Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/FCS6X3LsodJPXk3Akm2ByQyTk98.roa
File: FCS6X3LsodJPXk3Akm2ByQyTk98.roa (raw, json)
Hash identifier: dxDjjoFUqU25ktbyJHyPRqSOWCGBMnyovC4rVN1SAUU=
Subject key identifier: 14:24:BA:5F:72:EC:A1:D2:4F:5E:4D:C0:92:6D:81:C9:0C:93:93:DF
Certificate issuer: /CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Certificate serial: 018D616B4560310FFA41EBA7B95C1B91E9B3
Authority key identifier: 4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/FCS6X3LsodJPXk3Akm2ByQyTk98.roa
Signing time: Wed 31 Jan 2024 21:27:16 +0000
ROA not before: Wed 31 Jan 2024 21:27:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 7029
IP address blocks: 161.8.128.0/19 maxlen: 24
161.8.160.0/20 maxlen: 24
Validation: Failed, certificate revoked on Mon 05 Feb 2024 14:49:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:61:6b:45:60:31:0f:fa:41:eb:a7:b9:5c:1b:91:e9:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd954d3c77c9c4e37eebf753d86f3dcf091d4a9
Validity
Not Before: Jan 31 21:27:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1424ba5f72eca1d24f5e4dc0926d81c90c9393df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a0:79:12:20:9d:a3:29:e3:89:b7:82:9a:ae:
de:5c:33:8a:2c:64:68:2b:78:9e:e3:10:af:33:7a:
6b:b8:ae:f5:6d:a0:d7:91:9d:72:7b:3a:a5:89:6e:
52:42:23:81:48:be:d4:2c:7d:d2:d1:9b:91:6b:ad:
ce:44:24:ed:45:92:79:04:ef:3c:63:f0:14:0d:06:
8b:f1:8a:4b:b3:0f:c4:89:f8:95:b9:c3:23:45:22:
4b:e6:af:5b:d8:b5:48:f7:6b:c8:6d:8f:8e:34:37:
03:4b:20:f1:e0:cb:75:64:a8:2e:9d:be:bf:a1:20:
6b:e0:b7:0c:a0:ad:74:1d:0c:f8:25:87:fa:1f:e2:
b7:08:cc:1f:7d:b8:6f:e8:ca:b7:b9:19:0e:c7:f2:
5f:6e:d2:89:26:a1:d2:07:f1:4c:b0:80:74:57:82:
74:e6:2d:5e:ee:de:f5:f2:b7:2e:c6:45:e7:e9:4b:
f0:16:87:59:8e:b2:67:99:23:a8:da:62:94:72:f3:
c6:45:d5:67:2a:12:49:b9:4b:40:1a:01:1a:d6:e0:
25:7c:e9:f5:53:97:b2:4a:9d:ed:79:57:ec:97:78:
a1:7c:d4:ce:22:1d:59:a5:f5:a7:5e:1d:38:2c:21:
6c:31:15:5a:1a:6a:5e:eb:0d:5e:09:ca:9b:a7:8a:
e4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:24:BA:5F:72:EC:A1:D2:4F:5E:4D:C0:92:6D:81:C9:0C:93:93:DF
X509v3 Authority Key Identifier:
keyid:4D:D9:54:D3:C7:7C:9C:4E:37:EE:BF:75:3D:86:F3:DC:F0:91:D4:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TdlU08d8nE437r91PYbz3PCR1Kk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/FCS6X3LsodJPXk3Akm2ByQyTk98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7a2a99-146c-4781-a302-eb7aaa6828be/1/TdlU08d8nE437r91PYbz3PCR1Kk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
161.8.128.0-161.8.175.255
Signature Algorithm: sha256WithRSAEncryption
48:2a:cd:e5:45:2f:bd:95:69:cc:58:fc:d4:4f:0f:aa:84:c2:
eb:fe:4e:b7:b6:30:a6:4b:7d:c3:04:04:31:e5:34:59:6a:e0:
85:78:39:74:8c:61:cc:b5:0e:6f:2b:f9:93:47:6f:ca:77:28:
ca:dc:b3:1d:6b:2a:02:8d:e2:86:fc:0c:96:0f:41:0d:26:41:
5b:1e:a9:bd:12:eb:6d:b9:16:11:10:99:ab:e8:02:c9:bb:11:
35:31:07:6c:71:43:0e:8d:9b:9e:b2:95:22:a7:03:19:b5:db:
20:c4:c8:b3:73:3b:ff:36:17:0f:26:d6:dc:59:2e:f3:28:9a:
6c:7b:2a:12:e1:0f:90:3e:69:e8:d8:73:c6:9c:be:57:7f:19:
e5:ff:a0:ea:52:6f:73:ae:f8:3b:9c:de:97:88:06:d6:54:ce:
44:0e:4d:ac:d3:0d:9b:a1:a4:09:70:8a:cd:b5:81:f8:a6:9a:
9a:72:71:7c:91:0b:8c:1f:3c:5d:44:4c:cc:fd:cb:08:04:e1:
fd:a0:7e:0a:0d:c0:4d:f5:72:ee:91:9d:db:6d:fb:11:3a:34:
29:2b:5c:7f:79:52:b5:e7:4f:23:41:5e:e2:94:54:d3:b8:fa:
e5:aa:f9:a0:78:3f:74:28:88:bd:8c:4a:35:60:8a:da:6f:3a:
85:f1:24:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:12:14 2024 by rpki-client on console-ams.rpki-client.org