Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa2FpD2T617S_0BR_IcuDMJoLw8.roa
File: fa2FpD2T617S_0BR_IcuDMJoLw8.roa (raw, json)
Hash identifier: +X5dQe0QXgfy63XgdSfXmMAxTY9IscitVyqVgVJ5QF8=
Subject key identifier: 7D:AD:85:A4:3D:93:EB:5E:D2:FF:40:51:FC:87:2E:0C:C2:68:2F:0F
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 0192AB32A995B076C285EE2B9A4BF625D9F5
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa2FpD2T617S_0BR_IcuDMJoLw8.roa
Signing time: Sun 20 Oct 2024 18:31:17 +0000
ROA not before: Sun 20 Oct 2024 18:31:17 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16276
IP address blocks: 89.21.85.0/24 maxlen: 24
89.251.22.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 11 Nov 2024 09:51:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:ab:32:a9:95:b0:76:c2:85:ee:2b:9a:4b:f6:25:d9:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Oct 20 18:31:17 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dad85a43d93eb5ed2ff4051fc872e0cc2682f0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c3:f2:36:51:b4:88:59:ce:c6:de:1f:f7:6d:
47:61:e8:d1:31:79:ca:a5:db:a6:07:be:bf:10:d3:
9b:22:02:f8:e1:61:73:90:b5:0f:50:5b:43:eb:7e:
76:52:c0:12:df:c1:95:84:32:a1:d1:4a:f9:5d:3b:
ad:0c:83:39:e1:85:e4:75:68:fa:e2:f1:bb:1c:a0:
31:14:03:71:3e:42:72:77:b9:5b:9e:47:1a:20:a0:
d4:0e:91:5b:89:e1:ca:b4:39:08:b3:0d:53:fd:c5:
b8:54:41:c3:94:a5:ad:bc:eb:4a:47:9e:29:ec:53:
a6:95:f2:e0:38:cc:00:d6:25:0c:7d:bb:e2:e0:bf:
e1:61:8a:a3:5e:b9:ea:03:25:01:79:7f:13:73:5f:
1e:be:c8:de:45:96:b2:af:75:4f:cb:75:07:a5:c7:
6b:02:25:51:19:95:c2:5d:54:16:2f:a4:8e:10:c6:
34:72:87:71:76:98:11:e9:c5:1c:42:d0:7b:63:f5:
12:df:81:d2:67:b6:49:f1:21:bf:eb:fc:83:4a:77:
be:6d:f0:7a:22:61:75:e0:1c:da:60:db:44:82:29:
14:09:68:7f:06:a9:a7:f8:2b:bd:cd:0f:ff:eb:ac:
20:d3:2a:ed:c8:67:e5:86:17:45:2d:a8:43:7a:12:
05:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AD:85:A4:3D:93:EB:5E:D2:FF:40:51:FC:87:2E:0C:C2:68:2F:0F
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/fa2FpD2T617S_0BR_IcuDMJoLw8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.21.85.0/24
89.251.22.0/24
Signature Algorithm: sha256WithRSAEncryption
48:dd:87:fd:b7:bb:e8:d3:ee:da:42:ca:fa:3f:95:67:35:4f:
0a:ec:32:71:35:a1:d0:c6:78:13:03:ab:32:18:38:34:0c:9f:
16:06:cc:91:f5:95:a7:df:b3:3a:c0:0b:4b:bd:98:ec:9f:01:
eb:99:67:b3:6f:9b:06:27:a3:64:97:ed:82:17:24:98:60:5b:
c9:65:e0:99:b7:f2:5f:d5:d8:20:af:d2:33:7a:e7:da:5d:0e:
82:ff:c3:1a:fb:c8:b2:f8:0f:07:91:f2:0f:78:17:32:74:5f:
d4:b4:f7:3a:b8:7b:ed:eb:2d:be:ca:34:fd:b7:60:61:e1:04:
2a:76:c5:ac:bc:04:07:30:a1:71:56:f4:68:94:57:a4:ee:e9:
12:99:db:43:7f:6b:62:55:cf:42:a1:19:3d:37:e6:ac:88:5c:
ae:08:a7:a1:3d:4a:68:23:e2:29:8f:d5:bc:e1:e2:5d:8f:57:
ae:c5:be:b2:6b:67:cd:57:cf:2c:72:da:64:6d:da:6b:b8:41:
9d:52:ef:d8:36:a3:2b:ed:6a:c6:b4:33:f7:8c:f8:72:78:d6:
1a:b1:da:e0:f1:91:36:e9:05:76:db:84:26:74:bd:ac:4a:ef:
01:b5:89:f9:e6:99:95:98:3d:9f:00:44:12:0b:82:f0:99:61:
80:c7:78:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 11 12:47:38 2024 by rpki-client on console-fra.rpki-client.org