Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/fP5yHhlXyuLjOV57b0xa4B0veM8.roa
File: fP5yHhlXyuLjOV57b0xa4B0veM8.roa (raw, json)
Hash identifier: 3ZlRWiwjf+uJcM5K3UHXsGqrBHTHkBUXoTTAezdLVYs=
Subject key identifier: 7C:FE:72:1E:19:57:CA:E2:E3:39:5E:7B:6F:4C:5A:E0:1D:2F:78:CF
Certificate issuer: /CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Certificate serial: 0185724C676C8A3FDD69D27128298B94CB32
Authority key identifier: 9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/fP5yHhlXyuLjOV57b0xa4B0veM8.roa
Signing time: Mon 02 Jan 2023 11:44:47 +0000
ROA not before: Mon 02 Jan 2023 11:44:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35614
IP address blocks: 94.124.166.0/24 maxlen: 24
2a0c:29c0::/32 maxlen: 32
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:4c:67:6c:8a:3f:dd:69:d2:71:28:29:8b:94:cb:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff1503210fe06ed35490b0231dbdb5967e12987
Validity
Not Before: Jan 2 11:44:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7cfe721e1957cae2e3395e7b6f4c5ae01d2f78cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:86:a0:3d:4e:bb:6c:d7:5f:aa:20:37:4e:0a:
da:4d:31:eb:d6:ae:59:24:38:b6:1a:df:66:e8:fb:
a2:07:b2:cc:39:40:c6:e4:63:86:f7:83:89:e7:29:
0a:89:99:c6:27:5c:eb:54:55:fc:ef:b8:84:fa:06:
df:8a:b3:48:a8:9d:b4:42:87:fb:79:83:dc:79:2b:
bb:e7:cc:34:99:ae:fb:9e:57:a9:2e:45:e0:0a:70:
9d:e0:2d:d3:db:a8:01:20:cf:9c:bf:b1:84:f5:83:
cb:b5:29:73:d0:dc:07:c9:f5:79:12:cc:6f:b8:0b:
90:eb:08:45:b4:6d:94:4d:b3:85:c6:d1:25:56:d8:
41:e5:89:4f:bd:25:f9:d6:1a:43:d1:7b:7a:a4:2c:
06:b2:6e:ad:4a:b3:b2:30:82:c7:2c:8c:5f:5c:19:
9f:6c:48:f9:8b:f3:d7:54:43:c9:23:bf:f4:2a:3d:
2f:9b:14:ee:5e:40:22:82:26:27:51:7e:64:b8:08:
70:bd:ac:09:3a:3b:b0:77:b4:80:57:78:3d:69:7d:
1c:d5:60:1d:9b:58:1f:2f:86:1a:06:b6:89:0e:bb:
55:1f:fa:0c:9d:3b:d8:2a:4c:03:be:73:ad:83:7e:
b7:65:cb:09:d2:f5:bd:35:a2:fd:84:46:89:e6:f7:
9e:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:FE:72:1E:19:57:CA:E2:E3:39:5E:7B:6F:4C:5A:E0:1D:2F:78:CF
X509v3 Authority Key Identifier:
keyid:9F:F1:50:32:10:FE:06:ED:35:49:0B:02:31:DB:DB:59:67:E1:29:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_FQMhD-Bu01SQsCMdvbWWfhKYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/fP5yHhlXyuLjOV57b0xa4B0veM8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/8421d3-506a-4f0c-b9c0-46322e02f08d/1/n_FQMhD-Bu01SQsCMdvbWWfhKYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.124.166.0/24
IPv6:
2a0c:29c0::/32
Signature Algorithm: sha256WithRSAEncryption
b3:f5:67:15:49:ef:0a:d1:0a:da:af:af:74:c8:00:c9:7e:8d:
77:45:96:4e:44:b2:b3:2d:35:65:96:e2:a0:fe:9a:0b:7a:be:
c2:07:9e:4f:a1:88:29:cb:86:f5:aa:28:c2:b7:98:ce:f6:2f:
1a:e6:38:fd:61:8b:82:1f:b7:b6:97:d1:41:55:f3:fe:6b:8c:
23:9d:59:95:1d:a6:6c:2e:fb:ae:c2:a2:48:55:6d:f3:52:c1:
f6:28:bd:5a:37:2d:ce:f2:6f:1a:dc:f4:a7:d7:5f:89:04:4f:
f4:09:d4:ff:9c:78:bd:83:30:c0:8b:b3:32:1a:37:14:d7:69:
4e:da:26:95:11:35:34:34:e8:0b:44:54:1c:f0:3f:bc:f2:ca:
04:ef:89:ad:cf:93:36:5d:5c:45:e1:11:bb:27:a7:e4:be:3b:
fc:ca:5b:c8:32:91:6a:27:1b:3c:87:49:1d:d5:31:f1:a5:63:
24:40:d7:7b:a4:0a:78:67:9b:6e:c3:59:22:f8:4b:d3:0e:f6:
45:ea:10:69:da:26:7c:cf:97:f0:65:f3:c0:26:13:39:9e:b4:
6b:a2:ab:92:4c:bf:b6:3a:98:65:a7:bd:74:63:ea:0a:17:e1:
3d:5d:fc:64:3c:3a:38:1d:a9:3b:20:ff:6e:dd:a7:d4:16:7e:
b6:ab:34:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:53:53 2024 by rpki-client on console-ams.rpki-client.org