Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGN_4TIKqKSm0sg-3G0TuXFpi5Y.roa
File: FGN_4TIKqKSm0sg-3G0TuXFpi5Y.roa (raw, json)
Hash identifier: dbHI7BDvnEiPK15wvmxdRXGQelbL9bBYToSg2stawPI=
Subject key identifier: 14:63:7F:E1:32:0A:A8:A4:A6:D2:C8:3E:DC:6D:13:B9:71:69:8B:96
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018B3CDEF53A6599871DF8AEB400F1F5E828
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGN_4TIKqKSm0sg-3G0TuXFpi5Y.roa
Signing time: Tue 17 Oct 2023 09:02:06 +0000
ROA not before: Tue 17 Oct 2023 09:02:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50673
IP address blocks: 89.213.151.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:3c:de:f5:3a:65:99:87:1d:f8:ae:b4:00:f1:f5:e8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Oct 17 09:02:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14637fe1320aa8a4a6d2c83edc6d13b971698b96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:18:fd:63:e7:99:6f:a7:cd:47:ae:0f:33:7a:
1e:89:0e:68:6e:cd:6b:59:57:0d:c2:92:f2:62:b3:
fa:1b:4d:1b:7a:75:1f:1c:93:69:52:9d:4d:57:6d:
25:4a:27:4c:a6:85:7e:9d:2d:cf:9e:b1:1d:8b:5e:
33:d4:1e:2e:dd:ca:9a:b1:b1:9a:fe:3e:5b:b0:c8:
ef:1b:4a:86:45:0b:f9:09:77:d7:54:f5:a3:67:23:
c7:50:d5:e2:7f:b3:fa:7c:8c:47:53:d4:56:00:4b:
f9:0b:db:b0:6a:ad:11:1a:d0:c2:f0:eb:fb:62:a0:
a8:11:91:28:1a:aa:81:d8:f7:9f:d8:cb:c5:4c:39:
7e:66:00:b2:81:17:e3:a2:55:e3:b5:16:d3:88:dc:
2b:0c:af:7b:e1:ab:14:55:46:21:0e:4a:bb:97:f7:
5b:c6:b1:e3:9f:98:27:c8:ef:f4:05:36:ed:a9:e0:
b1:fe:0a:a7:2c:d8:b4:36:d8:f0:8d:a7:e0:bb:a9:
e2:83:23:92:44:e5:d8:a4:9f:20:db:22:ae:3e:b0:
3d:89:d4:19:9b:a4:80:a1:1b:d1:31:76:14:f7:25:
9c:78:01:ef:67:e8:93:5d:36:a2:c0:32:e8:fb:e3:
3a:f3:4e:00:b2:64:74:9b:8d:6e:40:7e:e4:82:ab:
11:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:63:7F:E1:32:0A:A8:A4:A6:D2:C8:3E:DC:6D:13:B9:71:69:8B:96
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FGN_4TIKqKSm0sg-3G0TuXFpi5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.151.0/24
Signature Algorithm: sha256WithRSAEncryption
12:5c:99:44:ea:e0:c6:42:24:e3:8b:19:69:67:ae:d6:8f:bc:
f3:3a:26:ef:e0:c2:2f:ef:72:06:d0:1f:de:fd:f0:e0:97:98:
ac:21:f4:78:10:07:ef:55:49:be:af:13:a3:87:e2:93:eb:49:
cc:5b:7e:73:5f:e6:06:11:7a:3f:0e:35:a2:cc:31:54:26:1e:
b5:e1:84:ad:09:9d:ca:ec:e7:d4:e3:2f:75:d5:7a:d5:c9:c5:
02:34:77:cb:18:f7:e3:a4:78:cd:1f:b6:1f:75:05:49:05:c9:
15:41:71:e3:4d:79:bb:5f:fe:b7:1b:f5:24:b1:90:a2:08:84:
d9:7b:4f:53:86:ac:85:70:a6:0b:83:b7:11:4d:4b:0e:0c:6c:
48:67:1b:98:a3:61:56:99:b9:71:3f:14:d2:bc:36:af:94:a8:
4a:47:24:4b:06:c1:13:bc:5b:05:20:4b:f1:33:ac:df:b3:20:
f7:6b:46:15:b1:b7:97:17:4a:ef:31:9f:c9:8f:af:48:30:4b:
2a:cc:a1:4a:63:4a:c3:42:f4:80:32:78:bd:ff:a4:d9:64:09:
ef:aa:60:05:50:68:42:9a:d3:e5:32:d5:64:7b:00:07:cb:78:
aa:57:44:ed:a0:f8:9a:eb:4d:f3:68:91:cb:5b:25:9e:bb:a7:
34:64:63:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:14 2024 by rpki-client on console-fra.rpki-client.org