki-client on console-ams.rpki-client.org