Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FB-C-IN09BgpJGi8Na8i4MTIRvQ.roa
File: FB-C-IN09BgpJGi8Na8i4MTIRvQ.roa (raw, json)
Hash identifier: FxRq9jYkfX97ZnbVn5qZ7Is7qQKqOhhEpqlGwD5S6KA=
Subject key identifier: 14:1F:82:F8:83:74:F4:18:29:24:68:BC:35:AF:22:E0:C4:C8:46:F4
Certificate issuer: /CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Certificate serial: 018CC2DAB1D653F5E5806D0248B1AA2A61D4
Authority key identifier: B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FB-C-IN09BgpJGi8Na8i4MTIRvQ.roa
Signing time: Mon 01 Jan 2024 02:29:21 +0000
ROA not before: Mon 01 Jan 2024 02:29:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42689
IP address blocks: 188.215.83.0/24 maxlen: 24
188.215.85.0/24 maxlen: 24
188.215.81.0/24 maxlen: 24
188.215.82.0/24 maxlen: 24
188.215.86.0/24 maxlen: 24
188.215.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 17 Jan 2024 19:18:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:b1:d6:53:f5:e5:80:6d:02:48:b1:aa:2a:61:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8c8aa18730f4a83e2852c5692551abb5b1ee7ea
Validity
Not Before: Jan 1 02:29:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=141f82f88374f418292468bc35af22e0c4c846f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:fc:4c:f5:19:96:b8:61:1f:07:d8:96:90:25:
b2:cb:40:d5:de:76:7a:81:71:99:6c:aa:e1:95:08:
83:50:62:ae:52:00:e4:99:11:c0:ae:c5:c8:a2:27:
80:7f:15:43:6e:5c:5a:76:83:b7:52:8f:22:b8:c1:
26:91:56:29:be:09:46:2d:5d:47:f6:c4:66:cc:e5:
a4:a1:1d:8d:a0:3f:1e:b0:4d:76:93:a4:30:00:75:
ca:27:21:6d:36:92:93:d1:74:75:ad:d2:b0:0c:70:
03:ce:16:fb:87:a4:52:d1:ac:e4:78:c6:67:c0:5c:
fd:de:d3:47:6f:3e:a4:9a:4e:e0:c4:b5:cd:ae:0f:
f9:e8:0f:5e:55:c5:1f:4d:60:e9:bb:61:90:eb:c4:
b3:79:84:74:17:9f:df:9b:67:0d:49:a4:df:8e:d8:
cc:62:36:85:8e:90:b0:a0:d9:49:1d:73:6a:3d:76:
6e:66:89:3e:8e:41:03:f2:69:a5:d2:db:29:63:88:
d5:aa:04:43:36:49:0f:e8:1e:78:98:16:fe:71:7c:
c9:9a:54:da:b1:a5:d5:d2:36:62:95:71:51:fb:8f:
56:86:f3:8e:78:13:6e:0d:2d:98:1f:1d:52:75:56:
2a:dc:be:af:df:f0:98:be:b3:cc:62:02:1f:d6:2b:
27:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:1F:82:F8:83:74:F4:18:29:24:68:BC:35:AF:22:E0:C4:C8:46:F4
X509v3 Authority Key Identifier:
keyid:B8:C8:AA:18:73:0F:4A:83:E2:85:2C:56:92:55:1A:BB:5B:1E:E7:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uMiqGHMPSoPihSxWklUau1se5-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/FB-C-IN09BgpJGi8Na8i4MTIRvQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/a94992-566b-4b6f-a689-a57604a3f6bb/1/uMiqGHMPSoPihSxWklUau1se5-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.215.81.0-188.215.83.255
188.215.85.0-188.215.87.255
Signature Algorithm: sha256WithRSAEncryption
20:0e:e2:57:6a:a7:90:b2:5a:ce:77:cc:d2:99:d1:ea:91:b9:
b4:31:c7:bd:40:e2:fb:88:4f:00:ae:c7:16:a5:58:64:09:9c:
6e:87:32:43:84:69:09:9f:f7:c2:b3:6e:d4:f8:01:a9:d4:1d:
62:2c:77:a4:25:a6:8c:a3:69:44:fc:e4:b2:69:93:d9:f8:98:
fd:03:42:00:dc:20:6d:84:48:91:95:e4:3b:ea:bd:3b:53:9f:
2b:94:aa:83:eb:0e:53:3e:76:ff:a5:64:89:11:81:a0:1f:5e:
ad:e7:cc:0c:b2:23:4c:48:84:c7:56:58:33:be:aa:02:38:9b:
61:a4:4a:d8:d5:57:b1:42:c8:72:ee:f2:59:3f:eb:8f:b5:76:
28:95:f8:8a:c1:d7:80:14:8f:63:5b:65:9b:da:e3:e4:9e:bf:
86:ff:12:15:5d:ce:2e:7c:ff:b3:c5:fe:07:ec:b1:cb:12:97:
c1:5e:1a:82:9d:df:85:db:c4:3f:c5:e8:a2:9c:eb:cf:a5:d7:
f3:8d:91:49:f8:93:24:17:57:6f:79:04:8d:88:a7:55:d3:9b:
06:c7:e3:4f:10:f2:c1:87:bc:1a:81:64:d3:07:05:c7:e9:c0:
54:a4:aa:87:46:c6:94:65:a7:e8:8c:4e:a5:fb:7c:46:61:ac:
2b:c3:dd:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:04 2024 by rpki-client on console-fra.rpki-client.org