Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FkfGFX5CFHz7zz4hANrAx4c3tX8.roa
File: FkfGFX5CFHz7zz4hANrAx4c3tX8.roa (raw, json)
Hash identifier: sluSPms54QLvREPKqlRKTRFIM8kNypDkMgwA61BJkTE=
Subject key identifier: 16:47:C6:15:7E:42:14:7C:FB:CF:3E:21:00:DA:C0:C7:87:37:B5:7F
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01856EC1FCDDC40269E282D6B19ACEE4A7F7
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FkfGFX5CFHz7zz4hANrAx4c3tX8.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41211
IP address blocks: 85.112.81.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fc:dd:c4:02:69:e2:82:d6:b1:9a:ce:e4:a7:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1647c6157e42147cfbcf3e2100dac0c78737b57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:bc:85:45:06:bb:2b:0f:d6:9b:52:e7:83:
02:8a:fa:b5:7b:71:ab:a5:c9:de:90:29:ed:47:cc:
2d:92:a8:f1:d1:a6:a4:2a:66:8b:41:5b:e2:a7:0b:
30:36:77:bf:4c:59:37:22:d6:28:3a:d9:75:f0:f1:
e0:de:d3:3d:89:fa:a4:98:95:23:f1:10:19:a1:c4:
02:44:9f:0a:b7:11:31:a6:a6:90:38:4f:e1:6f:90:
98:6d:3f:ca:e7:71:46:18:ff:fb:97:82:59:ce:b7:
85:1d:79:14:84:6c:f0:a2:d2:eb:c9:f8:87:b6:f5:
66:15:dd:db:e6:7c:aa:f0:15:64:2c:1d:ad:d6:31:
5b:f1:39:13:18:e6:db:8c:10:63:ff:39:e5:a5:11:
8f:c5:4c:a8:37:6a:41:c8:c8:91:6a:92:8b:f6:08:
ad:b1:96:7e:b1:2a:fc:25:90:97:87:27:39:55:41:
38:4d:56:26:39:73:58:7f:16:9d:35:d0:4a:16:1a:
23:4c:04:34:71:20:e1:7e:9a:7b:bd:a5:13:6d:4a:
b0:2d:4a:36:cb:bc:c9:a6:f0:bf:a8:9a:2f:d0:b9:
0a:25:39:2a:80:cf:c0:0a:08:99:dc:f6:5b:46:39:
4e:40:f7:27:a9:1d:9d:67:fd:91:95:1d:1c:2d:d4:
60:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:47:C6:15:7E:42:14:7C:FB:CF:3E:21:00:DA:C0:C7:87:37:B5:7F
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/FkfGFX5CFHz7zz4hANrAx4c3tX8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.112.81.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:db:99:e4:bb:8d:bb:3b:f2:34:82:44:da:cb:0f:e9:bd:3b:
17:de:39:38:a2:08:4f:c2:73:c3:d7:fa:ce:fd:57:9e:54:8f:
bd:96:60:7b:82:7d:0a:e3:4e:dd:48:c4:96:bf:2e:a1:f0:1a:
66:59:03:b9:56:dd:29:7b:9a:29:d5:84:c0:4a:ed:bf:59:30:
e5:da:9a:93:8e:e7:57:6d:60:d1:ea:3c:5a:6f:b8:65:3b:ef:
16:fb:f1:a8:2f:14:87:47:09:f8:1f:08:a1:0d:94:56:4b:9f:
48:1a:73:a5:a8:07:01:3f:eb:15:fe:48:d3:86:a6:df:fd:b6:
7b:ab:ce:23:76:f0:9b:3c:fe:8e:08:63:4b:c4:99:ab:c1:43:
2b:0b:bc:0a:57:be:ef:3a:a8:c4:4b:80:f2:d1:e7:73:17:7a:
ca:f9:41:e4:49:c2:97:b6:a0:04:b6:35:3c:be:b7:54:c9:71:
b8:23:a1:99:77:a3:6c:34:f9:b6:29:76:de:d7:d4:fe:34:d0:
64:e6:6d:9b:4e:f7:1c:b1:9f:5f:ef:05:5d:5b:8c:b3:4d:72:
6d:02:0d:ad:ba:ba:e2:12:dd:0a:b5:82:f3:7f:98:20:23:ff:
ad:5e:07:27:70:40:5e:e2:50:f4:d4:e0:c8:05:c4:0e:0b:57:
76:36:9f:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org