Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/FuF_MlG5rTJTgI16zhFswB05H94.roa
File: FuF_MlG5rTJTgI16zhFswB05H94.roa (raw, json)
Hash identifier: FyjHvX1Qg4AgIpG/SjmFLQM/Buwm5ec+dVQFp2MpO8Y=
Subject key identifier: 16:E1:7F:32:51:B9:AD:32:53:80:8D:7A:CE:11:6C:C0:1D:39:1F:DE
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 01856F79A619E0C16DC73A490A46687DADB0
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/FuF_MlG5rTJTgI16zhFswB05H94.roa
Signing time: Sun 01 Jan 2023 22:35:21 +0000
ROA not before: Sun 01 Jan 2023 22:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 53856
IP address blocks: 93.157.24.0/22 maxlen: 22
93.157.28.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 09 Feb 2023 09:41:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a6:19:e0:c1:6d:c7:3a:49:0a:46:68:7d:ad:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jan 1 22:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16e17f3251b9ad3253808d7ace116cc01d391fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f8:de:5f:62:d1:63:32:49:88:72:7a:99:9d:
d7:71:eb:5c:54:26:f2:a1:a7:96:d6:09:09:de:64:
0b:d4:d5:74:d5:5f:91:e4:4b:90:2e:4b:bd:d6:91:
a0:c6:dd:37:97:3e:72:90:45:c8:d4:21:bd:d5:e2:
e8:81:4a:6f:52:6d:0e:fa:88:16:ab:17:6e:04:d5:
1d:db:5d:77:74:44:37:18:10:27:b4:de:54:08:c6:
40:bb:89:fa:de:59:2e:27:d7:e6:30:5d:4d:33:c7:
c2:3b:99:24:43:e1:43:0c:3e:44:b0:28:16:18:2f:
68:47:f8:59:20:43:3c:a3:44:91:a1:ae:1b:c5:78:
88:f2:3a:32:4c:33:9e:6b:4f:b4:eb:94:97:a2:e0:
71:f7:c1:9b:c1:db:22:d6:92:d2:b6:39:0c:84:c7:
5a:b2:e4:22:4b:b1:ee:91:59:de:bd:7a:c6:fb:18:
42:b6:3c:0b:af:94:8c:46:dc:2f:4e:19:a4:b5:0f:
ae:d2:b5:6a:13:6d:e0:54:5d:3c:4e:ab:94:ed:00:
e7:26:dd:c0:73:54:a0:9d:96:98:d1:17:5c:89:a4:
61:bb:75:9c:38:be:96:64:9e:a3:88:b9:74:86:22:
dc:26:ce:c6:3b:9b:fd:86:6d:17:a9:a0:50:d4:08:
d3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:E1:7F:32:51:B9:AD:32:53:80:8D:7A:CE:11:6C:C0:1D:39:1F:DE
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/FuF_MlG5rTJTgI16zhFswB05H94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.157.24.0/21
Signature Algorithm: sha256WithRSAEncryption
6e:41:bc:51:ae:9d:23:6a:13:df:2a:1b:a6:6e:44:10:9f:77:
24:8a:48:3b:45:8d:63:d7:be:38:50:03:f7:ab:b9:53:ed:81:
7d:65:f6:f3:50:c6:41:d9:71:04:9a:49:93:fb:35:e2:2e:1d:
e9:ab:fe:17:be:4b:9c:8e:0e:ea:b7:cc:60:82:dd:70:57:fa:
6a:52:18:28:e0:e7:27:03:25:58:15:ce:9e:25:b1:11:de:4a:
3e:2e:23:76:cd:c5:cd:d0:71:30:7d:e5:5a:be:8b:d3:26:0f:
1b:39:0a:5f:8e:07:04:c7:30:dd:99:80:01:5c:4c:24:f2:48:
5d:99:a0:31:c1:de:9d:a0:fc:fc:0b:92:49:4f:36:c1:7e:02:
23:d7:98:6d:be:31:79:8d:61:52:06:8a:d9:56:da:95:a3:a3:
ac:03:ce:b2:88:7d:53:15:79:af:45:f3:bc:7d:ad:5c:2d:f6:
81:bd:0b:fa:d5:d7:b8:be:c3:69:b0:b5:05:16:43:2c:98:71:
96:3a:d6:78:3e:6b:15:cb:f6:02:65:50:85:2c:7c:cc:88:f5:
2a:6a:cc:a7:56:85:bc:d3:96:47:d0:98:0b:ed:22:0a:d7:e9:
23:01:36:7d:73:87:fe:2f:28:69:35:d0:b1:6e:39:7b:6c:88:
73:88:dd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:36 2024 by rpki-client on console-ams.rpki-client.org