Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/fg-8EFwTYs8Vxo0ekPb0Fa58krc.roa
File: fg-8EFwTYs8Vxo0ekPb0Fa58krc.roa (raw, json)
Hash identifier: YyLBOWJvwvi5URg8o/PRuYN1gyIiU2uE/Lp41aU8Rvg=
Subject key identifier: 7E:0F:BC:10:5C:13:62:CF:15:C6:8D:1E:90:F6:F4:15:AE:7C:92:B7
Certificate issuer: /CN=65179265803b7804d0fccf5962a8b163743e0d1e
Certificate serial: 018AEF6FDB579DF824058B5CE69ECE635639
Authority key identifier: 65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/fg-8EFwTYs8Vxo0ekPb0Fa58krc.roa
Signing time: Mon 02 Oct 2023 08:09:59 +0000
ROA not before: Mon 02 Oct 2023 08:09:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205320
IP address blocks: 160.214.96.0/24 maxlen: 24
160.214.98.0/24 maxlen: 24
160.214.97.0/24 maxlen: 24
160.214.100.0/24 maxlen: 24
160.214.103.0/24 maxlen: 24
160.214.99.0/24 maxlen: 24
160.214.102.0/24 maxlen: 24
160.214.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Nov 2023 08:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:6f:db:57:9d:f8:24:05:8b:5c:e6:9e:ce:63:56:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65179265803b7804d0fccf5962a8b163743e0d1e
Validity
Not Before: Oct 2 08:09:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e0fbc105c1362cf15c68d1e90f6f415ae7c92b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c8:4c:6e:a0:35:a6:a4:da:b2:98:45:ed:c8:
25:de:67:b7:c6:87:a0:3c:0c:22:a9:73:fd:f2:6b:
98:82:34:bf:9d:ad:b8:98:f5:88:13:50:6a:c1:03:
d4:24:a7:8d:91:29:e3:8e:f5:e4:99:98:75:29:48:
fe:04:45:64:18:12:ac:ae:38:03:77:cc:ee:3e:4d:
66:34:7f:83:7f:7f:95:66:c1:fc:ee:dd:c1:fc:e5:
bd:5b:17:49:08:eb:87:4f:c1:39:fb:14:f8:0a:5b:
f5:01:ae:ae:9a:b0:27:35:10:42:4b:9a:c3:50:38:
1f:c6:2d:48:80:79:37:01:e8:5d:22:23:7b:a8:11:
db:78:48:78:b5:d0:26:84:78:f1:f0:c2:26:32:ac:
89:65:bf:f7:8c:3a:7c:47:46:07:05:ff:0c:69:58:
60:87:3e:ed:4d:03:09:bc:05:d4:10:d9:46:ed:33:
56:38:01:c6:77:d5:b9:62:96:2f:b8:ca:6c:1a:37:
7c:e3:b6:e5:38:e3:18:03:5d:25:4a:ee:4e:47:81:
d0:75:13:d7:f6:8a:7f:b8:30:69:da:80:b2:86:0f:
68:99:a3:64:fa:aa:c4:e9:02:60:c7:ba:68:01:9a:
8a:b7:50:da:46:c4:45:84:68:4f:eb:a5:99:db:54:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:0F:BC:10:5C:13:62:CF:15:C6:8D:1E:90:F6:F4:15:AE:7C:92:B7
X509v3 Authority Key Identifier:
keyid:65:17:92:65:80:3B:78:04:D0:FC:CF:59:62:A8:B1:63:74:3E:0D:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/fg-8EFwTYs8Vxo0ekPb0Fa58krc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/dbe865-6c06-4d9a-8db1-f7bb6d9a3be8/1/ZReSZYA7eATQ_M9ZYqixY3Q-DR4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.214.96.0/21
Signature Algorithm: sha256WithRSAEncryption
28:97:02:31:ab:12:d4:1e:bc:7b:d4:7d:f8:82:90:43:87:cb:
d1:75:07:a4:ce:da:f3:47:35:d8:68:6b:c3:39:f0:f7:5f:53:
ad:08:58:f7:3c:da:ac:a9:5f:7c:01:ff:c1:d8:a3:7c:e8:23:
86:e4:d7:cc:cd:42:52:97:5e:7a:14:95:63:23:e8:29:b1:c9:
00:6f:32:db:eb:9b:0c:37:aa:ef:db:7f:eb:a5:11:37:0e:36:
46:bd:13:4a:31:f1:6f:be:e3:a4:72:18:99:2d:5a:62:47:07:
ee:75:82:00:11:9a:ef:18:7a:b6:01:fe:b8:ea:b7:48:0e:a8:
a3:87:32:6f:7e:63:87:09:47:96:c4:ea:0c:c0:ae:45:47:cb:
97:a3:bf:32:28:a3:3f:ac:df:c6:7c:e2:47:86:23:db:5e:e3:
67:b8:9b:c5:d8:15:e7:e5:91:05:c8:4f:5f:30:36:2c:54:59:
de:79:d4:89:54:40:56:2f:66:c8:40:3c:a5:81:5b:82:54:bb:
ea:af:cc:c6:38:74:89:29:20:7a:b9:d5:9e:43:e1:90:06:4c:
4a:a6:a8:b3:f8:3a:0c:c4:17:88:ba:9a:c3:be:56:a8:78:e3:
de:c2:a2:b0:64:0d:f0:86:d3:ca:45:2c:2b:27:33:d9:42:3e:
f0:6f:0f:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:11 2024 by rpki-client on console-fra.rpki-client.org