Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/FfpegNNOqyZKVtHuoqWXArPaBms.roa
File: FfpegNNOqyZKVtHuoqWXArPaBms.roa (raw, json)
Hash identifier: hymxI9zzyaGucaAI5g2AvNxqPEqSUtvs0QTFHHKx/mw=
Subject key identifier: 15:FA:5E:80:D3:4E:AB:26:4A:56:D1:EE:A2:A5:97:02:B3:DA:06:6B
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 0191A343EB055CE9ECEACBD0CFB1C462FA80
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/FfpegNNOqyZKVtHuoqWXArPaBms.roa
Signing time: Fri 30 Aug 2024 12:30:22 +0000
ROA not before: Fri 30 Aug 2024 12:30:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 207645
IP address blocks: 95.111.128.0/20 maxlen: 20
Validation: Failed, certificate revoked on Tue 15 Oct 2024 06:35:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:a3:43:eb:05:5c:e9:ec:ea:cb:d0:cf:b1:c4:62:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Aug 30 12:30:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15fa5e80d34eab264a56d1eea2a59702b3da066b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fe:f4:d8:ea:f8:61:66:e9:8d:14:07:9a:22:
2e:a6:ce:e9:0e:bb:de:f2:bf:5a:c3:87:56:48:99:
c2:01:bf:58:26:92:86:b7:a2:59:22:61:a2:e5:c5:
5d:38:dc:60:c9:9f:7e:8c:54:61:73:b8:45:cd:c2:
49:de:c1:8d:7b:48:b1:69:41:98:cc:7d:e3:ab:f4:
22:36:8b:c0:58:59:26:6a:08:6a:8c:34:9d:c8:74:
c1:1c:86:ad:4d:c2:6a:b6:5e:11:e0:cd:54:aa:80:
36:24:1f:11:81:16:50:ea:dc:db:16:23:56:e9:41:
e8:02:dc:09:58:55:f6:b3:14:7f:c4:06:26:25:e5:
75:1b:7e:9a:10:8e:0d:28:d3:0a:74:a2:f9:72:4b:
c9:59:3f:ae:40:94:a3:f7:4a:f3:95:d4:de:16:04:
24:44:7c:08:18:d3:b9:ec:03:06:da:26:a2:ea:1c:
dc:9c:49:64:d9:ae:68:ec:ec:4b:1c:e8:70:16:02:
0d:b6:69:ee:d2:05:f9:64:cb:1d:f1:bf:ae:6f:1d:
dd:71:61:05:17:bd:29:6b:19:b9:d3:07:2c:af:6d:
78:db:6e:42:32:f1:e5:6d:c2:80:f4:3e:53:72:d4:
b8:40:f7:89:ba:07:95:3f:5e:e9:38:5e:cf:77:e0:
46:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:FA:5E:80:D3:4E:AB:26:4A:56:D1:EE:A2:A5:97:02:B3:DA:06:6B
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/FfpegNNOqyZKVtHuoqWXArPaBms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.111.128.0/20
Signature Algorithm: sha256WithRSAEncryption
64:4b:b7:e6:df:84:82:f5:94:43:b9:a2:0a:79:f2:37:8f:56:
27:02:83:2a:d7:fe:46:50:61:10:1e:67:b9:7a:ba:38:db:25:
c4:67:ac:36:f5:b2:81:fc:7f:c0:ea:cd:a6:3f:ed:3b:2a:b4:
c4:e2:fa:72:58:46:a4:ab:6b:45:d2:41:0b:8a:c8:48:a9:7e:
78:0e:9c:1b:d0:4b:29:8d:8e:93:8e:96:a8:32:f6:a7:f2:97:
29:f2:eb:5a:c0:75:e6:e5:53:de:0b:82:d1:a4:76:dc:1b:bc:
4c:ff:5e:75:7c:7e:1d:f3:c5:ca:86:3d:9f:93:d3:86:be:d9:
90:50:4c:03:28:9b:f2:3a:ff:f3:aa:05:d1:7b:a5:2c:8f:70:
6f:5f:e5:f5:54:e1:42:3f:9c:4e:f3:04:6c:21:69:65:b3:82:
64:1c:64:fd:6e:9c:57:0e:ae:f2:aa:9e:c0:54:0d:45:06:b1:
a6:75:8c:b6:75:7b:f0:5b:87:e9:8d:b9:d1:1d:8f:15:e6:5b:
7e:0d:16:0e:5e:b7:ae:34:82:25:96:68:b2:01:f7:2c:4a:4c:
bc:cc:b1:eb:c0:bf:3b:85:a4:0b:08:4b:26:02:b3:b1:dc:16:
6b:de:fb:82:93:05:5c:4c:d2:6b:86:a1:23:80:3d:58:50:db:
76:b1:ca:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 15 07:24:11 2024 by rpki-client on console-fra.rpki-client.org