Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fyOr4SaEzo0Ehvb4AT2kGBuw3J8.roa
File: fyOr4SaEzo0Ehvb4AT2kGBuw3J8.roa (raw, json)
Hash identifier: p50bS135GNCuhto5fZ1CletJM1slkpsFeJngAknnlF4=
Subject key identifier: 7F:23:AB:E1:26:84:CE:8D:04:86:F6:F8:01:3D:A4:18:1B:B0:DC:9F
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 0192AE94C14B234912A7EFC78A8EB60A132A
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fyOr4SaEzo0Ehvb4AT2kGBuw3J8.roa
Signing time: Mon 21 Oct 2024 10:17:17 +0000
ROA not before: Mon 21 Oct 2024 10:17:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 193.168.200.0/24 maxlen: 24
207.244.196.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 21 Nov 2024 13:22:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ae:94:c1:4b:23:49:12:a7:ef:c7:8a:8e:b6:0a:13:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 21 10:17:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f23abe12684ce8d0486f6f8013da4181bb0dc9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:34:fb:83:0f:6c:73:02:02:dd:c9:33:03:ae:
ce:2e:ba:68:0e:7a:18:56:48:a0:3c:5a:36:91:e8:
2f:37:b5:06:20:6e:53:c5:ca:b4:8a:d1:dd:4c:df:
c0:c4:45:b6:cc:a9:b4:23:1b:82:11:c2:63:bc:7d:
2c:b2:ba:91:b6:1d:d7:17:17:d9:0c:ce:2c:86:8f:
c9:c7:53:2a:d3:8b:84:ae:0d:1c:bb:ad:a7:97:f1:
96:96:c3:8f:d3:ca:be:b4:b4:c5:32:bd:ec:11:74:
85:e0:dc:50:78:4f:72:37:97:18:cc:5a:b9:31:3c:
7d:d2:1f:06:7e:3f:24:9f:23:be:64:e1:db:16:1f:
dc:bc:f6:37:04:52:f9:12:8f:0c:a4:fa:fd:f7:c6:
5d:78:40:da:9e:92:53:3a:ba:f6:c1:6b:78:40:85:
66:d9:69:5d:03:da:91:4a:b7:9b:4d:8f:55:90:3e:
fe:78:42:e1:46:16:c1:b0:ff:4e:e2:b2:b5:7a:b9:
b2:78:c8:5d:fc:34:0f:da:81:d1:d2:29:22:15:c3:
19:61:89:05:cd:40:03:de:39:80:e5:b6:50:30:a9:
59:aa:6c:87:56:03:28:63:2a:60:a8:16:c8:a8:d9:
c7:93:b7:17:88:11:67:5d:3d:6e:79:2d:82:a1:72:
f7:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:23:AB:E1:26:84:CE:8D:04:86:F6:F8:01:3D:A4:18:1B:B0:DC:9F
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/fyOr4SaEzo0Ehvb4AT2kGBuw3J8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.168.200.0/24
207.244.196.0/24
Signature Algorithm: sha256WithRSAEncryption
13:f0:e5:bd:47:78:d0:bb:92:5d:dd:55:b1:d7:b0:36:f4:4e:
8b:08:e0:79:f9:22:a2:90:3d:2b:4f:82:ef:8b:ff:15:e2:d6:
75:24:bf:af:3d:42:5f:86:22:d8:73:b3:ed:37:7a:35:e5:56:
63:b5:0a:37:4b:4b:8b:08:c3:47:fe:e9:93:22:ac:a3:2b:52:
a7:13:96:20:f8:cc:37:f6:53:e4:91:32:6d:11:60:fd:2c:af:
a3:ed:1f:75:e6:20:24:ee:e9:cb:32:bd:7a:f8:90:74:b6:eb:
f6:0f:cd:cf:9b:6b:8e:ac:20:8d:ae:ae:9e:a5:1b:97:d7:16:
f4:c1:81:e0:bc:9e:3b:ad:6b:7c:bc:fd:00:f3:07:9d:bf:89:
5d:e1:d9:ca:8f:22:ed:59:62:27:21:e4:e4:71:39:82:62:08:
b8:96:e9:8d:9c:d6:9c:4c:9b:f8:6e:7d:e9:28:3c:a6:a1:02:
d5:e0:f4:0c:98:0c:96:4f:f2:33:50:67:68:8d:b3:ba:83:e9:
a4:af:b2:a7:90:5f:80:31:3d:1b:29:69:81:ec:a0:a7:5e:5c:
33:9b:ad:0a:7e:0a:ee:e7:44:5e:53:2e:9c:48:b4:e0:4c:32:
1f:26:e0:f4:8a:22:d5:85:5b:d1:9d:5f:36:24:ed:30:e4:8d:
35:cc:5d:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 16:20:36 2024 by rpki-client on console-fra.rpki-client.org