Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FABRGyDTxpZIKlHN7Ge2L3Iy6rk.roa
File: FABRGyDTxpZIKlHN7Ge2L3Iy6rk.roa (raw, json)
Hash identifier: xy/mkAO0e9OBqPGX+CxhECrZQ90+d7DJH59q3prif04=
Subject key identifier: 14:00:51:1B:20:D3:C6:96:48:2A:51:CD:EC:67:B6:2F:72:32:EA:B9
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 018571A7C3334B61132A338DEA7988DE3BBE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FABRGyDTxpZIKlHN7Ge2L3Iy6rk.roa
Signing time: Mon 02 Jan 2023 08:44:57 +0000
ROA not before: Mon 02 Jan 2023 08:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213400
IP address blocks: 194.180.251.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:a7:c3:33:4b:61:13:2a:33:8d:ea:79:88:de:3b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jan 2 08:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1400511b20d3c696482a51cdec67b62f7232eab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e2:3d:34:46:3e:1d:e8:e1:92:cc:a4:a0:60:
bc:f6:2b:25:fd:42:ee:6b:d3:90:62:17:b8:a8:ad:
a7:28:60:0e:e4:ea:ff:30:aa:4a:d0:70:03:f4:e7:
5a:cb:a1:d5:e7:4d:25:08:1f:47:ca:99:5c:d1:c9:
0a:dc:1c:d0:de:06:93:fc:e9:f0:4d:1f:2f:96:1f:
a2:b6:8e:cb:b7:ee:ce:e0:50:e9:8f:1c:53:4f:8c:
a3:2d:31:d4:f5:47:a6:2e:17:47:0f:11:cd:f7:25:
fb:20:0c:3a:2a:35:28:05:ad:99:f1:cb:86:d4:75:
c9:25:92:f7:5c:04:78:c6:7f:6f:dd:8e:58:60:87:
90:78:14:b9:d9:40:33:8a:a8:7f:d5:55:22:38:11:
24:19:c8:05:0f:51:0f:9c:cc:94:f2:37:59:bf:0b:
5f:be:96:64:47:4a:33:4b:f9:af:0a:08:bb:24:02:
68:94:71:92:ce:c8:31:78:7a:4c:60:f6:a7:08:f6:
53:99:c9:66:44:77:6a:1b:35:9c:c9:b1:45:1f:6f:
ff:b8:14:89:bc:35:8a:f8:a0:9f:82:f1:ab:46:2d:
83:db:c1:24:ef:40:da:11:21:2f:00:6b:fa:c3:40:
d5:7f:a1:1a:3f:c6:4d:ac:3c:f7:b6:c0:11:3c:26:
3e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:00:51:1B:20:D3:C6:96:48:2A:51:CD:EC:67:B6:2F:72:32:EA:B9
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/FABRGyDTxpZIKlHN7Ge2L3Iy6rk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.180.251.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:e6:aa:c3:13:a3:b3:db:11:ee:cb:13:40:8b:8e:ee:65:ef:
16:01:71:eb:51:a7:6f:64:0e:13:04:73:d7:23:08:99:d8:c4:
84:69:06:e5:f6:85:24:b6:62:59:35:30:0f:fe:5b:b1:37:a5:
ae:0d:d5:ed:07:7e:99:37:79:7b:3b:b7:98:47:b6:57:44:6a:
26:1c:87:14:66:10:ba:8a:61:81:87:48:fc:fa:97:29:40:b1:
df:56:a3:39:42:83:52:19:a8:c9:5c:f7:f1:7e:07:95:c9:be:
50:cd:83:50:f9:a3:da:ba:3a:d6:98:b9:b1:9a:69:67:f9:c6:
70:71:4e:f3:88:f1:fd:8d:28:93:26:83:57:1a:f9:73:f6:0c:
ce:76:91:60:c4:08:94:22:4a:59:f2:f0:21:b1:40:7c:12:0a:
4c:e4:10:80:4d:e9:34:1f:ed:b6:d1:84:61:95:ad:a6:37:96:
dd:c4:1b:89:e0:df:ff:58:05:51:3c:b2:be:14:70:0f:48:b8:
37:b6:4b:0f:5a:aa:ef:ee:1a:7f:a6:7d:f0:a6:a7:d5:e2:38:
a1:6e:56:6a:a3:10:bc:3f:9d:c5:ab:10:f9:80:fb:19:4c:cc:
9b:b9:de:80:f0:62:46:e4:25:40:e1:b9:5e:98:9d:de:66:a7:
74:4c:ac:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 04:40:06 2024 by rpki-client on console-ams.rpki-client.org