Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/fXwLGjGzHGZEtiXskjFUCSQ0_eM.roa
File: fXwLGjGzHGZEtiXskjFUCSQ0_eM.roa (raw, json)
Hash identifier: ISTt1YIl16YjNQKS4u7P9DDkqRjHoFxBNSBhcgBR344=
Subject key identifier: 7D:7C:0B:1A:31:B3:1C:66:44:B6:25:EC:92:31:54:09:24:34:FD:E3
Certificate issuer: /CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Certificate serial: 01857139FB99A4F0E62597467FB4739D315D
Authority key identifier: A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/fXwLGjGzHGZEtiXskjFUCSQ0_eM.roa
Signing time: Mon 02 Jan 2023 06:45:03 +0000
ROA not before: Mon 02 Jan 2023 06:45:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 680
IP address blocks: 193.24.80.0/21 maxlen: 21
192.82.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:39:fb:99:a4:f0:e6:25:97:46:7f:b4:73:9d:31:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a896c1e14c86e6ef5b16724f7117676ec7214957
Validity
Not Before: Jan 2 06:45:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d7c0b1a31b31c6644b625ec923154092434fde3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:9f:bb:a8:0a:48:2b:64:d5:23:79:1b:66:76:
24:a4:36:cb:3c:f4:8c:12:78:0d:08:00:67:75:b7:
4b:97:cf:3b:3f:d5:64:13:57:ba:86:1f:27:92:3d:
95:06:8e:cf:10:53:63:e3:14:9f:f4:f5:9b:44:04:
23:55:5f:2c:5f:b3:a6:b9:ae:a2:bb:b7:33:4e:f6:
28:83:a1:0c:71:27:b0:ba:46:e2:25:05:55:9c:da:
66:2e:11:aa:3d:68:6f:7c:1f:40:8d:80:7e:f8:6c:
05:fa:2c:dd:cb:0c:96:0c:d2:0c:3d:8e:26:22:4c:
36:8e:85:65:74:d5:e9:91:1e:6e:f7:c3:c0:a0:a3:
27:30:98:a0:e1:6e:91:36:ab:8a:bb:4d:13:4d:7c:
47:aa:64:e3:42:c6:71:9f:0e:a6:4e:ab:f9:e9:f0:
14:83:2e:2f:e7:ff:25:09:3c:e7:39:cd:0c:f6:b0:
40:08:ab:78:a6:64:ae:b6:89:a8:66:99:d6:d5:50:
0b:01:07:2d:06:7d:18:4b:13:86:f5:3c:f5:8b:26:
08:fd:bf:57:5d:ea:1a:06:c7:a4:4a:75:7a:7a:f5:
d4:5a:48:37:b8:82:a5:f0:03:75:c9:13:01:4f:0e:
9b:4b:02:54:be:ad:56:a0:2b:8f:9e:22:b0:7e:84:
c4:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7C:0B:1A:31:B3:1C:66:44:B6:25:EC:92:31:54:09:24:34:FD:E3
X509v3 Authority Key Identifier:
keyid:A8:96:C1:E1:4C:86:E6:EF:5B:16:72:4F:71:17:67:6E:C7:21:49:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qJbB4UyG5u9bFnJPcRdnbschSVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/fXwLGjGzHGZEtiXskjFUCSQ0_eM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/0896b2-f809-4f1d-9b94-14a0825b5291/1/qJbB4UyG5u9bFnJPcRdnbschSVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.82.241.0/24
193.24.80.0/21
Signature Algorithm: sha256WithRSAEncryption
7b:71:9e:5c:c4:75:25:86:69:1b:65:80:a7:1d:13:53:8d:54:
67:28:9c:42:cd:54:a0:21:44:f2:3b:61:fa:18:c8:57:4e:0a:
97:3c:81:c6:79:38:92:a2:46:14:b3:97:34:8c:c3:b1:0a:c9:
19:3c:21:be:38:af:5e:87:50:5f:d5:3b:11:c3:56:b2:e4:6d:
b9:24:ce:4b:66:70:7a:49:fb:92:2b:6e:f5:c4:14:fd:aa:fd:
8f:f8:07:27:80:ad:f1:49:a0:e9:74:b9:f9:ee:d8:eb:62:9c:
31:a1:06:1a:a2:82:d5:4b:13:88:94:14:f2:7e:15:8e:af:a4:
86:0f:ad:68:44:63:7d:93:fb:95:75:04:e4:f2:8d:fd:fe:3a:
4b:dc:55:a9:27:34:5c:9d:fe:6c:1a:be:a6:c6:18:f1:e9:1a:
64:ec:26:4a:dd:79:6d:17:85:5d:76:5c:76:6f:4c:52:5f:7b:
86:84:7c:04:8e:98:cb:75:c3:de:23:19:4e:f1:77:bd:37:49:
e2:21:6c:5a:f3:9b:c2:ab:e8:cf:d1:c0:76:c4:26:77:6d:aa:
7b:93:3e:e2:ec:57:00:91:ce:03:fa:aa:fa:a1:0f:58:c9:c4:
28:a2:d8:2e:db:f9:43:6d:f0:03:04:ff:76:1d:4d:70:e2:6c:
d8:aa:d7:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:59 2024 by rpki-client on console-ams.rpki-client.org