Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/FCiuNPJBuHzypLMIv28eHPZX17s.roa
File: FCiuNPJBuHzypLMIv28eHPZX17s.roa (raw, json)
Hash identifier: 8NdMn06CoG6AWijuN8i9laGf82HQI7Vpzebuq5NPA2M=
Subject key identifier: 14:28:AE:34:F2:41:B8:7C:F2:A4:B3:08:BF:6F:1E:1C:F6:57:D7:BB
Certificate issuer: /CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Certificate serial: 019251D15F7C65A40042E9034BB557D9F02E
Authority key identifier: D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/FCiuNPJBuHzypLMIv28eHPZX17s.roa
Signing time: Thu 03 Oct 2024 09:58:48 +0000
ROA not before: Thu 03 Oct 2024 09:58:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 194.165.27.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:51:d1:5f:7c:65:a4:00:42:e9:03:4b:b5:57:d9:f0:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98247d3f81472dbba06dbea9bd19c785d18babe
Validity
Not Before: Oct 3 09:58:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1428ae34f241b87cf2a4b308bf6f1e1cf657d7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fc:13:2b:21:a0:21:e8:8f:da:4d:62:e7:7b:
e1:a4:af:6c:ac:d0:08:09:0a:20:13:91:ee:18:8e:
34:28:68:ec:1f:33:69:60:fc:6b:78:f7:5f:49:29:
8d:c8:d2:82:93:1d:46:90:39:fd:ad:14:12:4c:ed:
40:f9:05:59:04:81:7b:4f:19:87:1a:21:c6:99:4f:
5a:22:a7:0a:2f:9b:87:4a:46:07:bb:4e:5e:d8:57:
01:c2:c7:1b:47:f3:22:b0:2d:f2:a1:ce:81:c4:70:
f5:d3:5d:fa:b8:22:4a:f8:3d:a3:1c:7b:c7:f1:f4:
f4:eb:99:db:93:a7:35:87:d7:56:18:f0:6c:f7:1c:
68:7c:ae:51:ce:90:93:98:43:cc:ad:f5:ff:29:a7:
1c:98:41:8c:a7:b2:52:14:40:84:6f:d6:55:2d:84:
e3:9e:47:46:ff:8a:df:78:00:ed:0f:62:d2:5c:d4:
54:0f:19:dd:f2:81:96:b1:15:7b:c9:b5:53:37:ba:
73:da:fb:95:e4:b1:ca:49:55:e6:11:5b:db:7e:ec:
45:c4:cf:97:8a:e2:56:86:5a:32:35:70:55:6e:8c:
1f:4f:cd:d7:24:10:82:7b:0e:f8:21:83:c4:0e:13:
b6:1e:28:2d:8b:c9:f5:17:73:3f:bf:f9:4a:d7:48:
75:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:28:AE:34:F2:41:B8:7C:F2:A4:B3:08:BF:6F:1E:1C:F6:57:D7:BB
X509v3 Authority Key Identifier:
keyid:D9:82:47:D3:F8:14:72:DB:BA:06:DB:EA:9B:D1:9C:78:5D:18:BA:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YJH0_gUctu6Btvqm9GceF0Yur4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/FCiuNPJBuHzypLMIv28eHPZX17s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/6dbc99-bfa9-4ef7-a798-a3032615660c/1/2YJH0_gUctu6Btvqm9GceF0Yur4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.165.27.0/24
Signature Algorithm: sha256WithRSAEncryption
12:a6:a5:df:88:7a:9d:9a:ec:c1:bc:53:98:d4:80:11:49:da:
3e:21:80:f0:7c:9f:62:56:31:cc:86:69:9d:44:91:4e:a2:1f:
9d:15:e0:81:49:67:a1:0f:9b:8f:7d:08:1c:7e:f3:2c:a2:af:
5f:20:1c:a3:a5:51:7a:fb:96:fc:69:b6:62:99:a2:71:9e:1e:
38:45:19:3a:d1:49:e3:16:cf:4e:ee:3f:b1:da:5b:1a:6d:66:
60:d8:8d:10:9b:8a:7c:42:ef:d4:b5:41:1a:6c:46:1d:8f:22:
d4:d7:40:17:65:3a:c8:46:29:68:5a:36:52:0a:b4:aa:5c:60:
8a:a6:24:d5:46:1f:ce:22:83:bc:33:5b:98:03:9b:5f:e6:6d:
0e:b7:4f:a0:8c:13:02:a5:da:92:40:e9:b9:c0:af:b6:ef:93:
95:78:d4:cc:3f:91:cc:dc:18:d8:42:8e:25:59:8d:04:44:81:
81:08:a6:72:ba:ce:b0:65:75:d4:2b:d4:46:19:a4:f3:f6:1d:
10:ab:d7:80:ee:eb:35:40:63:40:24:2f:ff:5c:cf:0a:e0:0c:
70:67:e8:85:a7:39:62:1a:43:c6:f8:4c:11:f0:8b:6e:1a:3c:
56:1d:20:83:25:cb:58:a3:a7:ee:3a:e9:85:54:cb:77:d7:ee:
50:c8:93:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:03:56 2025 by rpki-client