Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/FcGAA3IzLG_kYkDOdYVqexFJepY.roa
File: FcGAA3IzLG_kYkDOdYVqexFJepY.roa (raw, json)
Hash identifier: GHDCYZEOqE0NYXAT/CeVOSV179Q+p6hHu6if8U55AwI=
Subject key identifier: 15:C1:80:03:72:33:2C:6F:E4:62:40:CE:75:85:6A:7B:11:49:7A:96
Certificate issuer: /CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Certificate serial: 01914B2B61C4345806E652D2E8CE1B043B72
Authority key identifier: 4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/FcGAA3IzLG_kYkDOdYVqexFJepY.roa
Signing time: Tue 13 Aug 2024 09:56:59 +0000
ROA not before: Tue 13 Aug 2024 09:56:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48266
IP address blocks: 206.245.238.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 14:59:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:2b:61:c4:34:58:06:e6:52:d2:e8:ce:1b:04:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ee843a85dd664e9dc0310892bd7dd9ce52591c7
Validity
Not Before: Aug 13 09:56:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=15c1800372332c6fe46240ce75856a7b11497a96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d9:78:ec:da:75:f8:11:fb:6b:42:84:d7:31:
7e:d7:8d:1e:c9:77:25:dc:93:c1:22:29:a2:cf:93:
f3:b2:5f:e5:db:32:70:86:a3:26:28:b9:7f:27:d3:
81:7c:ab:c5:39:17:59:23:b5:51:5e:01:4f:04:fd:
24:05:e5:02:a3:88:ea:b5:04:15:98:7d:34:73:8d:
b5:c0:43:c4:87:e1:08:9a:56:99:6e:0c:0e:2d:a5:
ed:83:ad:3c:82:27:9d:b4:21:86:de:87:4e:48:6c:
32:06:f5:8b:e3:89:0b:fa:c4:17:10:33:7b:6b:01:
7b:34:eb:fd:aa:83:35:f5:14:55:8b:2f:38:05:eb:
57:b5:45:e2:c4:45:c6:9a:16:0a:a4:b1:4d:49:6b:
2d:ec:6e:b6:b3:c8:1a:9c:79:f3:af:e9:cc:c6:f2:
d4:da:cf:6a:77:e2:5e:80:09:25:a5:01:7c:59:c3:
a1:18:55:f7:b7:4a:ad:2b:f6:14:e0:24:c6:fd:d4:
23:4f:bc:7b:ce:31:6e:5c:20:d2:82:4f:a9:12:1c:
e8:ed:3f:79:b4:9c:0f:da:2f:fa:66:ea:19:dc:b9:
9a:2b:c9:bb:36:c0:f0:e9:81:09:cb:e2:00:24:0a:
05:c5:68:77:f0:c5:32:b9:2c:ef:fd:67:d3:dd:dc:
bf:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C1:80:03:72:33:2C:6F:E4:62:40:CE:75:85:6A:7B:11:49:7A:96
X509v3 Authority Key Identifier:
keyid:4E:E8:43:A8:5D:D6:64:E9:DC:03:10:89:2B:D7:DD:9C:E5:25:91:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TuhDqF3WZOncAxCJK9fdnOUlkcc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/FcGAA3IzLG_kYkDOdYVqexFJepY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/adad20-c512-4fb0-a127-48cf412b387b/1/TuhDqF3WZOncAxCJK9fdnOUlkcc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.238.0/23
Signature Algorithm: sha256WithRSAEncryption
aa:30:84:02:58:9a:77:e0:4f:df:f5:40:e4:de:68:da:ce:0d:
df:1b:1d:f3:15:3b:2b:d3:4a:ce:ce:0b:10:69:d7:d6:b1:c2:
55:cf:6b:39:8b:b2:17:0e:af:91:ea:8e:7d:76:cc:3c:b5:54:
d1:cb:6a:e5:a1:aa:6a:f6:72:fb:cd:90:8b:56:1b:d0:69:e2:
43:23:15:8d:98:ce:ba:67:72:4f:eb:3a:1d:59:01:be:3d:99:
dc:88:22:d4:e4:02:c6:26:21:2f:f8:ef:38:ac:c6:02:fa:d8:
64:72:06:e9:f9:c8:22:b3:49:88:75:ca:aa:59:93:0f:b1:c7:
78:10:d0:23:c0:64:00:e8:ba:27:b1:0f:8a:2e:af:e0:76:09:
5a:60:c2:41:72:81:98:8e:07:c4:10:22:1c:03:77:1a:6f:c2:
b4:ef:bb:a6:72:f4:56:3c:cf:a9:c1:84:99:f5:39:91:21:5b:
09:fe:0a:b5:f6:c0:98:56:cc:46:7e:c1:f7:74:b1:85:6c:39:
3f:76:a5:9d:4a:a5:d8:55:28:d2:87:be:df:ac:cd:44:1b:71:
a3:11:1d:b8:ba:f7:e1:9c:38:2a:02:fc:bc:7e:af:82:92:a2:
7f:1a:bd:6b:0d:40:47:cb:2b:f3:6f:5b:57:70:48:0f:5c:97:
ca:43:07:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:36:47 2025 by rpki-client