Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/ftJ0ovesd2_uR4Bv4F08wVSEass.roa
File: ftJ0ovesd2_uR4Bv4F08wVSEass.roa (raw, json)
Hash identifier: Ojc6SJ0QphmwQzsUyBAiVwxiTSk5AmsX6OMvrCk7Mto=
Subject key identifier: 7E:D2:74:A2:F7:AC:77:6F:EE:47:80:6F:E0:5D:3C:C1:54:84:6A:CB
Certificate issuer: /CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Certificate serial: 01856F42E6FD386B450A4938D45848109DC4
Authority key identifier: B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/ftJ0ovesd2_uR4Bv4F08wVSEass.roa
Signing time: Sun 01 Jan 2023 21:35:33 +0000
ROA not before: Sun 01 Jan 2023 21:35:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207271
IP address blocks: 192.145.60.0/22 maxlen: 24
2a10:a40::/32 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:42:e6:fd:38:6b:45:0a:49:38:d4:58:48:10:9d:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8fada87a76f29f82e25a3179e7a38cf0c6b0300
Validity
Not Before: Jan 1 21:35:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ed274a2f7ac776fee47806fe05d3cc154846acb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cb:ab:26:d5:ed:9b:a1:ad:e8:d2:37:79:7f:
2d:61:ba:42:c6:f2:62:a4:dd:22:67:a5:42:5e:a2:
84:09:cc:25:52:10:06:d0:1b:27:20:54:ed:ff:d5:
d7:46:b9:98:5d:75:cc:3c:e9:52:84:a8:80:b2:6a:
6b:5a:9e:a8:5e:3e:56:68:4c:e2:07:7e:53:39:6f:
a2:5d:ed:a2:7b:88:7e:00:1d:c4:06:fc:f3:45:4c:
56:0d:b0:72:ca:e9:4c:d6:da:8a:a5:b1:df:42:54:
1e:0c:be:e5:01:11:05:4d:69:c1:8a:77:29:a3:ad:
fb:df:bc:62:ed:fd:74:5d:28:fa:55:e4:ab:cc:eb:
c6:66:1b:e9:87:e9:46:bc:2a:7d:19:09:1e:8d:ed:
5a:5a:b4:63:f9:dd:f5:9e:ef:76:ca:3f:18:4a:4f:
dc:09:49:c0:43:40:ad:af:e8:e2:f3:15:63:7f:4c:
82:d5:8c:0c:23:8b:a0:2f:88:8a:dd:c3:f1:81:c9:
19:cb:d3:07:ea:75:c6:e3:bf:7a:49:e7:a6:93:fd:
c3:7d:2e:5c:92:0f:d1:d7:9b:21:2a:69:95:24:a4:
54:c2:d9:b7:b5:94:66:84:0e:b3:03:dd:a9:28:ad:
46:53:ea:fa:f2:63:cb:10:2f:ee:21:30:dd:16:56:
27:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D2:74:A2:F7:AC:77:6F:EE:47:80:6F:E0:5D:3C:C1:54:84:6A:CB
X509v3 Authority Key Identifier:
keyid:B8:FA:DA:87:A7:6F:29:F8:2E:25:A3:17:9E:7A:38:CF:0C:6B:03:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uPrah6dvKfguJaMXnno4zwxrAwA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/ftJ0ovesd2_uR4Bv4F08wVSEass.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/a56b2d-f795-495d-9c48-6f67b647722d/1/uPrah6dvKfguJaMXnno4zwxrAwA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.60.0/22
IPv6:
2a10:a40::/32
Signature Algorithm: sha256WithRSAEncryption
25:31:e3:ba:72:32:87:de:b1:b1:fc:a3:4b:39:ad:13:35:9a:
76:06:5a:f1:ec:3e:91:ab:63:c4:bb:dc:76:3b:29:87:30:f1:
ed:59:37:a8:d5:5e:b9:c9:2a:80:c4:99:40:d1:7a:0a:83:1b:
cd:0c:d1:94:1f:83:84:34:b7:c7:80:ef:f2:3c:92:7a:47:08:
5d:a6:72:49:ac:ec:c8:db:e9:98:16:a5:a0:67:05:79:10:70:
08:4a:df:55:62:6a:33:c7:95:1c:9b:7d:98:73:99:33:75:2e:
69:f2:56:38:4c:08:58:ff:7c:a9:ca:ac:dd:21:b2:6e:a1:e1:
f8:08:ae:c9:f5:ac:2b:cb:b2:15:c1:70:e6:44:89:5c:f9:46:
35:a4:e4:9a:42:c7:b9:69:68:e0:b0:02:33:db:2c:e6:94:9a:
dc:74:b6:33:e7:3e:38:8f:1d:3c:5c:cf:e7:74:c7:85:2d:aa:
4b:86:58:e8:1a:bb:d7:a1:f9:76:1c:7b:7f:78:ca:50:2f:1a:
80:fd:dc:e3:e2:43:55:ca:af:ee:bc:07:23:b4:84:1f:2d:35:
e7:1a:08:ea:08:10:fb:72:86:3b:92:bb:da:e6:56:ab:ff:c4:
1f:a8:a2:d4:bf:e6:ae:22:12:5a:b2:b5:c1:40:f7:05:c5:97:
eb:ab:cd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:13 2024 by rpki-client on console-ams.rpki-client.org