Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/fqdikJpa5sGJlS3D00Oj9hnfT1c.roa
File: fqdikJpa5sGJlS3D00Oj9hnfT1c.roa (raw, json)
Hash identifier: uNWosvWOULl08kM8jhmr70M0YN0fl7/cwvQinJigJTE=
Subject key identifier: 7E:A7:62:90:9A:5A:E6:C1:89:95:2D:C3:D3:43:A3:F6:19:DF:4F:57
Certificate issuer: /CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Certificate serial: 01856C6F214FBCB6D8DF3278266D57716C83
Authority key identifier: 40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/fqdikJpa5sGJlS3D00Oj9hnfT1c.roa
Signing time: Sun 01 Jan 2023 08:25:00 +0000
ROA not before: Sun 01 Jan 2023 08:25:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24685
IP address blocks: 194.246.121.0/24 maxlen: 32
195.234.76.0/24 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:21:4f:bc:b6:d8:df:32:78:26:6d:57:71:6c:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406f014a2bc76ae04e6d304d06aacbfc8e85d514
Validity
Not Before: Jan 1 08:25:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ea762909a5ae6c189952dc3d343a3f619df4f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6a:32:c9:ca:b2:0a:13:6f:3d:35:ee:be:2b:
76:53:f5:82:3a:c2:61:55:ff:11:7c:d1:97:57:f2:
8b:46:32:c7:96:e5:48:b7:f6:37:c9:26:6a:9f:ee:
27:3c:9a:9b:56:00:c7:71:c6:08:d4:3c:1d:78:fa:
41:6d:2c:18:14:d8:19:29:34:b8:57:91:5b:7b:1c:
5b:46:78:aa:50:52:f7:78:1d:16:0f:62:8b:e0:6e:
91:6a:d0:dc:b2:62:e8:e6:54:53:6f:38:c2:af:c4:
4d:fb:3c:d0:55:63:d0:7f:24:43:51:f5:79:e7:26:
21:c1:c3:3f:28:d7:bc:5b:6d:01:df:2b:e6:aa:5e:
8c:1e:ea:04:7d:97:99:ff:14:9c:f8:d8:35:3a:64:
f8:a7:66:80:e4:18:53:95:12:d4:4e:52:5b:b2:84:
c2:eb:65:d3:5f:88:b2:cb:c1:a1:27:06:a0:e5:f1:
84:86:30:07:b8:23:2d:fb:31:3f:7d:bd:90:b9:cb:
92:e5:8c:fb:c5:ef:a4:32:bb:6f:74:29:e5:7f:f4:
46:b4:39:9b:bf:ea:fb:46:d9:6c:f1:99:68:c7:2a:
ae:e9:6e:18:50:fb:05:66:25:d1:c2:c8:9e:a9:67:
6a:79:5b:a9:9f:6a:36:8d:f2:b7:d5:ce:0a:c5:0c:
b7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:A7:62:90:9A:5A:E6:C1:89:95:2D:C3:D3:43:A3:F6:19:DF:4F:57
X509v3 Authority Key Identifier:
keyid:40:6F:01:4A:2B:C7:6A:E0:4E:6D:30:4D:06:AA:CB:FC:8E:85:D5:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QG8BSivHauBObTBNBqrL_I6F1RQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/fqdikJpa5sGJlS3D00Oj9hnfT1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/ab3caa-313e-4683-84db-9ee5a78ec57b/1/QG8BSivHauBObTBNBqrL_I6F1RQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.246.121.0/24
195.234.76.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:d1:62:56:a4:73:26:70:95:04:e5:34:28:54:db:58:e7:df:
8a:75:68:77:13:6b:59:61:4f:bb:23:b9:49:a4:44:fe:7c:5f:
0e:57:44:62:2c:fc:72:e3:97:2d:58:25:4b:04:91:f7:cf:51:
b9:38:2d:c8:9e:a4:fd:79:bf:6d:02:3a:d4:63:7c:a1:03:45:
5f:e9:a5:62:8e:57:0b:eb:14:37:8a:a0:01:74:39:63:ba:3f:
54:43:00:9f:00:61:ce:69:5d:4a:c6:a2:3d:1f:53:ba:e2:d7:
bb:38:6b:67:e2:73:5f:e8:5b:cd:04:79:0c:13:55:62:0c:81:
4c:8a:5b:9b:06:2c:9d:95:3e:33:1b:7f:88:d0:cf:91:60:27:
d1:34:ea:9b:66:21:74:e6:c5:cf:d7:b8:cb:9b:33:23:3b:49:
91:b4:1e:8b:9b:3d:bc:d6:05:d8:2e:a7:85:75:3a:17:09:57:
d9:22:6d:ea:e8:27:a2:0d:3e:54:0e:0f:74:7c:5e:65:fa:38:
b2:78:36:3d:d6:87:e1:9f:49:c4:b0:f1:f3:f5:74:4a:88:a9:
92:30:f9:90:b9:b5:8d:6a:6d:84:4e:c3:b8:35:07:ca:9a:91:
54:b5:db:0b:52:42:00:23:e7:db:29:b5:64:13:c6:e1:d2:72:
4a:e5:aa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:23 2024 by rpki-client on console-fra.rpki-client.org