Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/FY1ZZbNbleOzMDrUwacYHAkIrgA.roa
File: FY1ZZbNbleOzMDrUwacYHAkIrgA.roa (raw, json)
Hash identifier: L0jIqezBkRRWumvmJwyNvaqknBVo8c0qdlTLXWadFh8=
Subject key identifier: 15:8D:59:65:B3:5B:95:E3:B3:30:3A:D4:C1:A7:18:1C:09:08:AE:00
Certificate issuer: /CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Certificate serial: 01892696E6F13ADCC44A88E5860860640854
Authority key identifier: D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/FY1ZZbNbleOzMDrUwacYHAkIrgA.roa
Signing time: Wed 05 Jul 2023 15:06:11 +0000
ROA not before: Wed 05 Jul 2023 15:06:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6830
IP address blocks: 194.124.142.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:26:96:e6:f1:3a:dc:c4:4a:88:e5:86:08:60:64:08:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7bb552365499c07aed34b6884f5b2e9380ebee1
Validity
Not Before: Jul 5 15:06:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=158d5965b35b95e3b3303ad4c1a7181c0908ae00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:6a:04:6c:e8:86:48:cb:f4:eb:e0:d2:4b:
63:c0:91:a6:41:58:42:0a:c7:c1:fe:a0:09:07:07:
0c:06:09:e5:18:89:15:00:e1:18:b2:96:bb:35:b5:
f9:78:f8:f9:b8:4d:f7:22:fe:37:af:c6:dc:8f:04:
99:6a:9b:3f:5f:16:a7:6b:8b:07:9e:57:a4:60:1d:
fa:6b:11:b1:46:6c:84:ff:a4:fe:3c:ff:1b:ee:c5:
b2:fb:fb:cb:a8:36:da:ec:c3:4f:6a:bc:ad:99:de:
94:ac:c6:52:eb:7c:3f:86:a1:cc:72:20:f6:1e:aa:
bb:8c:40:3d:20:67:c6:c5:68:6a:6e:9a:42:54:99:
d4:79:0a:49:20:4f:71:32:9c:01:47:a5:19:c3:2f:
e4:e9:22:2c:ec:46:38:d9:b7:f6:0f:ee:37:15:19:
d0:42:a6:f7:f0:7a:6c:ab:69:27:0d:b4:64:4b:30:
5f:2c:02:e6:a1:02:70:8b:f2:94:67:43:11:16:1a:
0c:e6:da:43:fe:c0:84:70:45:84:1b:e6:fd:9f:e1:
63:bf:24:8d:ac:d0:0c:bc:63:51:e6:5c:fd:ab:42:
ff:41:34:b2:c6:d0:6e:fc:27:50:e2:b4:7f:9d:67:
c9:89:ef:cc:e1:0f:da:a1:91:15:37:c1:03:b6:f2:
e1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:8D:59:65:B3:5B:95:E3:B3:30:3A:D4:C1:A7:18:1C:09:08:AE:00
X509v3 Authority Key Identifier:
keyid:D7:BB:55:23:65:49:9C:07:AE:D3:4B:68:84:F5:B2:E9:38:0E:BE:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/17tVI2VJnAeu00tohPWy6TgOvuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/FY1ZZbNbleOzMDrUwacYHAkIrgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/6e6728-ff05-4946-b08e-3ebd455ac2ae/1/17tVI2VJnAeu00tohPWy6TgOvuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.124.142.0/23
Signature Algorithm: sha256WithRSAEncryption
3c:e7:eb:99:97:7a:16:05:0e:84:bf:04:ef:ec:3c:dc:1f:af:
bb:e3:3a:f6:17:d4:f6:2d:47:ab:ed:49:db:37:92:64:e0:c4:
14:da:51:85:b3:ad:66:6f:b6:51:ff:6c:c7:f4:5f:a4:2e:98:
3d:44:c1:4b:8e:ad:3f:e7:43:65:75:e5:42:ea:71:fe:7a:f1:
f4:95:5a:14:50:a2:de:8f:80:7c:72:34:7e:a0:87:29:cd:4d:
18:48:cf:db:ed:35:f6:99:d6:89:d7:81:2a:d6:eb:56:d5:49:
22:89:51:31:3f:71:56:91:eb:8c:3c:a4:aa:ae:6a:cf:c6:b2:
81:c1:ce:12:70:cf:0b:1d:85:5a:d7:d0:2a:cb:82:a9:ba:e3:
03:d8:8d:14:92:ff:de:65:61:ce:f1:2c:3f:0e:20:99:af:80:
1f:fb:66:76:79:6e:53:bc:f3:7b:5f:34:d4:21:f4:92:78:7a:
10:41:fa:81:75:cd:8c:01:1b:b6:32:d5:dc:b9:9d:25:fc:f7:
71:12:af:e0:27:be:54:38:48:62:78:32:8c:08:4b:83:3b:eb:
04:67:fb:3f:de:1d:b3:9b:fe:7b:be:e7:ed:a7:96:f2:1c:95:
c1:8b:e9:68:47:18:e1:f8:32:ca:8a:b8:f8:b7:ac:93:8f:24:
66:ab:80:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 09:18:16 2024 by rpki-client on console.sobornost.net