Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/_FqxPp6Rw8MF06zWEIJjRGS5OjQ.roa
File: _FqxPp6Rw8MF06zWEIJjRGS5OjQ.roa (raw, json)
Hash identifier: OMpJs59NFiGyTnDvliTT/jYBuGUKbJs0o4fncVlmxGc=
Subject key identifier: FC:5A:B1:3E:9E:91:C3:C3:05:D3:AC:D6:10:82:63:44:64:B9:3A:34
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 01856D53ECA37DCFC0062ABE01D8EF213BD5
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/_FqxPp6Rw8MF06zWEIJjRGS5OjQ.roa
Signing time: Sun 01 Jan 2023 12:34:54 +0000
ROA not before: Sun 01 Jan 2023 12:34:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 32181
IP address blocks: 178.157.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 24 Mar 2023 15:31:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:53:ec:a3:7d:cf:c0:06:2a:be:01:d8:ef:21:3b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: Jan 1 12:34:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5ab13e9e91c3c305d3acd61082634464b93a34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ab:81:8f:4b:7e:8e:d3:c2:3d:b3:e6:16:bb:
89:15:30:03:e2:a2:af:a0:36:8e:a6:39:0d:41:0d:
02:32:ef:0f:93:1b:e0:6a:9e:db:b7:36:6c:a0:32:
65:88:8b:8d:f0:33:23:19:3a:e1:0d:06:ab:5d:ed:
7c:72:d7:03:3f:f2:b8:68:6e:00:9e:2a:64:b4:f1:
57:20:6c:ea:b0:ae:02:97:f3:e2:b4:c1:b7:97:1e:
b2:b2:6d:f1:ce:24:4e:93:d6:34:1b:e3:e1:90:af:
62:e4:09:77:5b:98:d3:d4:95:70:35:7d:bc:d9:f9:
88:04:3d:94:08:fa:4f:d7:9c:9b:30:75:c6:26:b7:
60:e0:c4:c2:88:7f:fe:df:c6:59:1c:40:b5:c3:d6:
df:4b:89:25:17:d8:96:40:af:b1:8f:a0:4c:d9:60:
29:7a:42:d7:95:a8:3f:9d:18:b6:05:18:6b:d6:a7:
2d:41:02:78:a9:09:03:60:52:f6:07:65:dc:a2:c6:
5e:d6:73:08:9f:d2:05:6c:07:e5:84:4b:6f:67:41:
91:8e:81:75:d8:33:53:24:01:ee:a7:2c:47:27:34:
ef:33:ce:d2:88:63:04:93:33:9c:ed:7b:ad:43:2e:
4e:c5:e5:d9:3d:86:9b:c2:0e:0d:3f:ab:04:2e:28:
34:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5A:B1:3E:9E:91:C3:C3:05:D3:AC:D6:10:82:63:44:64:B9:3A:34
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/_FqxPp6Rw8MF06zWEIJjRGS5OjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.157.100.0/24
Signature Algorithm: sha256WithRSAEncryption
40:42:77:80:50:32:84:c6:bf:0e:99:7d:2f:34:27:07:29:24:
db:05:87:bf:66:4d:69:84:9a:a4:5e:a1:1f:0e:c5:89:65:20:
5c:03:f9:2b:a0:f4:a5:6a:3d:d1:66:62:ca:57:e9:19:ac:63:
81:a7:d2:88:b7:6f:1b:68:8f:f2:69:82:db:b8:95:c8:58:39:
91:1b:e9:ab:ed:c9:11:64:3c:19:62:72:d3:99:dd:32:cb:8a:
cb:be:e5:51:43:06:5b:a1:d3:bd:74:b8:99:a9:a6:70:d9:ec:
75:76:9f:3e:af:94:be:cd:73:71:45:0e:19:14:1a:2e:4c:23:
63:f9:a7:cc:1a:a3:21:0e:5b:1c:99:23:f2:33:44:96:60:16:
37:8f:53:0b:99:78:89:e3:07:dd:5b:6c:d4:3d:57:0f:75:96:
82:bb:ce:70:80:38:c3:f8:bc:3c:40:71:44:f2:da:94:c6:55:
9d:b3:39:66:20:53:ba:0a:29:8a:c0:26:7d:d2:16:b5:7a:9f:
32:df:7d:b1:f8:74:4c:d3:d5:8b:5a:c0:4e:54:6a:3d:76:9d:
5f:8d:0e:ab:e2:60:60:64:18:77:79:f5:b7:9e:9e:da:0d:77:
f2:c9:a1:08:ee:4a:60:bc:28:9a:18:bf:35:d8:f8:e9:c0:4d:
77:d7:6d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:16 2024 by rpki-client on console-fra.rpki-client.org