Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/FcJX8svGR5zNjAlhpfENzPzrX6M.roa
File: FcJX8svGR5zNjAlhpfENzPzrX6M.roa (raw, json)
Hash identifier: LJwyP/Ny4fMu5J0jOsGsr166y3e4TkV5wMriayZbggs=
Subject key identifier: 15:C2:57:F2:CB:C6:47:9C:CD:8C:09:61:A5:F1:0D:CC:FC:EB:5F:A3
Certificate issuer: /CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Certificate serial: 018828D32D91CA4398C49F916D835A0D97E3
Authority key identifier: 7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/FcJX8svGR5zNjAlhpfENzPzrX6M.roa
Signing time: Wed 17 May 2023 08:28:28 +0000
ROA not before: Wed 17 May 2023 08:28:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 91.209.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 19 Jun 2023 08:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:28:d3:2d:91:ca:43:98:c4:9f:91:6d:83:5a:0d:97:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7fa3f99dba94a307b6cd2e1d90f678dac05681f8
Validity
Not Before: May 17 08:28:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c257f2cbc6479ccd8c0961a5f10dccfceb5fa3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2a:a7:03:5f:d1:9f:27:3b:9a:8b:46:59:9c:
66:c9:c1:5e:9b:c1:fb:d8:a4:2d:3e:d3:09:aa:c0:
4a:92:ef:6e:f0:32:77:2b:11:2b:7c:91:d6:05:81:
1f:4c:fb:8b:a1:af:2b:51:6f:4e:1a:ae:86:44:25:
74:97:e6:20:90:81:20:28:11:3e:02:25:32:e1:11:
e7:88:5a:30:4f:af:4a:99:96:06:f4:b5:c9:4b:c8:
2d:c2:2b:28:42:e7:a3:6b:9a:af:ef:4a:d2:8d:22:
c2:bb:1e:23:5e:16:f4:72:f2:7f:88:88:2b:8c:ef:
fa:19:09:f5:2a:37:01:7c:4c:21:59:71:7a:7d:e6:
bd:9d:38:3e:bc:b5:82:85:45:82:61:b6:9f:d1:b9:
df:a1:62:1d:21:48:c3:db:d0:81:eb:17:bf:8e:ce:
20:21:fa:5a:5c:7c:cc:b9:11:89:83:fa:14:46:7f:
cb:8f:cd:f4:d8:f1:b1:d3:17:bc:02:29:bd:77:d8:
4b:c4:6d:43:1f:dc:6d:3f:52:3b:c9:eb:8a:3a:5b:
34:43:e6:a3:11:f4:db:2b:94:51:d9:6b:55:81:c5:
9e:00:90:a4:23:47:be:f8:79:b8:ea:03:b6:7a:8f:
50:46:ca:c6:16:8a:ea:bb:7d:59:b3:eb:1e:6b:2a:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C2:57:F2:CB:C6:47:9C:CD:8C:09:61:A5:F1:0D:CC:FC:EB:5F:A3
X509v3 Authority Key Identifier:
keyid:7F:A3:F9:9D:BA:94:A3:07:B6:CD:2E:1D:90:F6:78:DA:C0:56:81:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6P5nbqUowe2zS4dkPZ42sBWgfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/FcJX8svGR5zNjAlhpfENzPzrX6M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5ae3c4-4aa4-4c62-8eb5-4ea47cce0c63/1/f6P5nbqUowe2zS4dkPZ42sBWgfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.228.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:fc:17:d6:64:dd:61:56:7d:3d:01:27:cc:64:1d:c4:03:9b:
5d:bd:41:27:90:e5:3e:36:b2:09:cc:a2:18:ad:80:cb:e9:2b:
3b:1a:94:07:1b:48:62:f2:36:7e:19:1f:cb:20:47:2d:ed:4a:
2e:bc:ca:b3:42:fa:d1:0f:88:f7:d5:5d:03:d7:5c:30:8c:81:
54:b1:f6:7a:dc:90:8d:dc:a2:be:f3:c8:96:de:d2:9c:5c:f6:
45:75:e1:d6:a8:12:c3:a6:69:a8:ff:ee:2a:f0:36:c3:a3:4c:
e3:32:fd:6a:42:db:95:14:f7:f8:85:04:76:d9:21:30:d7:91:
0c:c4:11:78:ec:33:25:78:c7:50:4d:2f:d8:5f:fb:2c:c3:9f:
c0:a0:ce:55:1a:b3:40:fd:9f:d4:c4:4a:7c:57:fa:33:16:00:
c3:0e:dc:db:f9:dd:bb:3c:15:96:60:42:b6:56:f0:16:df:a2:
67:a8:03:0f:9b:1f:f4:7e:72:db:af:ce:af:3f:25:1d:20:f8:
30:ae:2c:20:c5:b8:cd:92:9a:45:38:22:c2:25:7c:58:76:74:
d6:fa:c9:c5:f1:b3:a0:b1:1e:51:e2:1c:2c:89:19:49:e4:88:
e5:5f:e4:16:da:ba:e3:75:67:eb:c6:a0:40:41:9c:22:b5:d1:
e6:94:10:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:03 2024 by rpki-client on console-ams.rpki-client.org