Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FzpjVUliL_fPVuFZvk0irXbyB7E.roa
File: FzpjVUliL_fPVuFZvk0irXbyB7E.roa (raw, json)
Hash identifier: 5YWmcbhzvREiNwGAoccaw6Cpylk6ehgg9gXxa+N5+kU=
Subject key identifier: 17:3A:63:55:49:62:2F:F7:CF:56:E1:59:BE:4D:22:AD:76:F2:07:B1
Certificate issuer: /CN=885b857706dac54e20ca0d11bd6416cb634203b4
Certificate serial: 018572BA4E38532515F7545551B7882F8928
Authority key identifier: 88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FzpjVUliL_fPVuFZvk0irXbyB7E.roa
Signing time: Mon 02 Jan 2023 13:44:50 +0000
ROA not before: Mon 02 Jan 2023 13:44:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49181
IP address blocks: 188.130.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:ba:4e:38:53:25:15:f7:54:55:51:b7:88:2f:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=885b857706dac54e20ca0d11bd6416cb634203b4
Validity
Not Before: Jan 2 13:44:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=173a635549622ff7cf56e159be4d22ad76f207b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d8:70:84:8e:a8:ab:b9:9b:76:c6:10:0d:f4:
b0:5d:ce:46:83:f1:30:90:4f:2e:02:70:df:fd:fd:
50:c9:41:a4:d9:23:82:6d:70:2f:84:7c:03:66:16:
bb:88:62:c4:64:80:15:44:53:79:f9:09:c1:d4:08:
a8:af:ba:40:73:ae:93:f6:d6:e7:4e:f6:91:59:88:
96:ad:fc:87:9a:53:4b:24:c2:47:9d:2a:14:dc:eb:
96:59:43:9e:cc:14:ec:54:f2:e3:9d:19:1f:48:a7:
ee:e9:fb:eb:51:bc:f7:16:e0:58:83:89:1a:64:64:
8d:ad:32:f6:76:0d:bf:de:8f:4d:6b:fc:f7:f7:17:
ac:51:fe:91:95:14:62:d8:c4:93:cb:15:f9:40:ef:
38:aa:26:be:88:7d:81:8f:5d:c2:81:9c:e5:d5:24:
d2:a8:3c:b0:14:9d:60:6f:bc:24:fd:e4:92:82:d2:
0b:13:2b:e7:e2:41:6f:0e:52:29:12:c9:69:61:0b:
7e:25:22:73:54:69:21:41:2d:5a:00:98:9f:f3:f0:
09:02:37:3b:7e:5d:db:c2:e4:e8:1b:b0:73:86:04:
75:8c:b3:bd:61:29:02:8e:2e:3a:ad:ef:d8:97:38:
43:09:58:b7:03:f2:d8:45:a2:d8:6c:97:47:bf:04:
c0:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:3A:63:55:49:62:2F:F7:CF:56:E1:59:BE:4D:22:AD:76:F2:07:B1
X509v3 Authority Key Identifier:
keyid:88:5B:85:77:06:DA:C5:4E:20:CA:0D:11:BD:64:16:CB:63:42:03:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/FzpjVUliL_fPVuFZvk0irXbyB7E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/321cdc-2143-4b5c-9733-16699c96dd5e/1/iFuFdwbaxU4gyg0RvWQWy2NCA7Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.130.254.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:38:8c:c0:85:dc:d3:e1:90:45:cf:33:ce:40:bc:01:69:e8:
c7:07:b1:ea:38:b0:92:4c:7d:d7:bd:57:44:05:2c:1f:4b:ac:
4d:6a:62:62:3b:de:96:03:4b:bc:40:6e:66:50:b6:b0:39:15:
69:e8:fe:5c:be:14:bd:c0:c5:10:01:95:49:ab:7f:17:99:c6:
c1:34:39:1f:6f:a4:14:be:23:e8:5a:87:55:46:f5:ea:8d:db:
8c:b6:13:ed:f3:e1:a4:7a:57:18:99:c7:72:44:39:6f:8b:60:
37:2e:b4:19:9f:4c:8f:31:b1:ee:f9:ac:b2:70:d0:91:eb:4e:
13:3e:77:b5:fc:ee:e6:6a:67:64:d9:26:a9:18:b4:1e:3c:15:
e7:93:f8:59:f2:1f:f4:f4:f9:0e:f0:8d:ac:05:6f:6a:bd:db:
2f:c3:70:da:b8:b9:58:49:0b:cc:36:66:3f:f9:38:0c:a8:64:
36:c7:29:31:a5:fe:21:e6:b7:5b:3e:70:6d:ea:e7:ca:85:0d:
43:e1:8f:d3:5f:52:13:69:cc:4c:35:46:71:ae:56:4d:3e:20:
c3:30:d9:ce:1e:d6:68:64:73:7f:df:c2:49:88:6b:d2:7c:03:
df:45:ae:3d:a3:9b:14:d6:da:d6:c5:ae:94:f3:40:08:62:f1:
58:f6:cd:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:57 2024 by rpki-client on console-fra.rpki-client.org