Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/_FYGRzwDZbuqOgQ_U-DTAOKBjbQ.roa
File: _FYGRzwDZbuqOgQ_U-DTAOKBjbQ.roa (raw, json)
Hash identifier: eg99+OEbCQgK7pj3oJt3FdVPgrmTJZLWD+A4wiPv5ds=
Subject key identifier: FC:56:06:47:3C:03:65:BB:AA:3A:04:3F:53:E0:D3:00:E2:81:8D:B4
Certificate issuer: /CN=f811fa5eff370bc36d0e3929625e3414081a2392
Certificate serial: 01856EA6C300A407F83C80FE07D2A2939211
Authority key identifier: F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/_FYGRzwDZbuqOgQ_U-DTAOKBjbQ.roa
Signing time: Sun 01 Jan 2023 18:45:00 +0000
ROA not before: Sun 01 Jan 2023 18:45:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205063
IP address blocks: 94.127.93.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:c3:00:a4:07:f8:3c:80:fe:07:d2:a2:93:92:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f811fa5eff370bc36d0e3929625e3414081a2392
Validity
Not Before: Jan 1 18:45:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5606473c0365bbaa3a043f53e0d300e2818db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2c:36:18:e6:5e:f4:4c:b2:a4:7c:b0:3c:d4:
ad:00:fb:84:cb:f9:de:1f:dd:5e:db:61:12:70:c8:
6e:0d:78:22:04:f5:ec:8b:48:99:5f:8c:cc:bb:da:
4b:92:e4:19:19:6d:db:ac:50:e8:fa:92:d6:8e:f5:
d3:e4:79:48:5b:69:41:91:e2:f3:eb:87:2c:ed:74:
81:3b:b4:47:9b:07:58:0a:96:7d:7c:d6:a4:1d:b7:
f6:90:5c:10:06:57:3e:fa:17:c9:97:60:b4:75:3a:
16:49:d6:a2:0b:75:29:38:77:9e:92:f2:b3:e2:6a:
f8:54:33:5d:b8:53:e0:ba:4b:83:3a:fa:de:e0:6d:
e5:31:fa:f2:5e:60:8e:7a:80:e9:14:37:a6:4c:d0:
5f:ba:5c:b8:e2:27:7b:f3:cc:f3:04:a4:4f:0d:b1:
f9:7e:5a:40:51:00:d6:49:68:e7:ee:3d:b5:c0:a3:
b0:b1:a0:cc:6b:5b:50:e1:2f:b2:52:42:43:b1:f1:
71:80:56:e6:70:4b:1a:a4:d5:59:e6:7e:47:11:05:
67:6d:6a:ba:98:db:d8:5f:0f:d2:8a:f2:f1:d2:44:
31:0a:8e:4f:c2:34:54:b4:5c:5e:1b:9a:23:a7:56:
6f:13:00:99:10:76:cb:b5:f7:d4:bb:81:5e:4d:ac:
e7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:56:06:47:3C:03:65:BB:AA:3A:04:3F:53:E0:D3:00:E2:81:8D:B4
X509v3 Authority Key Identifier:
keyid:F8:11:FA:5E:FF:37:0B:C3:6D:0E:39:29:62:5E:34:14:08:1A:23:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-BH6Xv83C8NtDjkpYl40FAgaI5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/_FYGRzwDZbuqOgQ_U-DTAOKBjbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4a293d-2ad3-4114-a2b1-1cc505501a0f/1/1-BH6Xv83C8NtDjkpYl40FAgaI5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.127.93.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ad:f3:e1:d7:e3:88:7f:f3:22:26:98:09:61:01:fd:65:49:
2e:1c:ed:b2:e5:97:59:57:55:8b:4c:09:43:4b:7c:d4:75:d3:
64:54:c4:94:b9:3d:d9:ad:35:4c:cc:d1:bd:07:26:ac:8e:ad:
47:91:25:c8:d8:a6:0b:f7:4d:0b:e4:93:b0:c1:a1:16:e6:32:
12:ee:b1:8b:32:d1:93:76:c6:b4:64:ce:1c:d1:88:97:8f:0d:
23:98:85:ec:ca:af:b7:cd:36:8c:30:5f:5b:31:9f:dd:56:57:
58:15:70:2f:07:cb:bf:49:06:ad:4f:34:de:a6:07:92:9b:bd:
6e:f4:2b:bc:ed:ee:4a:7b:66:10:c3:60:5a:bf:75:c4:7f:30:
23:12:04:ce:40:b6:42:75:1c:8e:30:bd:e2:cb:72:35:db:3e:
f1:d0:ab:7a:06:60:28:ac:c7:d9:25:18:b3:96:c4:f9:53:4c:
0f:f9:2a:0e:28:c3:df:0b:5e:0c:08:a3:89:35:49:6a:0d:bc:
23:17:b9:8b:0d:ce:b2:82:09:15:1e:93:bf:4e:39:44:b5:94:
d0:c3:7c:2b:7e:22:69:4f:88:88:d7:2f:f3:9e:9c:58:e6:07:
db:39:b6:ba:90:cd:9f:52:ee:02:47:c4:a7:c4:37:c0:10:7a:
57:d4:3e:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:19:36 2024 by rpki-client on console-fra.rpki-client.org