Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FiFxiLxjDCOXySgIulKezwSqniY.roa
File: FiFxiLxjDCOXySgIulKezwSqniY.roa (raw, json)
Hash identifier: I4rHNAJd5/BDnBtog0O4Iib+mf2tDfOoLwKd5y3qQ2I=
Subject key identifier: 16:21:71:88:BC:63:0C:23:97:C9:28:08:BA:52:9E:CF:04:AA:9E:26
Certificate issuer: /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial: 018ECCD3599FB4D8861AD60754C2373C8DEA
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FiFxiLxjDCOXySgIulKezwSqniY.roa
Signing time: Thu 11 Apr 2024 11:03:06 +0000
ROA not before: Thu 11 Apr 2024 11:03:06 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215179
IP address blocks: 93.92.199.0/24 maxlen: 24
94.125.14.0/24 maxlen: 24
109.71.177.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 Apr 2024 09:54:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:cc:d3:59:9f:b4:d8:86:1a:d6:07:54:c2:37:3c:8d:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
Validity
Not Before: Apr 11 11:03:06 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16217188bc630c2397c92808ba529ecf04aa9e26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:00:3c:cc:3b:48:70:bd:84:7f:7f:58:38:85:
19:bc:1c:eb:36:02:4c:df:68:69:f9:96:09:6a:79:
be:14:fc:3c:31:58:d7:b8:13:7a:74:83:05:b0:9f:
eb:1e:dc:e9:de:6a:78:5e:19:c9:14:7d:28:84:5c:
53:4d:f7:ca:e9:6a:f3:86:5f:14:54:a0:f0:89:3b:
1e:20:eb:a1:c7:56:8c:1c:1b:70:f2:c5:e8:eb:af:
9e:26:1a:97:99:89:c4:63:21:11:8f:9e:65:57:cd:
83:5f:a9:b7:f1:80:5e:60:49:98:5c:56:41:7b:d6:
f2:cb:7c:49:51:ca:9f:c7:83:37:c4:dd:e7:b6:2d:
0b:6c:64:21:eb:db:85:a5:b3:45:d7:06:be:d8:ee:
e5:36:48:e6:f7:1b:75:9f:1b:d6:a3:42:67:a6:83:
da:35:8b:12:b7:21:f0:3c:81:59:eb:42:51:c2:c2:
f4:f1:53:f0:c5:ce:81:d7:58:82:b1:9f:87:87:6f:
0d:6b:f6:34:21:18:cf:d6:1d:91:22:a3:d4:04:b6:
b3:ae:48:66:43:7f:ab:ca:de:5e:f0:c6:c5:fd:0d:
74:e1:7c:cf:67:ff:d6:ec:f0:ad:54:e4:6e:1f:b6:
5b:63:e2:ec:59:55:14:62:ad:95:13:9b:0f:0a:ab:
b1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:21:71:88:BC:63:0C:23:97:C9:28:08:BA:52:9E:CF:04:AA:9E:26
X509v3 Authority Key Identifier:
keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/FiFxiLxjDCOXySgIulKezwSqniY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.92.199.0/24
94.125.14.0/24
109.71.177.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:fc:3b:e4:69:d7:c1:98:50:be:d0:07:cd:2c:ca:9c:3a:4f:
67:74:f9:0d:15:ac:11:31:c3:09:eb:0b:5c:93:8d:7b:0e:87:
97:46:6b:38:11:37:f6:57:c7:27:09:d2:fe:2b:dd:dd:71:ce:
57:9a:e7:c7:d6:dc:db:b5:01:07:ed:c3:c4:17:d9:c4:47:b4:
c3:49:13:0b:37:e7:55:ec:34:fb:d5:87:dd:d1:68:4d:a4:e6:
ff:a0:03:d6:ae:0b:c3:9d:f5:56:5d:67:a2:77:6b:5c:c9:05:
16:39:86:ef:cd:7e:40:0c:5b:27:80:09:7f:64:05:7e:07:21:
30:94:ea:9f:b3:09:a8:38:ce:80:73:dd:6b:11:29:af:d4:90:
e1:6e:2d:74:70:c4:8f:5c:c8:3a:63:ae:98:b0:bc:6b:04:fc:
92:ec:c9:85:50:27:2c:59:bf:da:fa:a1:33:d3:7f:c6:2a:7d:
6e:fa:fb:a3:9e:36:11:b0:27:65:18:c4:b5:ec:d2:f2:70:9d:
32:d0:2d:2e:15:79:c2:db:64:c5:87:fc:6a:73:a1:ea:09:b3:
a5:2d:ee:8f:ef:73:05:d6:da:3b:79:f2:e0:11:36:aa:20:67:
55:fe:78:f1:33:c0:d7:b9:36:a5:71:88:90:7e:6a:df:13:9d:
8a:57:46:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:37:37 2025 by rpki-client