Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/fwdUldlIoAMLKV21foAnxksjeIQ.roa
File: fwdUldlIoAMLKV21foAnxksjeIQ.roa (raw, json)
Hash identifier: fVVvlR0PZUIbIOpVTgkHj0LpVUsD/bvjpnxAn2zC52s=
Subject key identifier: 7F:07:54:95:D9:48:A0:03:0B:29:5D:B5:7E:80:27:C6:4B:23:78:84
Certificate issuer: /CN=079d9053717a16a76c10ae838f5625055be0481f
Certificate serial: 01856E0AF748102943F4DFB0D2CEB415A8F5
Authority key identifier: 07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/fwdUldlIoAMLKV21foAnxksjeIQ.roa
Signing time: Sun 01 Jan 2023 15:54:50 +0000
ROA not before: Sun 01 Jan 2023 15:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34984
IP address blocks: 185.93.251.0/24 maxlen: 24
185.93.250.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:0a:f7:48:10:29:43:f4:df:b0:d2:ce:b4:15:a8:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=079d9053717a16a76c10ae838f5625055be0481f
Validity
Not Before: Jan 1 15:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f075495d948a0030b295db57e8027c64b237884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4e:31:c9:7c:bd:31:3e:0a:7f:8b:24:88:ac:
51:d6:a8:c7:b8:c2:0d:47:57:84:3a:41:bd:0f:76:
90:7e:6e:8b:5d:18:0b:1a:83:b8:17:f8:96:28:01:
2c:31:4e:3a:f7:fa:90:f4:ac:19:78:8f:cf:3b:c5:
5c:ad:3d:3a:40:f6:55:a4:37:34:6f:79:3a:5d:a2:
4f:91:2d:ac:10:e4:b7:6a:d5:18:72:9f:f4:ef:16:
f5:8d:63:b3:05:35:fb:f2:e7:4a:07:cc:9b:50:de:
06:38:21:b5:61:52:46:fd:c0:a1:b5:3b:ee:3d:56:
14:7f:41:8a:2f:ec:b1:71:ac:8d:1d:7c:d4:2e:4d:
4e:54:6c:2d:5d:87:9c:da:aa:f1:f6:72:3f:df:8b:
6e:a4:fe:4f:8e:70:70:f3:81:22:48:e7:d9:f9:45:
7f:7b:10:60:47:76:46:65:36:fb:fb:db:74:39:5b:
ca:1c:96:12:46:29:9c:22:99:4e:eb:ba:dc:73:c9:
01:b0:b5:67:78:df:71:3e:34:97:fd:c9:3a:05:a7:
c7:2f:e7:77:12:e9:dd:29:30:64:92:2b:a0:f4:51:
a2:67:55:80:4f:d0:70:c5:1f:d3:b1:39:99:02:af:
b1:aa:67:37:26:ed:f1:78:e8:3c:3f:d0:72:91:e5:
0b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:07:54:95:D9:48:A0:03:0B:29:5D:B5:7E:80:27:C6:4B:23:78:84
X509v3 Authority Key Identifier:
keyid:07:9D:90:53:71:7A:16:A7:6C:10:AE:83:8F:56:25:05:5B:E0:48:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B52QU3F6FqdsEK6Dj1YlBVvgSB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/fwdUldlIoAMLKV21foAnxksjeIQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/68d16a-82e5-4f4a-8730-27d03e393fb7/1/B52QU3F6FqdsEK6Dj1YlBVvgSB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.93.250.0/23
Signature Algorithm: sha256WithRSAEncryption
50:fe:84:0e:25:26:96:73:e6:35:c6:24:ce:a0:2a:9e:b3:b4:
d5:b3:d6:b3:3a:21:9b:58:e7:c0:34:93:48:6a:2c:e3:65:ef:
61:69:17:72:f7:f6:6c:64:77:c3:d1:8d:13:3e:f9:e8:ee:b2:
e9:cd:49:2c:38:1e:25:c0:b5:c7:39:32:f8:f6:f9:63:8e:fd:
a9:86:6f:6b:57:fc:dc:5c:14:c6:ae:c1:26:1b:8a:80:d2:f7:
7c:79:3b:6e:0d:98:35:28:64:19:c8:a1:bd:d2:35:6e:9d:e3:
ef:59:8a:cb:c1:ad:b6:71:60:53:85:ce:3b:99:8d:63:88:44:
19:f3:d9:a0:3e:ff:ec:b3:92:a2:05:34:1a:f3:47:94:77:dd:
9f:b3:2d:cc:80:89:dd:40:b5:08:35:15:55:37:7b:dc:c1:cd:
cc:ab:e7:ac:28:4a:8c:28:4e:57:ea:c4:06:32:32:18:10:94:
6d:51:5a:dd:40:1d:67:24:45:9b:fc:f6:f7:9d:36:a0:a4:63:
70:cd:12:8e:9b:ea:fc:45:d3:fc:e0:36:8f:0b:a9:ee:fe:b2:
8c:03:f4:ad:0a:09:e7:43:26:8c:14:7c:56:1b:a1:d3:72:60:
2b:be:a3:bf:66:03:8e:e8:ee:73:cc:0e:3e:8a:f7:9d:03:90:
a2:a5:bc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:23:38 2024 by rpki-client on console-ams.rpki-client.org