Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ig6JS3aHS-jukhSDd9Qzr1vRUnQ.roa
File: ig6JS3aHS-jukhSDd9Qzr1vRUnQ.roa (raw, json)
Hash identifier: PPWaJ3OYGjwTwgUt1So6nODgYcgWfaj4GEQnjcp0b04=
Subject key identifier: 8A:0E:89:4B:76:87:4B:E8:EE:92:14:83:77:D4:33:AF:5B:D1:52:74
Certificate issuer: /CN=fc44297e9271c6edf064915f6180ae12690dda8b
Certificate serial: 018CC56E19E8FBE0019481E838E5C3AC8C25
Authority key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ig6JS3aHS-jukhSDd9Qzr1vRUnQ.roa
Signing time: Mon 01 Jan 2024 14:29:36 +0000
ROA not before: Mon 01 Jan 2024 14:29:36 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 16229
IP address blocks: 213.169.154.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 22 May 2024 08:53:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6e:19:e8:fb:e0:01:94:81:e8:38:e5:c3:ac:8c:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Validity
Not Before: Jan 1 14:29:36 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a0e894b76874be8ee92148377d433af5bd15274
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:66:a7:87:65:a2:cf:b9:5d:a6:d2:24:dc:79:
9e:d3:fc:5e:fb:a6:1f:28:2e:2d:63:87:c1:2e:fb:
4d:c9:5f:fa:e7:b9:22:c4:72:e9:b5:c1:c6:e7:fd:
28:09:47:25:80:35:70:37:ed:53:6e:1b:d9:1f:77:
0f:59:76:4e:77:d6:db:14:dc:f3:18:b3:46:7c:c6:
ec:d8:f1:26:2a:a9:ef:7a:af:d6:8c:b2:24:ae:d7:
76:a7:e7:6a:46:f2:d5:76:c4:39:13:92:84:92:c7:
9d:aa:6a:90:d1:f7:6f:09:1e:db:a8:34:fd:54:b9:
6d:a5:b7:be:df:fd:71:4a:e9:1a:be:b7:4e:82:f1:
af:69:64:ac:f1:15:e3:2d:4f:be:a9:85:e6:b1:7f:
e4:14:7e:6b:a6:f4:0b:b5:54:28:6f:65:3a:b5:78:
fd:00:de:e9:05:f5:87:50:c5:55:99:6c:b6:5e:a9:
9b:23:0a:ee:57:9c:33:56:b7:7a:c5:61:10:28:40:
e2:ac:26:3b:62:56:ae:d2:07:98:a4:2d:85:9d:8f:
23:4c:b5:45:85:e4:de:51:0b:d7:ed:64:12:a6:7f:
92:eb:58:5d:29:07:eb:1f:9f:af:72:f6:70:14:57:
60:e9:8e:c7:e5:00:18:31:1f:9f:ef:fd:12:ed:ab:
21:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:0E:89:4B:76:87:4B:E8:EE:92:14:83:77:D4:33:AF:5B:D1:52:74
X509v3 Authority Key Identifier:
keyid:FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/ig6JS3aHS-jukhSDd9Qzr1vRUnQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.169.154.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:b1:fc:bb:d6:57:26:b0:47:fc:cd:d1:fe:e1:da:5a:a9:d0:
bd:a4:06:d3:ef:70:57:ef:40:c8:50:2f:ae:12:46:74:76:6e:
d3:78:52:08:e7:2b:d5:7c:da:c5:c8:82:a1:1a:34:c0:ad:c6:
f3:94:47:d1:96:be:ab:28:f6:6e:8a:d9:59:f7:4f:6f:e2:3f:
4e:08:8a:0b:f7:c0:1d:33:ab:27:b1:5c:24:f3:85:09:c0:cd:
dd:6e:ef:88:0d:19:7a:85:f5:3b:e3:b3:f9:65:2e:cf:33:0e:
eb:fa:6a:da:be:a9:98:15:0f:fd:df:8a:32:e0:ab:ec:01:74:
71:d0:4d:47:8b:43:56:11:16:78:81:4a:c2:76:cf:ca:ba:c6:
72:b2:60:7a:24:5e:89:0e:e2:91:1e:4d:c0:26:2f:0f:20:09:
a5:7b:94:db:11:93:1a:ce:0e:94:fb:c1:28:64:5f:49:0f:3a:
1e:de:79:46:b5:24:41:96:73:7e:45:17:d7:75:42:da:33:91:
cf:6d:b1:a4:94:df:c3:68:14:f4:9f:5e:fd:07:86:8d:91:45:
87:f0:df:62:cd:4f:d6:53:99:9c:45:4a:bb:d0:6c:ba:00:f0:
9b:74:cc:10:f9:e0:8e:99:0c:87:b8:7b:e7:5a:9e:44:14:c2:
f3:5c:5f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:10 2024 by rpki-client on console-fra.rpki-client.org