Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FsprxtSc5n3Eoeq6q12szmBjd_k.roa
File: FsprxtSc5n3Eoeq6q12szmBjd_k.roa (raw, json)
Hash identifier: ueL/7LOhikc1iRdgyNZfuOlSwL2b0UOrMq3JR3GoPLo=
Subject key identifier: 16:CA:6B:C6:D4:9C:E6:7D:C4:A1:EA:BA:AB:5D:AC:CE:60:63:77:F9
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 018FE496A0095D97219DD121F09CF5777792
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FsprxtSc5n3Eoeq6q12szmBjd_k.roa
Signing time: Tue 04 Jun 2024 18:50:27 +0000
ROA not before: Tue 04 Jun 2024 18:50:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44559
IP address blocks: 86.111.230.0/24 maxlen: 24
86.111.231.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 06 Jun 2024 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:e4:96:a0:09:5d:97:21:9d:d1:21:f0:9c:f5:77:77:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 4 18:50:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16ca6bc6d49ce67dc4a1eabaab5dacce606377f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:dd:cc:55:a2:d3:a5:db:56:ef:f9:f6:60:ac:
d3:e2:39:6c:6a:2b:d9:bf:c3:98:07:41:9f:cc:cb:
dc:07:59:34:f9:de:60:d5:85:1c:a4:c3:be:5d:11:
33:d8:c8:cc:5e:3f:36:5d:26:e8:e8:eb:5c:e3:00:
4a:ae:c5:0a:c3:3f:29:bf:37:12:00:d9:df:7a:aa:
af:a7:05:f8:ef:ec:8c:05:70:7f:67:1d:f3:66:fe:
e6:e3:c4:58:3c:0e:22:66:be:e0:8d:7f:99:e7:a6:
ce:b3:01:19:eb:da:e7:16:63:8a:56:cb:0c:c0:60:
c9:de:b2:35:17:74:40:4e:5e:de:60:e6:2e:8b:c5:
96:af:4d:4e:b2:17:d8:4d:0e:60:7c:b2:66:a5:fb:
e8:c7:fa:f9:bd:0b:b4:5a:b0:00:c4:53:1c:64:06:
1d:b8:af:5c:7b:20:c8:a5:33:bc:c3:1b:4e:8c:77:
12:44:98:29:9a:f8:93:c4:44:d0:b6:78:13:a6:1a:
c5:0b:1e:1b:95:14:6e:4f:ad:1e:43:64:99:a4:63:
dd:9b:6d:6c:f5:3f:ff:47:16:88:f2:7f:35:17:b9:
1c:b1:62:91:3d:1d:4d:e4:b6:2e:97:b0:3c:f0:ac:
96:2d:6f:ef:cc:d9:2d:7b:a0:8c:fe:20:fd:94:86:
f1:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:CA:6B:C6:D4:9C:E6:7D:C4:A1:EA:BA:AB:5D:AC:CE:60:63:77:F9
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/FsprxtSc5n3Eoeq6q12szmBjd_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.111.230.0/23
Signature Algorithm: sha256WithRSAEncryption
98:03:9a:91:a6:b9:e3:6a:62:b9:c8:0e:62:43:6b:b9:ca:36:
4f:e7:8a:9f:e1:95:fd:4b:63:31:94:58:e4:9e:7b:b4:c2:cb:
be:a7:19:51:2b:18:a1:6d:a1:b5:6c:44:3a:2a:07:fd:70:8f:
16:94:56:77:c9:93:0d:3a:67:2e:38:8d:31:0f:0f:65:3c:b0:
8f:8e:07:a5:2f:12:54:fb:88:28:6c:05:71:73:59:4b:cb:fa:
5a:70:2c:52:a8:5d:b2:fb:b1:ec:57:b4:3b:66:66:3b:bd:a8:
f6:21:41:f6:fe:0c:3d:a5:f9:56:47:5c:1d:40:1a:bd:98:a9:
0a:44:77:1c:e8:96:6a:49:c4:a7:76:0c:6d:28:e4:01:3c:17:
98:02:fa:7d:73:07:a7:ac:6f:94:94:c3:34:b1:38:a7:d5:8a:
d2:c0:8f:69:79:d9:cc:39:f7:06:24:f0:49:84:51:93:bb:af:
f3:8f:4c:cc:fa:0b:a3:e1:11:32:07:c3:9f:e1:54:10:7c:c3:
46:a5:23:a2:32:4d:d0:f7:b9:35:24:72:92:df:9e:aa:7d:ab:
fe:53:61:f5:25:2d:0e:c0:b3:29:c3:72:d4:a5:e6:c3:f8:d2:
f7:f4:26:27:59:7f:7d:60:b8:a7:30:79:fa:ed:e6:7a:03:e8:
fe:f5:bb:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 23:20:46 2024 by rpki-client on console-ams.rpki-client.org