Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fnvxiRms8Z-Z3rRG3hUkjd76b5s.roa
File: fnvxiRms8Z-Z3rRG3hUkjd76b5s.roa (raw, json)
Hash identifier: S/V8CiFqMIUABWM4o3nBCNmi9H2q4eK9eiDzEKFiCVk=
Subject key identifier: 7E:7B:F1:89:19:AC:F1:9F:99:DE:B4:46:DE:15:24:8D:DE:FA:6F:9B
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01856F8B9112C33607E4E2CE059F4939E52A
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fnvxiRms8Z-Z3rRG3hUkjd76b5s.roa
Signing time: Sun 01 Jan 2023 22:54:55 +0000
ROA not before: Sun 01 Jan 2023 22:54:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211218
IP address blocks: 194.28.101.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:31:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:8b:91:12:c3:36:07:e4:e2:ce:05:9f:49:39:e5:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Jan 1 22:54:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7bf18919acf19f99deb446de15248ddefa6f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:e3:f9:c6:60:ec:84:bc:5e:b6:bf:1e:90:
e7:36:b1:31:94:e0:9d:2e:40:f5:4e:72:a8:39:1d:
81:09:5d:cf:e7:26:d4:e9:e5:08:0d:13:dc:32:71:
bb:55:1b:f2:af:74:9f:e0:5f:db:ef:cd:fc:87:7a:
2a:f4:60:ed:bb:a2:77:f4:90:0d:2e:b7:f8:bd:8c:
1d:b3:c3:91:9e:2f:88:be:74:56:1c:94:43:d6:d1:
22:5c:fd:50:ec:35:b1:be:16:d2:63:76:44:37:83:
89:83:fa:84:8f:ff:96:2e:34:67:33:55:82:e0:e2:
72:5f:16:b7:b9:f1:50:12:bb:d3:06:6f:ae:7a:b6:
df:c0:8c:49:55:70:6d:fd:06:da:05:2b:12:a5:e0:
fe:0b:c1:93:50:65:de:31:29:2d:93:10:e0:fd:26:
b8:86:74:a1:94:5d:9b:c1:6b:cf:eb:fc:ce:55:92:
0e:ea:a8:d9:c3:0b:d9:f9:fd:4f:5f:21:59:1b:87:
c3:1d:33:98:33:91:98:0b:b4:c5:54:34:28:6e:16:
75:ec:4b:5d:67:6f:2e:4d:a0:a6:d9:a7:9b:20:59:
04:96:85:1d:10:ae:b7:b9:48:06:0b:8e:2c:51:45:
9d:53:ff:7e:36:69:ef:97:79:83:e0:b6:ae:4e:41:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:7B:F1:89:19:AC:F1:9F:99:DE:B4:46:DE:15:24:8D:DE:FA:6F:9B
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/fnvxiRms8Z-Z3rRG3hUkjd76b5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.28.101.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d9:6d:98:de:f7:b9:ff:40:37:50:8e:ab:2d:47:3a:79:bd:
9c:7f:e4:8f:23:94:33:fd:ce:ef:68:40:23:a6:83:9d:d2:fe:
7b:71:6a:ac:23:83:20:39:be:9c:8e:e0:90:2a:90:e4:f6:3e:
42:1c:e8:60:af:88:f0:af:77:a4:ce:e3:b3:b8:31:0b:81:bd:
ac:f7:4d:19:14:b5:7f:c2:18:5c:49:16:fc:f5:78:e7:1c:3a:
2a:2f:24:d7:f5:95:90:07:4b:f7:00:56:0f:6f:71:cd:5e:34:
5a:ea:2f:24:74:06:e6:76:3f:bb:1f:67:05:c7:35:7e:ca:7a:
56:f5:3c:6b:02:96:36:c9:94:2d:84:4a:90:12:42:10:c7:6d:
9d:22:27:91:9b:a6:35:59:28:95:b9:53:e0:54:5d:fe:81:12:
07:55:cc:ad:a3:d5:f6:ff:2a:9f:18:e1:5d:b5:e4:91:12:af:
4c:53:1c:49:45:21:52:3e:1f:b0:6f:36:fa:01:84:15:0b:ec:
05:21:43:6a:26:83:3c:81:01:13:03:48:94:77:19:08:2a:85:
ad:a0:da:21:d3:b2:0a:01:5c:b0:5e:ba:ae:b1:de:44:e2:16:
8b:4f:e2:e1:f8:5d:6a:95:e0:ac:d0:9a:d8:02:e6:3f:c8:be:
10:77:72:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:38 2024 by rpki-client on console-ams.rpki-client.org