Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/FmiqLcy3gfeqX3B4-cfS1P0bmTI.roa
File: FmiqLcy3gfeqX3B4-cfS1P0bmTI.roa (raw, json)
Hash identifier: eEGsmz+MmCnpEaGyEiCWqBIbBJfq3tPEbPkUQXxPKE8=
Subject key identifier: 16:68:AA:2D:CC:B7:81:F7:AA:5F:70:78:F9:C7:D2:D4:FD:1B:99:32
Certificate issuer: /CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Certificate serial: 0188091B1311506E07477B41C4917302C06A
Authority key identifier: C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/FmiqLcy3gfeqX3B4-cfS1P0bmTI.roa
Signing time: Thu 11 May 2023 04:39:09 +0000
ROA not before: Thu 11 May 2023 04:39:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208476
IP address blocks: 194.180.225.0/24 maxlen: 24
194.147.140.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:09:1b:13:11:50:6e:07:47:7b:41:c4:91:73:02:c0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c87b594e5e6713a5b80a5481a5ce71e652d84573
Validity
Not Before: May 11 04:39:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1668aa2dccb781f7aa5f7078f9c7d2d4fd1b9932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f8:cd:24:fe:f7:a5:d8:30:d5:87:d1:0e:d4:
ad:26:ca:93:b9:ba:74:ab:8d:07:9f:bb:98:78:dd:
86:9a:26:e4:e4:15:a0:88:d9:f8:60:42:ab:4f:4c:
95:57:90:0a:4d:13:71:75:f1:3a:c2:31:09:45:f3:
e4:25:a6:bf:bf:8a:09:17:c9:45:cc:2b:95:80:fd:
bb:de:36:6f:28:1b:9c:3c:f8:94:41:c6:51:f8:8f:
ac:a7:63:c9:83:a4:de:ab:7d:ef:e2:06:b2:25:ff:
de:6f:ec:79:cd:c9:23:da:95:37:07:65:47:68:2f:
80:15:d9:f0:01:8c:91:a9:e8:cc:67:4b:8b:4c:fe:
35:2d:3c:b2:b2:a5:96:8b:dc:bc:05:64:2e:10:d9:
13:c5:5e:ea:47:1d:79:e0:f8:f1:1c:07:43:49:35:
55:c8:f2:80:6c:a0:1c:f8:59:6a:c8:50:10:e1:10:
86:b4:30:4f:49:27:af:11:fc:ad:40:e5:77:3b:e3:
85:51:a7:a1:2f:bf:73:ee:b8:22:98:23:69:18:b8:
55:29:d2:0f:01:72:4d:27:a0:12:e7:96:8b:a1:49:
1f:1f:17:95:ea:49:cb:d9:2c:29:a0:ad:ae:9c:d5:
e3:b3:1d:68:5b:7f:bf:6c:0d:6d:d8:3c:a9:31:79:
38:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:68:AA:2D:CC:B7:81:F7:AA:5F:70:78:F9:C7:D2:D4:FD:1B:99:32
X509v3 Authority Key Identifier:
keyid:C8:7B:59:4E:5E:67:13:A5:B8:0A:54:81:A5:CE:71:E6:52:D8:45:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yHtZTl5nE6W4ClSBpc5x5lLYRXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/FmiqLcy3gfeqX3B4-cfS1P0bmTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/824f78-dee2-47bc-af2f-38cb6e416f3a/1/yHtZTl5nE6W4ClSBpc5x5lLYRXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.140.0/24
194.180.225.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f1:be:f9:da:a4:2e:52:64:60:7f:48:eb:76:b0:e1:32:ee:
f4:ba:20:0c:a2:6d:10:15:11:57:23:c8:f6:7f:1c:7f:66:fd:
c0:80:a9:b2:be:88:86:c6:2d:3b:cf:22:3b:a4:6c:df:fb:9b:
ba:8b:0d:bd:0e:a2:bd:bb:7b:96:90:d4:6f:6a:b6:b1:c9:bf:
96:0d:04:81:e4:8e:3b:24:95:57:05:ca:e4:85:3d:ef:79:7a:
7e:0b:a1:84:00:0b:a3:c3:2a:8a:62:49:2e:b5:a3:6a:f7:b0:
00:f4:85:fd:54:06:68:c0:4e:cf:ef:86:43:24:bb:cb:10:f1:
38:a3:02:35:fe:78:31:0c:21:ba:8c:65:b1:db:b6:d6:20:37:
c5:a3:6d:77:e7:38:2d:f9:96:9b:a8:07:fd:3e:79:a3:0f:cb:
88:03:d9:f9:a4:d4:c3:9f:b2:c6:a9:37:71:c8:33:3f:58:cc:
6e:63:59:51:31:7a:49:1f:37:4e:34:28:d6:78:fa:fa:df:11:
2a:fd:2b:1b:e5:3f:58:c9:4e:d7:50:84:46:38:8e:61:f9:d4:
73:e4:c2:30:95:c8:d9:c7:e6:25:e8:21:3b:34:7b:b3:30:01:
3c:7f:2a:ef:4f:c8:02:bf:fc:9d:2f:e7:f9:ea:b5:c7:ed:36:
a2:f7:e4:e7
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 5 17:41:04 2023 by rpki-client on console-ams.rpki-client.org