Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FJZuGO-J6XVMDd3ujFc1lSBCqu0.roa
File: FJZuGO-J6XVMDd3ujFc1lSBCqu0.roa (raw, json)
Hash identifier: Fm0AtfRhWEe707QzPyq1iyU0syt+CJEj1FvrpDHQxhY=
Subject key identifier: 14:96:6E:18:EF:89:E9:75:4C:0D:DD:EE:8C:57:35:95:20:42:AA:ED
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018B94937FD52697B18A00803B5E5266F96E
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FJZuGO-J6XVMDd3ujFc1lSBCqu0.roa
Signing time: Fri 03 Nov 2023 09:46:16 +0000
ROA not before: Fri 03 Nov 2023 09:46:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211936
IP address blocks: 195.242.241.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:94:93:7f:d5:26:97:b1:8a:00:80:3b:5e:52:66:f9:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Nov 3 09:46:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14966e18ef89e9754c0dddee8c5735952042aaed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e7:72:32:19:e6:8c:3c:28:0e:a5:9b:5e:29:
2d:59:71:2c:c0:ca:f5:a7:71:5e:16:ea:b9:b7:cc:
b1:d1:c3:85:4f:79:81:c6:1f:10:62:2c:b9:d4:f4:
b8:55:01:e5:af:ea:53:87:3c:e7:ae:5d:4c:ac:69:
13:24:1a:08:0c:0b:37:a0:0d:64:5f:26:81:22:8b:
5d:ad:f2:60:ba:57:a3:7e:e1:e8:bd:75:15:db:22:
cb:b9:90:1d:31:47:b2:d3:34:d3:80:9a:e7:ec:66:
52:54:97:c6:87:d8:2b:67:5b:8c:ef:70:f0:39:c9:
1a:75:b4:27:f3:ad:26:d4:83:d8:0e:8f:60:35:32:
cf:e0:f2:d9:83:03:fe:05:88:8b:63:8b:ed:f2:db:
63:fd:5c:29:ef:74:fa:6f:39:7c:10:51:b2:6e:27:
4d:fd:e2:5b:72:5b:67:f9:bd:03:2f:f1:c3:85:68:
01:d9:e9:ed:b3:59:15:fe:34:e9:d5:40:ac:11:27:
7c:08:5b:fe:a9:72:8c:79:d7:c5:0f:b8:ad:bb:e9:
e5:ee:7c:ee:62:06:6b:7f:d8:93:80:15:e0:c8:f2:
62:88:cc:10:52:e7:ac:55:31:a5:1c:f0:94:7e:33:
04:86:72:68:57:ca:18:b6:e3:b1:fb:ca:16:92:7f:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:96:6E:18:EF:89:E9:75:4C:0D:DD:EE:8C:57:35:95:20:42:AA:ED
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/FJZuGO-J6XVMDd3ujFc1lSBCqu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.242.241.0/24
Signature Algorithm: sha256WithRSAEncryption
71:fe:c7:c4:fa:e2:94:7d:96:9f:fe:9c:d2:c7:10:75:b6:72:
cc:3a:30:a4:83:81:c6:66:e8:ca:d0:24:71:a0:b4:d2:27:f7:
1d:96:fa:b6:83:7a:a2:82:bc:1c:85:2e:34:fc:40:42:b0:70:
0b:1b:49:ed:87:1b:bf:4c:14:91:68:42:08:9a:b3:e8:1d:c7:
e5:f3:59:76:95:97:e9:3e:f4:c8:83:14:32:f0:ab:5b:29:e4:
80:75:eb:47:0c:b8:26:c3:4e:6e:60:f7:a0:4b:e7:3b:cf:3b:
a8:a4:8d:b0:76:a3:2f:b3:1a:93:13:c7:76:51:f2:f7:b2:0b:
00:76:52:b9:c4:2d:a4:ad:74:b6:94:81:29:e2:1f:ff:25:be:
04:ef:99:f0:df:57:7c:10:45:29:7b:87:80:00:48:5d:cf:38:
68:51:a5:59:0c:2c:81:a2:ae:3f:16:45:88:20:39:92:af:79:
47:f6:eb:7b:d3:a8:96:85:fb:5f:39:6f:36:07:b2:9f:d5:a8:
2b:3d:18:2e:0a:58:51:ec:2f:20:51:5b:fa:80:59:5a:a0:4a:
d5:55:f6:82:8f:9f:db:21:7a:a0:56:18:ce:7e:60:c6:a4:cc:
f5:c4:38:28:0e:66:7c:11:20:fb:6a:0b:20:6b:5d:3a:a3:20:
65:5b:0e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:13:55 2024 by rpki-client on console-ams.rpki-client.org