Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/fvOp9M-_6Y-pRgSksB1j1OEtFi0.roa
File: fvOp9M-_6Y-pRgSksB1j1OEtFi0.roa (raw, json)
Hash identifier: TiRsrQ3BizbMz5+3SOSpbqheTV1bsz1i0Dxx1BBj2Wk=
Subject key identifier: 7E:F3:A9:F4:CF:BF:E9:8F:A9:46:04:A4:B0:1D:63:D4:E1:2D:16:2D
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 018CC801A471494064FBAB2483D126F0369E
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/fvOp9M-_6Y-pRgSksB1j1OEtFi0.roa
Signing time: Tue 02 Jan 2024 02:29:59 +0000
ROA not before: Tue 02 Jan 2024 02:29:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209545
IP address blocks: 134.101.126.0/24 maxlen: 24
134.101.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 25 Sep 2024 08:26:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:01:a4:71:49:40:64:fb:ab:24:83:d1:26:f0:36:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Jan 2 02:29:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7ef3a9f4cfbfe98fa94604a4b01d63d4e12d162d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:73:bb:b1:44:b3:e4:32:17:c3:19:70:2b:61:
18:a1:f4:99:05:14:f7:ff:22:0b:f9:21:3b:1b:4b:
bb:27:37:15:7e:1f:ec:d2:85:45:4a:6b:81:f0:c3:
57:f2:1c:41:72:28:29:f4:94:61:00:56:c2:57:6c:
91:f2:63:a6:b7:85:ff:f6:73:fc:63:2d:1b:9b:25:
6a:c3:58:9e:86:69:a6:11:fa:99:b3:e4:2d:a1:8c:
35:33:55:32:7a:56:fe:62:33:6f:74:4d:c3:c4:db:
a7:fe:b4:a7:41:20:4d:03:e0:35:8a:0e:05:b2:12:
01:5f:ba:7a:fc:36:07:a9:be:6a:61:6d:ef:d2:4c:
be:30:06:00:6d:24:c8:87:b4:26:44:e4:0a:9e:0f:
1f:85:3a:06:44:89:61:c0:05:be:f6:3f:71:27:e4:
32:31:91:b0:96:b3:c0:bf:25:1e:70:7b:c6:2a:59:
82:65:f3:92:91:da:a8:7e:53:7d:fb:34:36:93:3d:
24:a4:ce:9b:94:9e:bc:99:b9:02:27:72:b8:28:71:
e1:63:04:77:7b:e1:0e:f9:40:31:0f:1f:9d:17:38:
f8:6f:fb:d8:6c:6f:d9:2e:0c:ee:90:d2:7c:bf:48:
10:52:13:57:3b:c2:8d:0d:80:72:09:56:30:0c:68:
80:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:F3:A9:F4:CF:BF:E9:8F:A9:46:04:A4:B0:1D:63:D4:E1:2D:16:2D
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/fvOp9M-_6Y-pRgSksB1j1OEtFi0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.126.0/23
Signature Algorithm: sha256WithRSAEncryption
65:67:0d:95:57:ea:dc:11:4a:2c:2a:92:09:87:fb:f1:e9:c4:
e6:de:66:a9:65:20:5a:c3:9e:eb:e5:11:e9:0d:4f:c6:35:cc:
48:f5:4b:b4:32:5d:8b:d4:a6:a4:de:8c:be:d0:7e:d6:2b:62:
e4:e4:68:61:96:27:ef:e9:ad:1d:4a:a3:e7:06:55:fa:7e:3f:
c6:53:76:32:3c:c9:84:09:d5:3d:f5:ab:a8:d0:90:66:f9:d6:
d1:ea:30:80:ef:98:d1:87:15:17:c7:8e:17:09:98:d6:e3:d7:
46:e5:17:40:e4:ca:d8:09:5d:2d:8b:a9:bb:3e:83:f9:c8:e1:
77:44:c8:43:76:6c:3e:a4:a1:3b:a0:37:85:93:c4:16:b0:52:
4f:04:cf:a5:8f:cc:c6:67:a5:37:20:78:f9:78:c9:b0:a6:fc:
bc:85:c4:10:8d:0d:3b:9c:6d:4f:e0:0c:83:e2:ed:eb:92:13:
c5:ef:bb:3c:46:d2:23:ef:16:23:7e:d9:46:03:b8:bd:52:21:
af:27:6c:fa:6e:df:5b:0b:ca:9f:52:1f:d2:64:b7:75:aa:ea:
b2:54:c8:c9:9e:15:5a:93:1a:ad:8d:18:80:08:60:7c:cd:ad:
53:19:b6:45:13:e6:a5:21:ca:92:fa:ba:39:0c:d8:65:8f:df:
5f:1e:5e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 25 09:41:00 2024 by rpki-client on console-fra.rpki-client.org