Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fbBv1Cyntv7Bl1LSN4cgRhnuq3Y.roa
File: fbBv1Cyntv7Bl1LSN4cgRhnuq3Y.roa (raw, json)
Hash identifier: 0SyatRP8yGmYJKwwDJb4TM49xlUsEL2kkoCD5euszIE=
Subject key identifier: 7D:B0:6F:D4:2C:A7:B6:FE:C1:97:52:D2:37:87:20:46:19:EE:AB:76
Certificate issuer: /CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Certificate serial: 018649BA3FF517683DDE1280412C751CEA6F
Authority key identifier: 4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fbBv1Cyntv7Bl1LSN4cgRhnuq3Y.roa
Signing time: Mon 13 Feb 2023 07:43:08 +0000
ROA not before: Mon 13 Feb 2023 07:43:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 59642
IP address blocks: 84.32.184.0/22 maxlen: 24
84.32.188.0/22 maxlen: 22
88.216.93.0/24 maxlen: 24
84.32.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 10:54:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:49:ba:3f:f5:17:68:3d:de:12:80:41:2c:75:1c:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fbd45fce356e2a65f1e4d1daf7814b6d6bda3c5
Validity
Not Before: Feb 13 07:43:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7db06fd42ca7b6fec19752d23787204619eeab76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:fa:7d:8e:16:7d:56:d5:43:d8:0f:e2:8a:c9:
5d:92:dd:b3:1b:a9:86:4a:df:1c:0d:8d:52:5b:3d:
80:f1:31:d0:4c:c6:ea:fb:f4:90:1b:c7:2b:ba:84:
93:6a:fa:45:3a:44:14:0c:67:fd:bf:a9:43:c5:8d:
62:d4:35:62:4f:17:d5:5d:50:ed:5d:ff:23:2a:4d:
31:f7:eb:a6:eb:9c:0d:89:5b:64:f3:43:16:2a:4b:
d1:18:8f:cd:dd:cf:c8:2d:a7:65:03:57:5a:2b:ae:
1c:68:30:52:8c:76:fe:aa:a4:a5:14:7d:20:06:f7:
fe:d2:17:62:e1:96:44:b0:4a:e5:e1:95:2e:41:83:
29:29:0c:8c:35:2a:99:60:91:8f:b7:ea:e2:cb:41:
06:19:a6:3c:1d:61:e5:00:22:d6:f8:cb:da:1c:4b:
34:e1:a6:b6:ac:19:35:31:11:17:e4:a2:dd:d2:0a:
38:dd:34:6d:14:94:3a:6e:70:3b:81:75:dc:58:c8:
91:8d:2a:58:3a:f0:c6:f6:ef:ac:1e:38:ad:a3:18:
74:3d:33:a1:3d:8d:e4:f4:e9:f6:c9:98:17:f8:86:
9c:d0:bd:4e:06:0f:13:fd:05:85:eb:b6:00:51:41:
ed:fb:9d:1a:4f:fa:4b:29:b8:b8:1c:d3:bf:0f:5d:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B0:6F:D4:2C:A7:B6:FE:C1:97:52:D2:37:87:20:46:19:EE:AB:76
X509v3 Authority Key Identifier:
keyid:4F:BD:45:FC:E3:56:E2:A6:5F:1E:4D:1D:AF:78:14:B6:D6:BD:A3:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T71F_ONW4qZfHk0dr3gUtta9o8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/fbBv1Cyntv7Bl1LSN4cgRhnuq3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/394c93-dca3-4bc5-8c9b-23481bf091c3/1/T71F_ONW4qZfHk0dr3gUtta9o8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.32.184.0/21
84.32.250.0/24
88.216.93.0/24
Signature Algorithm: sha256WithRSAEncryption
20:a5:b9:70:ea:4c:54:09:13:3e:33:80:a2:47:00:54:6c:c7:
c9:3e:8b:63:d9:1e:af:e5:42:58:28:c7:b0:23:96:f0:6b:37:
7d:d8:bc:12:c5:a7:61:72:0b:4d:9c:5e:c5:05:a1:71:96:12:
4d:88:17:ab:c6:fa:6b:09:47:6f:e7:a5:5a:d1:27:8a:db:e5:
a5:93:ea:5f:80:c3:29:fc:39:76:b1:cb:e7:1f:7b:33:de:70:
b8:58:b3:22:a2:d1:3b:f7:fb:08:30:03:b7:48:57:07:47:ee:
fe:36:c8:98:c7:c9:c7:a5:3d:f6:67:5b:40:6f:d8:9b:2d:40:
0b:07:15:00:37:b6:bd:76:f0:63:c5:e2:ff:37:ef:59:36:44:
07:75:49:8f:bc:25:05:54:71:93:f6:bf:a8:30:f0:22:81:5e:
23:8b:17:41:e3:3a:cd:e2:a9:c6:36:e2:80:be:36:bb:cb:03:
b1:a3:a2:fa:55:b5:03:1b:73:7e:ee:e5:cc:b2:35:a3:dd:b6:
bf:7d:f3:22:92:97:fa:67:cf:20:d4:d2:da:ba:19:2b:15:31:
a9:11:6b:91:b9:aa:0e:a4:77:78:9f:eb:56:2a:4b:57:e7:7b:
f8:33:35:99:d1:c0:af:7c:02:81:cb:7a:d0:97:59:49:ff:80:
44:6a:be:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:34 2024 by rpki-client on console-fra.rpki-client.org