Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fpNkHO6nxXbCPLtpuKmagpWSNg0.roa
File: fpNkHO6nxXbCPLtpuKmagpWSNg0.roa (raw, json)
Hash identifier: rY1ccj1m8IyoSebqWDWpQ28OwnN8ykqnlQGotOC3CLo=
Subject key identifier: 7E:93:64:1C:EE:A7:C5:76:C2:3C:BB:69:B8:A9:9A:82:95:92:36:0D
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018570027EC87FF9FB463508F8CFDBECEBDD
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fpNkHO6nxXbCPLtpuKmagpWSNg0.roa
Signing time: Mon 02 Jan 2023 01:04:49 +0000
ROA not before: Mon 02 Jan 2023 01:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35080
IP address blocks: 85.119.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:7e:c8:7f:f9:fb:46:35:08:f8:cf:db:ec:eb:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 2 01:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e93641ceea7c576c23cbb69b8a99a829592360d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:d2:9e:9d:9f:00:9c:8f:0a:eb:a7:22:62:30:
16:76:7b:21:d0:ae:14:b6:77:8f:ce:d2:80:ec:72:
14:54:67:0a:ac:d2:d8:b9:54:ba:0b:09:4d:e3:e2:
a0:03:c0:40:51:60:d9:38:dd:da:ac:17:43:1f:bd:
c3:62:60:ad:db:da:5d:60:c9:27:70:d3:21:cb:5e:
2e:b7:62:8f:18:36:d4:82:00:19:12:b3:45:a3:ec:
77:08:fb:5d:06:c4:0c:05:af:1f:3c:82:f3:e3:40:
ca:f0:1b:1b:fe:e7:27:fd:f7:23:e0:1b:ee:3e:54:
40:83:03:7b:ac:14:0f:8d:1c:52:6a:21:fc:26:82:
d9:84:7b:82:08:2c:cd:80:b3:20:3b:02:06:cc:3c:
33:ee:24:07:a4:ec:5b:85:98:f4:5f:df:18:c3:9e:
45:14:50:f2:62:a9:22:94:bf:af:1e:fc:09:18:69:
92:05:2c:f8:6e:f9:6f:d4:fe:f6:d4:17:5d:de:c4:
3a:a2:9a:93:43:1f:3d:e3:f3:6e:3b:69:c6:b6:bd:
12:39:88:ea:be:d2:29:44:e3:12:1b:45:ce:b3:76:
b4:61:70:07:16:0e:c1:4c:ff:67:a4:58:45:f8:52:
92:6a:92:fb:c6:23:e8:a3:e1:0c:e9:61:d9:c9:7d:
64:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:93:64:1C:EE:A7:C5:76:C2:3C:BB:69:B8:A9:9A:82:95:92:36:0D
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/fpNkHO6nxXbCPLtpuKmagpWSNg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:61:47:97:a6:93:d6:26:8c:98:30:d3:3c:95:9b:b6:42:ee:
7a:d1:00:02:17:00:d6:81:1a:2f:ce:c5:fb:b1:f4:b5:bf:42:
bc:27:b7:00:1e:25:28:52:a0:4b:54:ad:c6:5c:ec:6a:d8:1c:
89:b8:4c:67:10:6f:86:9a:61:11:26:9c:6f:c6:71:ff:22:eb:
1d:f5:a6:e5:7a:37:6f:0c:ab:7a:07:e5:1c:23:71:f5:3d:7a:
93:71:d0:9e:ae:06:07:fb:07:c2:a9:c8:5d:d2:98:e4:34:95:
38:9f:28:94:fe:ad:76:de:1f:4b:51:22:82:b5:b3:33:25:11:
3f:ea:74:a1:37:97:5f:a5:07:d4:10:5a:8b:ff:b5:5c:ba:43:
48:34:99:ba:76:29:62:7b:5d:30:67:af:6d:c9:23:79:fc:d8:
5f:72:4f:a7:7b:ca:86:cf:b4:e5:aa:84:86:a5:11:03:7a:26:
5f:08:6e:f8:87:a2:f1:45:db:b4:71:35:45:18:3e:f1:51:16:
1d:eb:72:06:c6:21:7c:8d:68:1f:33:65:c2:d3:e8:95:41:43:
53:06:a6:54:a5:98:f0:65:c0:ab:f2:ae:67:70:53:9a:08:07:
4c:19:d7:19:5f:5a:69:04:02:67:33:6d:d2:cc:d8:bf:d1:c8:
1b:d0:af:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:56 2024 by rpki-client on console-fra.rpki-client.org