Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FC32ycmioqGdcfVFANpKnbWqkyo.roa
File: FC32ycmioqGdcfVFANpKnbWqkyo.roa (raw, json)
Hash identifier: OvBmYCl1iKM5V+4vCmvpq5r7GGCl4qFnyrfPlI6YRFg=
Subject key identifier: 14:2D:F6:C9:C9:A2:A2:A1:9D:71:F5:45:00:DA:4A:9D:B5:AA:93:2A
Certificate issuer: /CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Certificate serial: 01856FCB977F99E55491D2DCFFD30A47EB68
Authority key identifier: 81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FC32ycmioqGdcfVFANpKnbWqkyo.roa
Signing time: Mon 02 Jan 2023 00:04:51 +0000
ROA not before: Mon 02 Jan 2023 00:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207429
IP address blocks: 45.92.29.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 20 Jun 2023 02:34:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:cb:97:7f:99:e5:54:91:d2:dc:ff:d3:0a:47:eb:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81c8b73ab7bdeb76ff48b2ca099616edbe71c426
Validity
Not Before: Jan 2 00:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142df6c9c9a2a2a19d71f54500da4a9db5aa932a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:e8:e7:98:bb:ef:45:09:ba:79:56:cd:cb:
57:3d:2d:e9:e9:e6:2d:4f:d4:f4:5c:93:d0:27:f8:
be:04:6f:00:d6:52:24:98:fd:bd:ef:ab:b6:57:53:
bd:63:d2:0d:d7:0e:a2:fd:36:31:b0:9d:56:ca:2c:
e5:a4:4c:e0:27:e8:b3:91:35:d9:bc:a3:2d:06:35:
bd:b7:3a:08:25:bc:c0:da:6d:3d:fc:17:1b:50:57:
94:c4:39:cc:ee:a2:98:7f:1f:f2:0e:7c:0d:13:e3:
90:79:66:42:34:bf:18:bb:65:74:ba:b6:2f:24:6a:
2c:d7:08:0b:f7:e7:7c:f9:4d:15:d3:6c:35:b7:11:
60:cf:43:7b:c4:4b:22:2a:33:12:52:ff:98:e2:c1:
4e:23:28:94:2f:e7:fc:92:9e:31:c6:79:06:5b:75:
d6:47:cf:19:02:08:dd:2b:3d:c3:e8:34:05:4e:34:
c6:11:08:c2:6c:9d:65:b8:fe:87:26:75:3d:ef:43:
0a:9d:84:9d:81:8e:d7:df:4b:c4:cc:23:ca:39:3d:
48:23:e7:c4:d3:07:24:7c:fa:9e:43:d6:5d:8d:3e:
cb:66:b9:0a:f7:3f:ba:90:4d:9d:cf:80:b6:3e:6d:
1e:0d:f6:11:d1:a9:17:f1:52:ef:9e:bb:c9:a2:64:
41:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2D:F6:C9:C9:A2:A2:A1:9D:71:F5:45:00:DA:4A:9D:B5:AA:93:2A
X509v3 Authority Key Identifier:
keyid:81:C8:B7:3A:B7:BD:EB:76:FF:48:B2:CA:09:96:16:ED:BE:71:C4:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gci3Ore963b_SLLKCZYW7b5xxCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/FC32ycmioqGdcfVFANpKnbWqkyo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/gci3Ore963b_SLLKCZYW7b5xxCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.29.0/24
Signature Algorithm: sha256WithRSAEncryption
06:9b:d3:37:8c:b2:37:c2:69:b3:fb:d9:28:1a:ca:46:ba:06:
f6:18:05:c0:6f:46:fb:41:53:2a:f5:1c:d1:c1:73:cd:fc:70:
36:b0:ef:4c:ba:4b:23:25:36:8c:c0:28:7e:3a:8b:08:58:cf:
2f:21:23:b7:aa:1f:48:c6:b4:aa:2f:71:9b:77:58:e8:bf:69:
07:41:f7:5b:61:06:6b:15:7f:4b:90:0a:81:8f:8a:4a:9f:8c:
53:27:e8:ec:5a:85:ec:5b:6a:55:51:22:87:43:e2:4a:3c:03:
2e:72:00:28:48:0a:ff:f8:93:76:0e:e7:5d:4f:8e:9a:9f:0d:
82:59:8c:b3:28:a2:d6:f0:e7:8c:4d:ad:9e:23:16:63:18:96:
9d:b6:b4:e6:0c:c8:8c:77:e6:79:80:fd:21:85:1e:ec:56:af:
8d:13:d7:3a:b7:e1:6c:74:f4:fd:d2:78:b5:9d:98:1a:37:e0:
0b:25:27:9a:e2:e6:03:9f:d7:94:c5:44:e6:dd:8e:f8:19:7b:
7f:ba:db:ef:91:a6:18:fb:61:af:0d:ba:a5:f5:c6:ae:5e:b6:
eb:9f:e9:8c:1c:0b:ae:e5:90:1f:e5:64:ea:eb:62:3a:ac:f1:
be:f8:c1:3c:6a:50:03:a8:0c:82:c8:b2:5a:3a:e1:bb:52:5f:
6d:ba:80:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:02 2024 by rpki-client on console-ams.rpki-client.org