Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/FUMMA0V2awtGwTzT3FJa88mDxhk.roa
File: FUMMA0V2awtGwTzT3FJa88mDxhk.roa (raw, json)
Hash identifier: sq9vQPeqEIf9tQzU8Gsk1hXQ+4gWms7/3npukRDG2BE=
Subject key identifier: 15:43:0C:03:45:76:6B:0B:46:C1:3C:D3:DC:52:5A:F3:C9:83:C6:19
Certificate issuer: /CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Certificate serial: 01856F94B40F96EB811BEB625D7F86968C4C
Authority key identifier: 25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/FUMMA0V2awtGwTzT3FJa88mDxhk.roa
Signing time: Sun 01 Jan 2023 23:04:54 +0000
ROA not before: Sun 01 Jan 2023 23:04:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8255
IP address blocks: 145.226.0.0/16 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:b4:0f:96:eb:81:1b:eb:62:5d:7f:86:96:8c:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=258f5a8e295ad1d7b48a1e11958790052b57a253
Validity
Not Before: Jan 1 23:04:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15430c0345766b0b46c13cd3dc525af3c983c619
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:4b:80:e3:fc:3d:b7:4d:be:bc:10:c0:04:9b:
21:1e:48:1f:6d:49:a9:1d:0a:a9:98:2e:36:60:25:
39:1e:8a:86:f2:7b:2c:e1:03:d6:d3:bb:03:69:7a:
69:0d:be:89:0f:2e:3f:b4:ba:75:a0:aa:ec:82:8d:
97:bb:8a:df:9b:95:87:01:95:ef:e4:7d:3b:ee:76:
ba:e3:f4:ba:39:8d:20:8c:3f:07:98:09:49:28:2c:
6e:b7:ed:2c:16:a5:73:06:a0:de:09:00:da:d5:7b:
fc:f4:aa:a5:e8:05:19:6b:48:d0:97:dc:be:03:a9:
f6:54:a2:4b:c4:66:d8:ff:4e:48:e6:fd:6e:72:ac:
fd:c4:3d:84:c3:b9:b3:8d:12:47:bc:ea:72:60:f0:
b5:de:1b:01:52:0a:c4:db:da:5d:61:b6:7b:87:76:
78:fd:c6:a6:21:60:ad:c9:f8:05:05:a5:bb:64:b8:
92:0d:0f:e4:c1:80:20:3a:79:a0:ce:48:b9:fc:1a:
cb:39:63:ca:73:8f:83:80:77:2c:6b:1d:90:b5:3b:
3c:15:9b:56:9a:36:70:61:7f:63:39:9c:e6:f6:8d:
57:58:1c:89:f6:2e:36:bc:f2:44:83:45:14:e9:dc:
65:bd:bf:84:c9:37:f8:b6:a4:ad:95:7a:31:8b:6d:
ff:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:43:0C:03:45:76:6B:0B:46:C1:3C:D3:DC:52:5A:F3:C9:83:C6:19
X509v3 Authority Key Identifier:
keyid:25:8F:5A:8E:29:5A:D1:D7:B4:8A:1E:11:95:87:90:05:2B:57:A2:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JY9ajila0de0ih4RlYeQBStXolM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/FUMMA0V2awtGwTzT3FJa88mDxhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3719f3-22e1-4344-9a39-458a2736157a/1/JY9ajila0de0ih4RlYeQBStXolM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.226.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a9:7a:14:6f:0e:31:4e:5f:53:89:f3:f5:ba:b1:e3:a3:20:4f:
cb:c3:8d:4d:ae:cc:e8:80:48:d1:16:d2:f0:d0:c5:18:b2:bd:
29:65:6a:95:58:e1:10:66:d9:22:49:f8:87:19:9b:60:11:8e:
b3:a0:fe:c1:b0:71:c6:13:25:68:4b:da:b0:18:4b:f3:74:3f:
56:1b:35:32:6a:a3:80:e1:3d:8f:c6:dd:04:38:68:f8:ac:1a:
c5:f8:2a:d9:6a:bd:f1:88:8e:a0:98:77:db:fe:26:5a:9a:22:
78:c0:a0:07:8b:5e:4e:4c:5d:c8:ea:63:a5:bd:b6:75:b6:b9:
8f:58:0c:52:aa:10:2a:12:f2:82:ed:ee:57:19:35:5d:06:aa:
db:d7:fc:41:f8:24:51:a4:57:2c:cb:cb:8b:df:86:7b:14:d6:
9e:d5:79:17:58:c2:79:5f:0c:6b:da:bf:a9:31:49:31:03:bb:
15:de:4a:4d:79:ef:f5:56:34:ac:9c:85:40:1e:c7:1d:95:52:
f3:ac:8f:5f:fb:51:d4:37:9e:e4:3f:ad:34:e5:b1:3c:88:88:
64:d0:08:3f:45:0d:43:03:e8:b0:ce:f0:97:35:90:fc:66:89:
65:42:54:b4:ef:92:a7:8d:1f:8f:a0:8e:b6:c3:5e:61:58:24:
f7:0d:69:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:11 2024 by rpki-client on console-fra.rpki-client.org