Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fppOC3vLKej_0_WgHmOFos8k0iU.roa
File: fppOC3vLKej_0_WgHmOFos8k0iU.roa (raw, json)
Hash identifier: Hk/CAGo//9SJJq7wqi2THjlUEJrxY+TnJd2JK7BuMbM=
Subject key identifier: 7E:9A:4E:0B:7B:CB:29:E8:FF:D3:F5:A0:1E:63:85:A2:CF:24:D2:25
Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Certificate serial: 018570028B90205BB9A3E4A5D3F237F58F7B
Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fppOC3vLKej_0_WgHmOFos8k0iU.roa
Signing time: Mon 02 Jan 2023 01:04:53 +0000
ROA not before: Mon 02 Jan 2023 01:04:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 11402
IP address blocks: 93.114.61.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Jan 2023 13:38:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:02:8b:90:20:5b:b9:a3:e4:a5:d3:f2:37:f5:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681
Validity
Not Before: Jan 2 01:04:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e9a4e0b7bcb29e8ffd3f5a01e6385a2cf24d225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:db:54:f6:02:c9:be:93:5d:86:69:06:64:78:
30:82:48:60:1c:22:16:47:41:3f:5a:f8:4a:01:70:
8e:78:1a:4f:d0:6c:88:f8:a9:0e:1c:cd:b0:85:ed:
67:41:fd:c7:19:e4:81:c4:ad:6d:5b:6e:b8:f8:44:
fd:a3:4a:5a:d1:ca:d4:f9:42:b9:6e:33:91:d8:d9:
1d:02:5a:bc:5c:c7:92:8a:b4:72:3b:d2:4d:21:d8:
ff:e1:38:7a:c1:b7:0b:36:e5:7d:5e:8b:4b:b5:be:
6b:3a:89:cd:be:86:b5:e4:60:86:cc:4b:20:25:bd:
9c:cd:ba:1d:ef:e2:30:cc:6b:be:ba:5b:b2:27:65:
fa:77:bc:8c:35:19:a3:94:43:8f:e2:63:75:43:91:
83:fb:6f:93:89:ca:45:5c:b3:64:ea:6c:fd:c6:fd:
a0:3b:40:af:59:24:81:1a:44:f1:10:78:b3:c0:11:
9a:4b:9b:04:7e:a6:f3:b8:a4:2b:72:d9:60:33:40:
08:c5:b0:32:29:c7:bc:70:f9:e9:c0:16:c0:e7:a3:
82:86:13:90:d1:30:ba:dd:3e:a2:e6:a9:8d:06:c0:
cc:d6:25:40:a5:eb:cf:22:1d:ff:86:57:74:de:11:
b7:5a:30:3e:22:5a:96:59:11:d9:f0:a7:f8:8b:fc:
d1:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:9A:4E:0B:7B:CB:29:E8:FF:D3:F5:A0:1E:63:85:A2:CF:24:D2:25
X509v3 Authority Key Identifier:
keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/fppOC3vLKej_0_WgHmOFos8k0iU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.114.61.0/24
Signature Algorithm: sha256WithRSAEncryption
03:72:22:c7:1e:2d:ea:54:d4:04:5b:3a:44:cd:00:48:1c:ca:
b2:b5:b1:da:96:1e:2d:d0:a4:8b:21:ef:40:62:68:1f:52:0c:
71:6b:16:58:09:91:ae:5a:82:a1:65:a9:78:fa:06:f8:0d:49:
5c:a6:b0:1d:f5:61:a9:77:6e:8e:ac:e3:9a:71:57:d5:22:2f:
79:1e:af:3d:6c:07:dc:ed:e2:08:95:69:65:61:1e:10:4f:58:
1e:7e:08:d4:c2:38:f4:a5:27:37:17:52:88:b8:18:6c:1e:80:
24:04:c8:b2:a2:6b:ba:de:f4:82:f2:f7:2d:60:4b:c2:8a:0b:
d7:ac:2a:60:02:61:8a:44:89:28:39:b8:91:3d:86:27:b1:90:
d6:76:5a:88:8e:b4:9d:1a:4e:02:85:af:aa:ac:08:b2:3f:09:
e6:41:7e:2b:c6:45:20:8f:4f:3b:fe:e9:05:a3:25:7d:7f:8b:
23:c4:69:99:63:84:77:17:46:3d:4d:04:aa:69:69:03:83:76:
2f:f9:ec:b4:f9:d9:48:2f:a2:3c:da:47:03:11:58:36:15:6d:
3d:05:a9:d1:0d:46:01:eb:16:15:64:d0:f2:13:fd:a3:36:8e:
5b:f8:f4:35:de:df:0d:45:ec:85:56:5e:a0:f5:dc:2d:c8:cd:
d0:fc:98:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:02:14 2024 by rpki-client on console-ams.rpki-client.org