Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/fniCzCZMfuNZTwqaILPvlFhnttQ.roa
File: fniCzCZMfuNZTwqaILPvlFhnttQ.roa (raw, json)
Hash identifier: zw0gTQH+jzgfNCDw6qYNhFlCcWu9ALizvmbSOUoCAJ0=
Subject key identifier: 7E:78:82:CC:26:4C:7E:E3:59:4F:0A:9A:20:B3:EF:94:58:67:B6:D4
Certificate issuer: /CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Certificate serial: 018BE619F07956726A10835D81CF84907FBE
Authority key identifier: 84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/fniCzCZMfuNZTwqaILPvlFhnttQ.roa
Signing time: Sun 19 Nov 2023 05:42:21 +0000
ROA not before: Sun 19 Nov 2023 05:42:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29684
IP address blocks: 193.242.127.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Nov 2023 09:51:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:e6:19:f0:79:56:72:6a:10:83:5d:81:cf:84:90:7f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=844492db9cbb0a0eb6bf69c25c86961f49183c9b
Validity
Not Before: Nov 19 05:42:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7882cc264c7ee3594f0a9a20b3ef945867b6d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:18:7c:7c:83:8e:05:d8:fd:2d:7d:59:ab:bc:
88:cc:e9:3f:43:6c:5e:26:f7:7f:6c:32:4a:b5:2a:
d4:4f:dc:7e:a1:af:12:31:7e:c5:4a:c7:da:6c:38:
5f:23:29:67:95:d0:7e:69:ab:d1:c0:01:17:e8:aa:
ce:20:2d:c0:d7:32:60:ff:9f:80:ed:0b:df:1e:8a:
95:5f:73:13:56:4e:ab:1d:df:5c:1c:d4:1c:d2:f5:
43:d4:3b:db:83:ca:b5:65:57:e4:30:99:9b:74:21:
a4:18:70:0a:2e:7c:3b:e6:a2:03:91:fe:95:59:c6:
5f:c0:84:4a:1e:a2:dd:5f:30:fe:f3:a1:80:01:1d:
90:f9:95:ce:2a:7f:9c:01:ff:ef:7b:44:f7:9f:8f:
31:35:e9:7a:59:f3:b1:21:b8:2a:77:67:31:cf:41:
f9:c6:18:02:6b:71:d4:10:f7:78:df:2b:b1:75:7b:
97:8e:c5:c3:43:7b:2c:5c:66:96:6b:45:5e:1e:f9:
97:73:7e:69:f1:a9:99:06:9b:95:7b:17:6a:f1:91:
e6:1e:67:3d:0f:45:77:34:77:b1:f3:7d:84:17:08:
b6:ae:42:aa:b4:64:62:48:f3:09:71:08:a1:6b:3d:
3b:fd:8c:f6:4d:fe:fd:0b:1c:26:b7:e4:93:7f:04:
85:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:78:82:CC:26:4C:7E:E3:59:4F:0A:9A:20:B3:EF:94:58:67:B6:D4
X509v3 Authority Key Identifier:
keyid:84:44:92:DB:9C:BB:0A:0E:B6:BF:69:C2:5C:86:96:1F:49:18:3C:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hESS25y7Cg62v2nCXIaWH0kYPJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/fniCzCZMfuNZTwqaILPvlFhnttQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/33a888-4cf3-4a8c-9297-a1e0db1a17df/1/hESS25y7Cg62v2nCXIaWH0kYPJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.242.127.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:8f:a0:73:3a:4d:49:e9:bb:6f:3a:b2:10:7f:9a:d4:67:1c:
7c:55:f0:34:c8:2a:0e:1d:58:89:2c:d4:6b:f9:94:c8:db:3f:
7f:9a:a8:35:81:6d:1f:c3:8a:c4:f1:a4:83:b9:06:0c:fe:e4:
64:db:eb:32:b0:88:30:24:64:2d:bd:cd:ec:b7:ba:e3:7e:25:
c3:cb:5e:ae:1f:47:94:f2:9d:17:43:09:77:b2:e8:e5:70:40:
72:a6:e1:cb:82:a7:ce:a2:54:e5:18:57:aa:1e:c4:7e:e9:cc:
1c:f8:d9:65:42:1d:78:22:c0:25:3c:93:56:b3:ca:92:0e:84:
0d:cc:2e:51:e3:af:03:02:46:c1:fb:88:4d:d0:03:a5:03:18:
96:82:5c:9e:69:29:f4:ab:7b:5d:04:50:99:86:53:42:90:9b:
51:4c:cb:02:31:5d:11:57:28:52:1a:e9:36:cd:19:01:07:7c:
ed:2f:43:79:89:88:ba:ea:eb:d1:86:49:71:16:9b:55:f5:6a:
57:6a:f9:12:d0:e5:ad:ed:24:8c:e9:a9:08:4f:26:70:5a:e3:
3f:75:49:33:2c:22:bb:8f:34:a5:a6:a7:46:80:49:35:fb:b9:
bb:53:55:e5:dd:dd:00:84:e7:6c:c5:67:c3:42:c0:4d:6a:4e:
b8:62:ed:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:35 2024 by rpki-client on console-fra.rpki-client.org