Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FJfsgVDDCNw9jdEYcvFZWogCeFQ.roa
File: FJfsgVDDCNw9jdEYcvFZWogCeFQ.roa (raw, json)
Hash identifier: z21qd2V4JkgJS/ldMWe0Y/GIqv9Cky1KlDgVcrw7+Pg=
Subject key identifier: 14:97:EC:81:50:C3:08:DC:3D:8D:D1:18:72:F1:59:5A:88:02:78:54
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018F331386A721EFA754EA2D7D1BB547B33C
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FJfsgVDDCNw9jdEYcvFZWogCeFQ.roa
Signing time: Wed 01 May 2024 07:34:28 +0000
ROA not before: Wed 01 May 2024 07:34:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398355
IP address blocks: 80.240.86.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Jul 2024 16:57:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:33:13:86:a7:21:ef:a7:54:ea:2d:7d:1b:b5:47:b3:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: May 1 07:34:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1497ec8150c308dc3d8dd11872f1595a88027854
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:81:ad:3c:d2:68:ab:58:de:4d:1d:0c:8c:
8d:b1:87:33:38:9b:8c:1b:59:25:3a:e7:88:54:9a:
12:b4:22:f4:21:b2:7c:65:e3:58:f3:c3:b4:b6:bc:
6a:91:2b:50:56:dd:ee:7f:db:4d:ea:b5:72:94:22:
2c:c2:27:ce:79:c2:41:c0:79:12:e9:e3:30:9a:84:
4f:8c:a5:2c:d0:0c:fa:29:54:25:31:8d:91:a4:e0:
45:bb:fe:81:0a:cb:90:66:82:01:b5:da:64:34:09:
f1:91:ad:9c:8c:35:be:8e:69:52:36:d8:4c:22:5e:
ad:9b:ae:37:de:f5:df:b1:67:de:d3:26:27:b5:33:
4e:a4:da:bd:a6:3e:4c:ef:b4:0c:15:7d:c6:91:70:
95:cd:d0:38:c1:3e:88:00:d0:65:bf:5e:ca:e3:4c:
89:e2:86:62:d8:e8:a5:16:33:fc:99:a1:7a:0b:9d:
e0:fc:19:c6:0f:08:90:b9:e2:5f:4c:33:f0:f7:3c:
07:86:1c:21:75:05:b9:db:7e:25:e4:35:22:b6:57:
1c:44:f8:ac:27:a3:9c:40:16:27:42:c5:6e:b4:62:
52:8a:d0:af:18:d5:73:c3:5d:c4:49:78:57:9e:b3:
40:3a:13:2b:42:b6:cb:4d:26:84:87:25:59:5a:10:
0d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:97:EC:81:50:C3:08:DC:3D:8D:D1:18:72:F1:59:5A:88:02:78:54
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/FJfsgVDDCNw9jdEYcvFZWogCeFQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.86.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
76:3a:25:5b:09:15:ea:7b:b0:e1:9e:78:fe:ac:c1:19:71:3c:
64:e6:84:08:11:cb:07:e6:a0:7f:a9:ee:07:10:f9:23:0a:42:
d8:04:3f:45:ba:ac:6b:33:80:5b:7d:d1:bb:8b:e1:f0:99:e4:
aa:21:07:98:ce:1b:94:db:5f:98:c6:88:4d:5a:4a:04:02:62:
bb:86:d9:d4:7e:8b:8f:d8:98:38:dc:d8:77:27:3a:e6:a9:74:
37:b9:73:e9:96:a6:13:c8:f1:33:c0:d7:14:d3:ff:b0:76:6c:
9a:3a:97:04:af:3b:df:ff:d0:45:af:0c:1e:8a:58:a1:37:27:
82:8d:49:97:c3:2d:28:48:63:12:1a:46:e7:03:62:8b:03:e5:
ad:ac:95:44:c7:c6:33:f7:c0:68:8f:80:0d:2b:d1:d0:e9:0f:
c1:c0:b1:a1:2a:6e:3a:c5:8a:3c:aa:65:90:c1:c7:f2:dd:e8:
96:de:8b:69:49:f0:96:04:cf:51:3f:c2:53:a8:bc:8a:03:94:
0d:5d:6a:5f:5e:a2:32:d9:f1:f2:93:c0:c7:c3:95:d2:c8:c4:
ca:f0:95:37:c0:3e:49:e9:91:ec:78:7c:37:eb:5d:62:50:7e:
b5:c1:99:ba:19:e3:c1:b3:75:8c:69:53:1f:be:9e:7b:fc:e9:
ee:d3:7e:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:13:47 2025 by rpki-client