Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/FNtZGBhjHWB413Y5pv5BCpgnpWI.roa
File: FNtZGBhjHWB413Y5pv5BCpgnpWI.roa (raw, json)
Hash identifier: uUeks6jIOoCkgOwEVpGF/mt8vj2/5KFbKC91EaUc99E=
Subject key identifier: 14:DB:59:18:18:63:1D:60:78:D7:76:39:A6:FE:41:0A:98:27:A5:62
Certificate issuer: /CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Certificate serial: 0186FE541B12B7617436BAA26A39CA6FD572
Authority key identifier: 5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/FNtZGBhjHWB413Y5pv5BCpgnpWI.roa
Signing time: Mon 20 Mar 2023 09:22:50 +0000
ROA not before: Mon 20 Mar 2023 09:22:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12611
IP address blocks: 194.55.106.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:fe:54:1b:12:b7:61:74:36:ba:a2:6a:39:ca:6f:d5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4d631166e8eede7872ead8ab9a81adc877d4d1
Validity
Not Before: Mar 20 09:22:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14db591818631d6078d77639a6fe410a9827a562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e4:f4:92:c8:97:92:6d:08:d8:fd:b8:74:31:
af:8e:e1:dd:19:33:fe:2b:3c:e0:c0:c9:cc:e6:0e:
45:1d:4d:07:96:48:33:06:54:f6:e3:8f:80:37:16:
f6:68:a0:57:e0:f3:f3:f1:34:97:d4:b3:0b:d4:72:
21:09:1f:42:7c:34:f3:96:97:08:5e:68:27:6f:55:
a0:e5:94:6b:c8:ae:e8:af:12:f3:98:46:5d:9c:86:
4d:ba:51:96:2e:31:e5:8f:6d:b3:5d:fc:e8:0f:d9:
bb:39:3a:ac:a8:e7:ef:f8:fc:94:bd:8c:40:27:2d:
ab:d3:07:4c:ec:86:8f:5f:46:8a:79:ae:95:78:b3:
55:0a:45:cd:1f:cc:46:75:5c:37:11:99:03:35:45:
3f:2e:6a:21:20:30:76:28:46:8d:80:bb:77:7a:23:
8a:cc:19:69:1e:05:65:d3:f4:c5:a1:de:a7:81:15:
98:34:5f:30:0d:ed:96:51:09:ba:bb:a3:fd:39:1f:
07:3a:ae:a5:8f:d6:ba:1d:15:11:09:50:ae:f0:ed:
57:94:ef:60:9a:07:d2:55:1f:b2:04:ef:f6:91:5c:
d2:e5:56:04:68:c6:e4:d4:22:7f:5e:43:bb:c5:b2:
a9:9c:8d:41:86:8e:ae:4a:25:fa:c9:f5:d1:41:83:
16:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:DB:59:18:18:63:1D:60:78:D7:76:39:A6:FE:41:0A:98:27:A5:62
X509v3 Authority Key Identifier:
keyid:5D:4D:63:11:66:E8:EE:DE:78:72:EA:D8:AB:9A:81:AD:C8:77:D4:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU1jEWbo7t54curYq5qBrch31NE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/FNtZGBhjHWB413Y5pv5BCpgnpWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/43b78c-4539-4112-b757-fa36fc3b7376/1/XU1jEWbo7t54curYq5qBrch31NE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.55.106.0/23
Signature Algorithm: sha256WithRSAEncryption
04:77:13:8a:c8:ba:67:8e:0b:a3:55:b7:5f:af:00:e8:83:25:
4c:b3:52:53:bc:af:fa:cd:8f:2e:c8:11:78:63:85:47:3c:76:
ff:49:7e:81:0b:e9:2e:b2:80:af:45:86:cc:13:c7:b6:49:84:
1e:74:6c:fa:9a:6e:97:f0:4d:1d:ac:2c:8a:17:fd:d0:6f:6c:
4d:dc:8f:be:3d:c3:a1:ed:24:9e:23:63:35:73:95:b6:2d:ec:
d3:59:51:67:f5:30:e6:07:4b:6d:d1:0b:ea:a7:55:ba:43:0b:
f8:b6:33:a8:23:27:1b:fb:2a:5f:7b:6c:77:c5:c8:a8:5e:a7:
a0:fd:94:69:5f:24:fa:6e:e9:5e:f0:4a:dd:c0:1d:38:92:b8:
cb:23:05:d0:a1:45:78:5f:ff:da:19:67:38:56:34:81:81:75:
3f:a9:7d:56:41:d3:02:5f:7e:7f:fd:69:8c:e1:fd:cd:50:30:
d5:fb:f9:03:71:fb:5c:90:6c:a1:cd:89:9b:24:55:cf:c3:35:
dd:53:98:24:79:e2:cc:0f:86:db:b6:63:f0:b5:1f:b9:c6:8f:
07:9b:a6:64:b0:1a:7c:76:ba:71:29:d4:20:5f:8a:f4:d2:18:
c6:58:73:65:0d:94:b1:dc:83:19:43:58:71:4b:33:51:f6:de:
9c:74:bb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 02:56:38 2024 by rpki-client on console.sobornost.net