Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FbCuACvhs6GhzmkvZW-eDlQM3Aw.roa
File: FbCuACvhs6GhzmkvZW-eDlQM3Aw.roa (raw, json)
Hash identifier: UELikWQKqabrObdgaC5BUtwuTEgtOIlJ12wzxQx0heQ=
Subject key identifier: 15:B0:AE:00:2B:E1:B3:A1:A1:CE:69:2F:65:6F:9E:0E:54:0C:DC:0C
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027C04FD9DA07B353BEEF2A9126B3B
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FbCuACvhs6GhzmkvZW-eDlQM3Aw.roa
Signing time: Mon 02 Jan 2023 01:04:48 +0000
ROA not before: Mon 02 Jan 2023 01:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31654
IP address blocks: 84.44.29.0/24 maxlen: 24
84.44.30.0/24 maxlen: 24
82.150.71.0/24 maxlen: 24
84.44.42.0/24 maxlen: 24
84.44.67.0/24 maxlen: 24
84.44.68.0/24 maxlen: 24
84.44.65.0/24 maxlen: 24
84.44.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7c:04:fd:9d:a0:7b:35:3b:ee:f2:a9:12:6b:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15b0ae002be1b3a1a1ce692f656f9e0e540cdc0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d1:9c:cf:4c:6c:c0:ba:fc:79:a1:74:12:de:
09:45:df:9f:13:06:77:5e:34:67:2a:f4:b7:c8:c7:
c6:c6:af:7a:0c:23:bd:2e:b1:c2:52:c0:83:9a:51:
30:a8:48:44:7b:4d:76:7e:47:23:ff:7c:db:c9:07:
4f:d4:42:f8:43:5e:f8:3d:bf:dc:09:68:09:ad:a2:
71:0f:63:df:af:42:61:af:c7:6c:91:d0:46:32:7e:
73:42:19:de:53:30:c0:bf:65:b3:fb:49:65:6b:c7:
92:0b:e5:a6:4d:78:2b:09:ca:f2:c2:ba:71:e6:55:
c2:e8:17:8f:a1:83:37:50:d2:7c:6e:54:c7:2d:90:
9a:a9:01:6a:12:f0:e6:99:4f:a0:07:09:71:a1:db:
0c:2a:ed:e2:22:19:d9:2b:f3:f7:34:6e:eb:b3:76:
29:bd:63:19:68:8b:58:37:26:68:5a:71:66:d4:0e:
3b:7c:51:12:9f:68:f7:7e:c0:53:30:dd:f9:7d:b7:
83:68:26:82:8f:8d:ef:d4:65:13:00:ea:c4:94:39:
43:2a:31:e2:c7:07:dd:6d:a0:da:8f:f1:ed:dd:67:
dd:6f:b9:65:f9:94:3d:a8:d9:88:5a:ef:7c:ab:73:
56:71:56:11:39:02:d9:6e:90:ac:da:db:c7:b2:77:
18:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:B0:AE:00:2B:E1:B3:A1:A1:CE:69:2F:65:6F:9E:0E:54:0C:DC:0C
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/FbCuACvhs6GhzmkvZW-eDlQM3Aw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.71.0/24
84.44.29.0-84.44.30.255
84.44.42.0/24
84.44.65.0-84.44.68.255
Signature Algorithm: sha256WithRSAEncryption
05:d8:64:c8:08:77:e7:8d:15:4b:64:e1:64:19:57:48:6d:17:
f7:28:5b:12:46:0a:d0:5a:be:46:fb:47:56:36:92:0e:31:95:
e5:66:a3:c0:25:6e:d9:69:11:e6:54:93:58:26:02:3f:14:fa:
81:c8:0e:0c:88:e1:71:e1:bc:67:58:65:65:e1:1f:c2:b5:f5:
ec:07:df:c9:a1:17:1d:ce:25:13:75:67:c6:90:f2:c3:24:68:
6d:87:6e:d6:cd:5a:eb:8a:6f:ff:2b:40:10:dd:49:d8:48:43:
56:03:6a:90:46:5d:d6:26:7c:0f:d1:27:24:d4:6d:d0:e8:16:
69:12:f9:92:4b:03:c9:4d:67:6a:c4:c8:ab:7d:3e:72:ff:c6:
7a:33:b6:82:3a:5a:66:88:a7:f9:6d:c0:f8:20:68:6f:6f:03:
4c:2f:63:71:da:13:e9:89:a5:e8:de:82:dd:62:ac:e0:80:61:
6d:cc:2d:63:80:47:f5:71:d5:5a:59:61:21:b7:83:77:e3:90:
75:46:7b:93:ad:c4:43:18:88:ae:49:d2:a7:4a:3c:a8:01:cb:
33:f7:4b:73:68:ed:34:ba:82:7e:ac:5f:13:b3:03:e9:46:8a:
fb:48:0f:16:26:65:9d:ff:b3:12:9b:64:7e:2b:14:4b:fb:7c:
40:09:86:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org