Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_ATSUP8gLwD1JT0y0hGtbav-JGw.roa
File: _ATSUP8gLwD1JT0y0hGtbav-JGw.roa (raw, json)
Hash identifier: UsiLB4tTsLM6coV3fIfH2IkkR/qVowP9Oms63qXNQ0Y=
Subject key identifier: FC:04:D2:50:FF:20:2F:00:F5:25:3D:32:D2:11:AD:6D:AB:FE:24:6C
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01857902C082B0BA651C9CAB386DAEC8A112
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_ATSUP8gLwD1JT0y0hGtbav-JGw.roa
Signing time: Tue 03 Jan 2023 19:01:41 +0000
ROA not before: Tue 03 Jan 2023 19:01:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60721
IP address blocks: 46.102.174.0/24 maxlen: 24
94.177.118.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:79:02:c0:82:b0:ba:65:1c:9c:ab:38:6d:ae:c8:a1:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 3 19:01:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc04d250ff202f00f5253d32d211ad6dabfe246c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:14:8a:ba:56:0e:1c:04:19:82:ea:86:27:45:
0e:ae:b0:27:29:6f:dc:7c:c5:1f:c2:e0:b5:dd:c2:
59:9c:03:f2:8e:5e:53:09:8c:bd:9d:a4:c4:86:07:
58:b2:e5:4e:11:48:47:13:fb:1e:72:b2:1a:d3:53:
ad:b6:dd:5a:23:31:c4:0f:a6:a5:c6:91:30:7d:7f:
19:3d:d2:72:32:91:be:40:3f:77:4d:68:fe:66:41:
9e:f9:8f:a4:05:15:22:5c:a1:99:54:0d:a6:4d:c8:
af:a4:50:4f:42:7a:a2:3d:ce:a7:98:70:1a:92:a4:
3b:56:e7:b4:54:d0:e0:96:f6:fb:5d:c1:3f:11:12:
b9:23:61:68:68:d2:8e:48:29:84:0e:9a:8b:c0:34:
0a:cb:67:d1:3b:49:7a:4a:da:e9:14:31:dd:9f:d2:
0b:7a:36:7b:ea:6d:19:dd:58:21:09:cd:3b:6f:14:
ee:00:92:5c:e2:4d:d4:43:6a:1f:ca:3b:2b:21:42:
af:d4:a0:17:ee:c8:d1:6b:a2:c2:cf:b6:9e:39:74:
74:eb:6d:b9:9b:16:c0:af:ee:ba:71:4b:8e:0c:f6:
e4:3f:31:5a:73:2c:b4:7d:67:fe:5f:e9:e2:d8:c1:
5e:47:bb:35:ff:70:e1:72:68:53:66:ba:78:9a:66:
1e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:04:D2:50:FF:20:2F:00:F5:25:3D:32:D2:11:AD:6D:AB:FE:24:6C
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/_ATSUP8gLwD1JT0y0hGtbav-JGw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.102.174.0/24
94.177.118.0/24
Signature Algorithm: sha256WithRSAEncryption
12:28:8b:9f:db:16:ce:c7:3d:1b:73:72:66:87:04:15:aa:ed:
48:fa:f1:93:bf:5c:49:4f:ab:b5:ee:32:af:78:37:ac:dd:9a:
77:97:0b:be:fc:2c:59:f2:4a:89:29:b5:6c:23:e1:7b:37:85:
63:85:70:b3:66:2f:7a:1b:c1:de:9c:bc:1b:56:0b:08:6e:92:
1d:19:72:f3:37:2a:94:98:4f:aa:48:b3:8d:0a:bf:3a:96:21:
5a:d2:a0:d2:4a:d6:e1:59:fc:cb:4a:22:47:25:de:84:88:9f:
2f:42:80:3c:3f:40:1c:49:85:d8:27:c0:bb:ca:30:57:2e:ec:
13:c1:cf:63:f2:f3:d7:6a:d0:4d:e4:a9:bb:b1:5f:aa:40:b8:
b8:16:1f:90:c9:96:79:17:c3:45:24:1d:ac:96:36:17:10:62:
5e:9b:52:6b:a1:8b:4a:37:7c:b5:c3:8f:c9:ed:81:ba:3f:7d:
3d:82:99:4d:ec:28:22:a7:26:7b:24:24:94:46:de:cf:94:ba:
8d:9c:a1:5e:7d:3f:97:23:c0:b6:eb:02:6a:9f:1a:d7:ff:4c:
bc:94:67:b0:9b:94:8f:7e:43:fa:6a:6f:14:14:b4:84:33:ab:
7b:b0:de:fc:b6:f4:37:6c:3d:ae:a7:f5:4c:0c:e9:fc:31:ec:
17:50:36:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:07:05 2023 by rpki-client on console-fra.rpki-client.org