Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/Fk-4nYteIYbBvQ3Q0dw4a-Ysfa4.roa
File: Fk-4nYteIYbBvQ3Q0dw4a-Ysfa4.roa (raw, json)
Hash identifier: 3aWvQPgCxGdfdZMbY0x//fc/ITuLlQwAO0uBdL907nk=
Subject key identifier: 16:4F:B8:9D:8B:5E:21:86:C1:BD:0D:D0:D1:DC:38:6B:E6:2C:7D:AE
Certificate issuer: /CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Certificate serial: 01856DE64D57A3231E6941AF2007E307C0E2
Authority key identifier: E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/Fk-4nYteIYbBvQ3Q0dw4a-Ysfa4.roa
Signing time: Sun 01 Jan 2023 15:14:47 +0000
ROA not before: Sun 01 Jan 2023 15:14:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8469
IP address blocks: 185.64.96.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:4d:57:a3:23:1e:69:41:af:20:07:e3:07:c0:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7d9cfb078eda5816fc809e98c25cb71963e75b7
Validity
Not Before: Jan 1 15:14:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=164fb89d8b5e2186c1bd0dd0d1dc386be62c7dae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:de:3b:74:20:c8:4e:30:eb:bb:1c:95:78:a9:
c4:43:ff:0a:33:07:68:fd:ef:74:84:24:6d:ae:bf:
27:d9:78:c6:f9:f5:8d:8d:49:0c:9d:32:0a:9c:68:
ab:81:9c:36:e0:6e:a3:ea:ce:ad:32:5c:74:6c:c8:
6e:0c:ed:50:f8:8b:4b:c6:65:7f:41:22:e5:24:ac:
ce:81:7c:1e:e3:a3:c4:9a:c2:b1:05:fe:e3:a1:af:
fb:42:4c:3f:ca:d4:08:9b:8c:b0:ef:f5:f3:d7:54:
a5:bc:99:37:be:20:4e:c0:43:04:f1:9a:b2:f9:96:
3c:fa:f3:9c:95:d6:9c:29:e8:4e:41:86:cc:74:e8:
1d:a9:f7:86:fc:de:90:b2:fb:1e:35:63:7e:96:9a:
2d:13:f5:ac:9e:7d:7f:42:d4:50:cb:04:7b:41:6b:
ba:d4:74:9c:f4:05:fa:06:cb:33:47:aa:20:da:4c:
45:1a:f1:99:95:96:e5:d5:b9:a9:c1:fc:4d:3a:b9:
19:a7:00:1c:fe:3e:80:db:68:32:97:8f:bc:b8:4f:
af:21:d1:dc:f8:ca:ab:47:a8:90:2d:70:cd:44:08:
f5:6c:96:01:6a:81:cc:b5:35:6a:c9:98:aa:34:cd:
73:f7:77:4c:f1:8e:2b:ad:18:07:53:ff:19:03:aa:
80:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:4F:B8:9D:8B:5E:21:86:C1:BD:0D:D0:D1:DC:38:6B:E6:2C:7D:AE
X509v3 Authority Key Identifier:
keyid:E7:D9:CF:B0:78:ED:A5:81:6F:C8:09:E9:8C:25:CB:71:96:3E:75:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/59nPsHjtpYFvyAnpjCXLcZY-dbc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/Fk-4nYteIYbBvQ3Q0dw4a-Ysfa4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/000ea7-c9f4-4ebb-b9b1-feee7c29d4de/1/59nPsHjtpYFvyAnpjCXLcZY-dbc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.64.96.0/22
Signature Algorithm: sha256WithRSAEncryption
3b:9d:5b:01:04:4c:0a:4a:44:c1:ac:b7:8e:17:0d:0b:0f:95:
53:b1:04:85:96:3e:81:22:bb:44:2f:d0:9a:a2:f6:e7:96:26:
a9:e8:97:e2:bf:58:69:94:34:42:29:55:c8:18:13:b2:11:43:
5e:0f:da:07:1c:df:6c:af:cd:0d:95:0c:3b:2d:55:37:13:2d:
35:9f:cf:18:ee:60:f6:a1:66:f0:ef:b4:e2:23:a1:84:e4:00:
e7:b1:ea:3c:e4:59:8e:59:aa:bf:fa:40:a2:3e:d2:9e:e3:8e:
76:29:c2:b7:b7:27:e2:02:82:4f:f6:f6:76:03:02:1c:07:17:
6e:38:52:9a:10:72:5a:70:e4:11:d2:ca:f3:d3:1d:5c:04:29:
67:67:3e:a3:76:1f:ba:17:fc:bd:0f:ce:b7:37:21:93:ab:78:
04:92:89:87:25:13:fc:71:75:a6:c2:7b:37:c7:f9:0b:e2:dd:
cc:3b:13:82:e1:67:92:20:6c:96:d7:3a:ee:03:68:86:86:52:
17:cd:a9:5f:6e:2b:15:86:77:ee:3d:fb:0d:e4:12:83:a4:51:
97:1b:7e:6c:04:4b:e5:f1:a3:6e:15:9b:9e:24:57:ea:f4:82:
e3:d3:2c:ac:3a:96:ab:a1:d2:88:ff:c7:d2:3d:48:95:e3:04:
3f:e9:2b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:28:37 2024 by rpki-client on console-fra.rpki-client.org