Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fg2Vj6AW-kwo9v3rLrruuB3QM7M.roa
File: Fg2Vj6AW-kwo9v3rLrruuB3QM7M.roa (raw, json)
Hash identifier: kuQhOtvRGY1xNCk+A69GC3UyHBHlRDKwqN2J2Thg3y4=
Subject key identifier: 16:0D:95:8F:A0:16:FA:4C:28:F6:FD:EB:2E:BA:EE:B8:1D:D0:33:B3
Certificate issuer: /CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Certificate serial: 0188B9213D7C0C33AE52B509E441F887048F
Authority key identifier: 35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fg2Vj6AW-kwo9v3rLrruuB3QM7M.roa
Signing time: Wed 14 Jun 2023 08:59:03 +0000
ROA not before: Wed 14 Jun 2023 08:59:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49715
IP address blocks: 94.240.8.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:29:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:21:3d:7c:0c:33:ae:52:b5:09:e4:41:f8:87:04:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a2fd6f5e5af87d5cea095066fbcc3d3e546a4
Validity
Not Before: Jun 14 08:59:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=160d958fa016fa4c28f6fdeb2ebaeeb81dd033b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:cf:22:3d:c9:74:bc:64:52:f5:f2:30:04:b2:
7d:10:3a:f2:98:59:71:3f:e4:4f:88:f0:6d:9d:85:
f7:a2:09:69:6b:1e:86:f6:f2:ed:e2:50:9a:38:00:
e5:36:16:9d:75:f0:39:e0:6e:bb:27:cd:83:bc:89:
88:c9:ae:a4:ac:d2:8b:cd:2b:70:5e:22:d8:2b:7e:
64:84:84:2d:b0:54:92:af:87:60:6f:3a:a3:9e:6f:
78:3e:18:ea:0d:39:de:5b:9f:20:0d:19:36:61:91:
83:4f:1a:22:5c:2f:c1:40:19:0f:6e:6a:4e:97:c6:
67:22:39:5d:50:6d:90:11:94:27:b7:11:e5:90:24:
52:6a:0d:13:7f:c9:4f:3a:00:56:a2:e8:e4:f6:43:
64:10:66:fd:89:d7:8e:a3:5d:13:e0:c2:02:fd:bc:
8a:59:e8:cf:d6:59:6f:dd:49:17:9b:71:2c:97:12:
c9:b2:7a:41:6d:c5:96:c0:9a:6e:30:1b:50:70:af:
f8:91:71:b7:7d:49:23:07:20:8e:9c:3a:fa:bf:fa:
50:33:82:ba:e9:e1:73:1c:fa:aa:53:81:d3:9d:f4:
03:fd:79:4c:28:df:4d:ed:b4:90:f0:90:40:86:d1:
df:e9:7a:16:05:3a:ae:14:17:07:90:e8:8e:ae:32:
46:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:0D:95:8F:A0:16:FA:4C:28:F6:FD:EB:2E:BA:EE:B8:1D:D0:33:B3
X509v3 Authority Key Identifier:
keyid:35:1A:2F:D6:F5:E5:AF:87:D5:CE:A0:95:06:6F:BC:C3:D3:E5:46:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRov1vXlr4fVzqCVBm-8w9PlRqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/Fg2Vj6AW-kwo9v3rLrruuB3QM7M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/cdddd5-817a-4113-8b82-23049e4d2f12/1/NRov1vXlr4fVzqCVBm-8w9PlRqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.240.8.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:93:69:04:f8:16:d4:2e:f6:15:d3:a0:ba:fc:65:41:0a:d1:
59:01:f6:6e:b0:59:04:14:ea:09:80:49:eb:f8:e7:76:4a:3d:
e0:55:2b:ce:90:49:fb:4d:7c:11:e9:d0:54:b8:6b:07:47:60:
43:54:72:f6:c4:05:b2:b0:8a:69:a1:1f:92:89:84:23:21:b7:
28:3e:3a:0a:d8:a6:8e:80:6f:e7:a2:4e:d2:a3:22:38:fb:66:
af:4e:8a:75:cb:55:53:9a:78:06:40:54:ca:fe:e3:09:fa:15:
76:e5:7a:09:cc:10:f7:44:54:17:89:69:5a:30:84:fd:af:76:
55:68:63:15:ac:57:c7:e7:ca:9c:37:38:7c:6a:8b:11:6f:69:
c2:79:1a:32:8b:d7:0c:c6:3a:d7:b0:19:76:84:0e:d4:a8:bf:
ba:f2:21:0e:b4:aa:f0:29:33:b8:c9:a2:ce:d2:15:ad:8e:43:
2b:db:69:0f:65:c6:fa:0e:79:c3:17:bc:9e:28:76:c8:6d:7e:
b5:3b:83:08:95:3e:86:e6:50:21:4a:b9:48:db:1e:34:3c:ba:
66:1a:da:b6:21:86:78:63:94:67:54:b4:03:9b:69:46:18:a1:
58:89:c1:3d:ca:84:ca:b2:ba:50:e3:d9:4d:13:f3:81:de:28:
63:02:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:12 2024 by rpki-client on console-ams.rpki-client.org