Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1Fpyb4lfi7_FPSb7pdOa84YKgOU.roa
File: 1Fpyb4lfi7_FPSb7pdOa84YKgOU.roa (raw, json)
Hash identifier: 43SoJBoFnqaH321GHTlHs7GBjiuuqQGVqR1f/JbIF00=
Subject key identifier: D4:5A:72:6F:89:5F:8B:BF:C5:3D:26:FB:A5:D3:9A:F3:86:0A:80:E5
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 018B6B4052EA7289874B8C1062CAA2340125
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1Fpyb4lfi7_FPSb7pdOa84YKgOU.roa
Signing time: Thu 26 Oct 2023 09:10:59 +0000
ROA not before: Thu 26 Oct 2023 09:10:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 109.122.46.0/24 maxlen: 24
91.226.57.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 26 Oct 2023 20:24:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:6b:40:52:ea:72:89:87:4b:8c:10:62:ca:a2:34:01:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 26 09:10:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d45a726f895f8bbfc53d26fba5d39af3860a80e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:74:89:35:7e:8e:7e:a4:9b:5f:4e:59:04:78:
21:04:da:d4:e4:3d:9c:44:aa:52:d1:ad:18:1e:c6:
2c:42:b6:7e:6c:06:93:36:c4:f7:ee:49:b3:f9:19:
a6:0e:ff:b0:48:dc:7e:82:d7:5f:b5:b3:34:a9:b8:
5f:e5:d1:36:1f:99:21:80:8b:60:c1:b9:3f:2e:09:
09:3f:4e:2e:fb:9a:88:06:d2:8e:c5:55:1d:8b:6f:
32:31:75:88:69:78:34:90:44:89:e5:41:37:d8:50:
6a:aa:07:16:8d:25:48:94:eb:90:49:95:33:81:1e:
c2:d2:e8:e8:3c:17:27:f6:f5:6b:fc:20:ce:b3:f2:
5e:b0:d0:8d:4e:8a:c3:a4:85:76:d1:71:99:e4:0f:
6a:86:e6:bf:0c:55:ed:8a:1e:fe:75:eb:b4:4f:02:
6c:5d:c5:49:9a:61:21:e3:48:dd:b3:ac:3b:18:ee:
fd:7e:ce:b8:17:29:c5:86:4d:d4:e9:7a:19:94:e2:
7b:57:08:13:4e:99:cf:eb:5e:28:39:86:6a:13:35:
61:1a:27:e1:20:0a:5a:0c:88:24:e7:7a:6a:ab:a4:
08:11:39:37:00:5a:0d:e2:41:32:66:f0:0c:8e:f1:
ee:13:f7:29:b4:8a:66:69:f5:a6:9d:a7:72:3b:68:
60:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:5A:72:6F:89:5F:8B:BF:C5:3D:26:FB:A5:D3:9A:F3:86:0A:80:E5
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/1Fpyb4lfi7_FPSb7pdOa84YKgOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.57.0/24
109.122.46.0/24
Signature Algorithm: sha256WithRSAEncryption
4a:47:cc:4e:b1:4a:42:e1:9b:ec:96:eb:de:06:72:7e:5e:f2:
5d:0b:ef:af:49:e9:37:f3:4e:59:b5:ec:58:35:4f:20:7a:66:
12:1d:86:cd:e8:cf:f8:9a:7a:57:b1:a1:49:af:fc:13:86:55:
00:88:9f:11:15:8b:a3:82:74:d9:e7:0b:2f:23:40:62:f4:fa:
0a:d8:cc:a9:5e:65:04:c1:52:c0:39:db:7b:63:01:6d:1e:ac:
09:f2:e0:3b:08:33:c7:2c:ea:86:91:37:ad:dc:b9:94:51:77:
4b:2e:5c:fe:e1:7e:a6:82:72:2c:71:01:aa:07:73:19:eb:ff:
67:6f:01:ac:50:57:f9:eb:3d:0a:35:df:4e:69:a1:33:a7:d1:
c2:6a:53:da:bc:10:87:e2:f6:f3:39:12:97:17:86:83:22:e2:
67:30:a6:05:1d:b3:87:a7:37:2f:dd:86:6f:8f:ba:61:ab:6f:
7e:fa:a0:91:51:45:f8:19:e4:8f:22:16:02:42:d5:d4:80:96:
e7:de:5c:12:fa:02:66:dc:d0:ae:da:de:53:4c:e8:17:b4:a8:
4a:a2:b5:63:b8:ff:99:4f:eb:d6:37:8f:98:3e:0e:39:48:7e:
91:a5:01:49:77:c3:b4:e6:90:fe:52:0e:5d:74:2b:de:36:4c:
3f:8d:68:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:21:36 2024 by rpki-client on console-fra.rpki-client.org