Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FegnOLT9BS2EkXV35N-HLBVf_6E.roa
File: FegnOLT9BS2EkXV35N-HLBVf_6E.roa (raw, json)
Hash identifier: Ac5eFVXWq5h2gYOIVPvboj+vl29FYRMATfW3px5/re0=
Subject key identifier: 15:E8:27:38:B4:FD:05:2D:84:91:75:77:E4:DF:87:2C:15:5F:FF:A1
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 0189BB0B2B24B59D7496FF545F8ADA9B1C3B
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FegnOLT9BS2EkXV35N-HLBVf_6E.roa
Signing time: Thu 03 Aug 2023 10:56:58 +0000
ROA not before: Thu 03 Aug 2023 10:56:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60117
IP address blocks: 92.114.93.0/24 maxlen: 24
89.35.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Sep 2023 05:43:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:bb:0b:2b:24:b5:9d:74:96:ff:54:5f:8a:da:9b:1c:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 3 10:56:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15e82738b4fd052d84917577e4df872c155fffa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:12:ae:77:8b:1d:4c:64:3b:5b:f8:4b:cb:fc:
08:a9:6c:0d:6a:57:57:70:8f:dc:fa:0e:fd:46:ec:
3d:2e:e5:b6:0b:2b:79:7b:6f:3b:09:76:a9:22:2a:
50:2f:e6:37:cb:58:fe:6c:26:91:55:e8:d5:a8:79:
4d:4d:24:5d:2f:9c:e9:c7:72:32:a1:fd:dd:2b:9c:
d0:26:fb:d0:1c:83:2f:ba:15:6e:a9:cd:b0:6e:0e:
0c:c2:55:8c:29:bd:86:d2:87:6a:a3:a3:25:cc:2c:
f9:d2:f1:60:c4:90:51:63:af:c4:94:91:fe:35:c4:
40:0c:f3:fb:4d:2c:e9:9c:35:ce:b1:88:c7:07:d8:
bc:e3:ce:9f:58:15:34:8d:52:50:20:11:0b:c2:f6:
ba:52:79:e0:18:a2:66:29:5c:10:f1:96:45:61:0e:
5a:a0:45:0f:ba:cd:4b:3a:eb:36:c0:71:52:18:77:
21:4f:0b:9d:c7:ce:6e:b7:75:11:06:87:62:56:23:
5f:1d:eb:ff:62:eb:24:50:34:45:ea:8d:c0:ca:a3:
9c:7c:28:0d:15:ae:90:04:69:72:99:af:fa:de:96:
4e:88:ce:5a:16:e7:77:0c:98:6f:24:95:3e:9b:0a:
e3:b7:dc:77:24:2f:46:5c:6b:76:87:0f:75:f7:5e:
47:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:E8:27:38:B4:FD:05:2D:84:91:75:77:E4:DF:87:2C:15:5F:FF:A1
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/FegnOLT9BS2EkXV35N-HLBVf_6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.35.129.0/24
92.114.93.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:5b:99:ef:34:03:81:8d:6f:fc:4e:7e:03:f1:5d:2e:d2:cc:
26:04:8c:1d:53:a5:26:b3:68:04:05:86:ce:d8:7c:19:29:92:
5a:9e:dd:c1:b6:1f:b1:39:e9:70:20:a4:30:c8:cc:7b:b6:fa:
bb:81:cb:ab:47:55:65:8d:14:0b:74:15:4e:ac:ef:62:ee:24:
0e:05:e6:a0:8c:54:cb:19:96:35:50:6d:57:6b:46:7e:d3:73:
ee:dc:bc:33:a3:fc:54:57:69:c4:b4:68:58:75:05:42:f4:f7:
37:20:17:4f:00:c8:e2:5d:50:3a:b2:68:e6:67:96:eb:6b:ca:
1c:c9:30:4f:a1:94:d3:73:91:17:b9:f7:cc:b1:4b:06:c8:24:
64:31:63:ea:e0:90:db:7b:b7:59:0b:44:8c:d7:e5:c2:d2:eb:
b3:2c:7b:35:bd:f4:95:a8:09:fc:f9:d0:47:e2:be:14:f1:fa:
d0:e9:66:00:39:f2:b7:13:3c:8b:5c:65:6a:c6:02:0f:90:9b:
f3:ce:92:e3:39:3e:47:45:e6:c2:fe:40:48:8f:c2:d0:25:bc:
42:a2:5e:4e:2d:0c:3d:c9:b7:84:d1:7c:2d:fc:4b:fa:a1:f4:
94:f7:6d:55:db:5e:f5:78:f7:ba:96:80:59:56:fc:3b:48:b2:
14:4d:fb:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:15:12 2024 by rpki-client on console-ams.rpki-client.org