Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa
File: fa4el2CikfeH2SHjiD3RSkmj0pU.roa (raw, json)
Hash identifier: jXxnF2WkP70BbuL2WfpkGOI6Dj9cp9mb3BHY+c1qJSM=
Subject key identifier: 7D:AE:1E:97:60:A2:91:F7:87:D9:21:E3:88:3D:D1:4A:49:A3:D2:95
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 018DE4FC2E8E192987D016E1D443D0463F93
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa
Signing time: Mon 26 Feb 2024 10:35:48 +0000
ROA not before: Mon 26 Feb 2024 10:35:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 398465
IP address blocks: 81.168.119.0/24 maxlen: 24
89.213.133.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 01 Mar 2024 10:30:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:e4:fc:2e:8e:19:29:87:d0:16:e1:d4:43:d0:46:3f:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Feb 26 10:35:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dae1e9760a291f787d921e3883dd14a49a3d295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:44:c7:aa:e6:1e:ef:60:50:2b:d5:99:5e:
ce:75:bc:49:71:c8:90:3d:fa:e3:9a:e0:d5:61:03:
09:96:5c:33:e0:4f:a0:82:ce:21:10:8e:fd:4a:ed:
98:9d:ff:18:0b:7f:5c:cf:c2:cf:d0:43:31:8f:11:
c4:47:72:20:b2:74:4a:a6:94:30:4b:29:77:e0:56:
e0:b6:60:fe:3a:4a:f8:64:73:dd:25:d0:ac:1a:d3:
c7:38:be:09:58:37:6d:12:02:ce:6d:42:a3:1a:07:
64:c1:df:b1:4d:5a:0b:42:cb:a7:63:7d:97:dd:e3:
e5:ae:55:69:cd:e1:3a:ad:a1:b5:ba:bb:c8:90:bd:
2a:e0:7d:1f:5d:42:35:3b:f3:46:c2:a9:e2:0a:2f:
d4:ba:33:ff:f2:e2:20:39:75:ab:ae:3e:24:51:69:
ac:52:ed:d5:d7:73:b6:eb:6d:17:2a:a6:fb:04:d3:
b2:4c:0b:a9:6f:28:41:25:45:1d:05:c2:90:38:64:
e5:03:9a:38:b9:12:54:4f:67:35:c0:cf:5f:aa:14:
0d:ae:14:85:4a:1e:c8:dd:8d:7a:1d:6e:ef:61:d3:
fe:c7:82:05:e6:8b:c4:1c:5f:87:47:9e:85:d2:7a:
44:5e:49:55:6c:ed:ed:2b:a4:87:bb:6b:1e:2f:6e:
70:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:1E:97:60:A2:91:F7:87:D9:21:E3:88:3D:D1:4A:49:A3:D2:95
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/fa4el2CikfeH2SHjiD3RSkmj0pU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.119.0/24
89.213.133.0/24
Signature Algorithm: sha256WithRSAEncryption
31:27:7a:77:be:e4:bb:8c:fd:1a:7b:de:8e:f5:85:e3:b4:62:
93:e4:43:3a:84:38:e5:c5:69:f9:8c:9e:bc:48:a0:66:bb:e0:
d8:ff:99:26:39:20:1b:7e:35:99:12:af:c3:fc:87:e3:47:a8:
09:eb:7d:33:ce:4e:4d:57:dd:96:99:fa:9b:dd:24:00:b7:88:
c4:09:b0:9d:de:c1:b3:12:dc:e4:41:c8:e1:2e:74:d4:66:a1:
d5:71:d4:eb:d0:85:e7:4a:c3:6d:f9:c0:4f:26:cf:2d:cc:e3:
d4:84:f0:fe:26:89:4a:12:71:44:9f:31:8a:81:87:bf:4d:e0:
08:54:e1:57:ec:4f:80:ba:ea:aa:5e:2a:23:a7:57:19:97:5e:
ab:44:a0:c9:dc:18:ee:c2:ae:ae:49:08:0f:73:ab:95:b6:a2:
6f:bf:98:c0:54:a5:99:2a:2c:ce:cd:b8:c2:96:49:79:c2:8a:
fa:65:b1:80:78:97:13:9c:ea:f1:6c:58:62:58:d7:fb:a0:28:
e3:36:0a:b6:b7:30:62:fe:2c:6e:42:de:14:f4:26:8d:59:90:
43:22:77:f5:a6:14:f8:47:56:91:22:3d:ed:c0:71:c8:0c:48:
dd:68:64:ae:3d:d8:21:b8:2e:f1:6a:61:4b:9e:9a:ce:44:7f:
3f:d0:57:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 19:05:58 2025 by rpki-client