Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa
File: FcS9IO29OhgqtM0XNEuq9vbRyb0.roa (raw, json)
Hash identifier: j/57BLuIOUJVYT1WWd5L6pqtsvtG4o3bjFi2uo10eDU=
Subject key identifier: 15:C4:BD:20:ED:BD:3A:18:2A:B4:CD:17:34:4B:AA:F6:F6:D1:C9:BD
Certificate issuer: /CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Certificate serial: 0185729EB86586C9E168EA4542FA1DB5C00C
Authority key identifier: F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa
Signing time: Mon 02 Jan 2023 13:14:42 +0000
ROA not before: Mon 02 Jan 2023 13:14:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20769
IP address blocks: 91.208.87.0/24 maxlen: 32
2a04:a500::/29 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:9e:b8:65:86:c9:e1:68:ea:45:42:fa:1d:b5:c0:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8e826de1070d9d79daa9e415fc432613cc57e57
Validity
Not Before: Jan 2 13:14:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15c4bd20edbd3a182ab4cd17344baaf6f6d1c9bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ba:60:c3:48:6f:bc:a0:74:07:39:c7:a4:ba:
08:42:b3:6b:2f:ce:13:a5:a4:7c:59:c5:da:99:39:
36:22:22:bd:cf:e1:e7:f0:73:21:2f:02:b7:c4:a5:
65:0b:88:2b:54:d1:bf:91:8b:50:f2:27:a3:7b:b5:
59:36:19:bc:71:d8:ca:09:1a:88:84:8c:57:f3:b4:
bc:c8:57:e2:10:7a:2d:0d:2a:78:00:3f:9b:29:d1:
86:43:3f:50:eb:db:fe:53:10:53:67:2f:e4:de:46:
ec:4f:bf:a4:0f:e7:64:46:ac:de:ac:6c:d0:54:69:
87:0e:bf:a1:b5:81:f8:25:8b:ac:f4:4e:3b:0b:6c:
b3:77:53:02:2d:e4:b0:9c:c4:58:95:05:d4:5e:f6:
a1:85:1f:ee:53:b0:48:a0:1e:94:b3:68:4f:b6:d5:
d9:77:f1:50:2d:b7:67:ce:b2:18:85:76:96:17:83:
11:58:74:24:f9:5c:50:e1:78:a2:13:db:58:0d:e3:
4f:3d:2e:94:84:51:55:52:e3:ee:26:86:e4:46:0d:
76:ea:d3:08:61:ac:a0:6c:3c:d1:bf:d7:a6:a0:b0:
1a:81:4d:a0:f3:49:6d:51:29:4b:99:d0:b4:8e:a1:
6f:ac:fe:9f:da:a5:61:96:c8:12:4f:81:16:21:83:
2c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C4:BD:20:ED:BD:3A:18:2A:B4:CD:17:34:4B:AA:F6:F6:D1:C9:BD
X509v3 Authority Key Identifier:
keyid:F8:E8:26:DE:10:70:D9:D7:9D:AA:9E:41:5F:C4:32:61:3C:C5:7E:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Ogm3hBw2dedqp5BX8QyYTzFflc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/FcS9IO29OhgqtM0XNEuq9vbRyb0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/73db77-0a6b-4f9b-a8e8-eaedb709efbf/1/1-Ogm3hBw2dedqp5BX8QyYTzFflc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.208.87.0/24
IPv6:
2a04:a500::/29
Signature Algorithm: sha256WithRSAEncryption
6d:0a:b4:4f:49:a0:2d:f9:ca:e2:c9:3c:3d:e9:d4:95:ff:9b:
cf:46:50:94:17:f8:7d:f4:c3:1e:4f:63:43:31:b8:1f:35:21:
9e:d1:57:44:d1:e1:ac:43:77:7a:a1:30:e2:7d:9e:81:18:49:
a8:d9:31:89:0e:a4:2d:18:9b:c5:c5:82:01:a1:6d:c3:7e:73:
2b:f1:f5:0e:d1:55:87:e4:8d:3a:11:69:de:5d:da:53:c2:80:
ee:55:e1:79:aa:86:4c:fe:42:7d:49:0c:81:cf:48:93:d3:2b:
31:99:5a:bb:5f:a6:35:aa:72:ba:85:b4:4f:03:1c:cb:f0:e3:
4e:82:49:e4:e8:fe:80:7b:0d:f3:93:78:e0:80:74:1a:51:9b:
76:cf:44:78:26:13:6b:7a:52:4b:3c:10:0d:cf:e7:b0:46:de:
de:3a:94:fe:6c:85:9a:3c:30:2e:1e:92:7c:29:33:4e:73:a1:
c7:08:aa:08:2b:e0:96:2f:c0:1c:5c:b5:2e:a7:d5:98:9e:f5:
f6:29:80:f4:ff:61:6e:12:28:3b:09:14:22:48:b4:62:dc:9a:
5e:52:70:e3:5c:38:5a:e2:18:89:f5:71:2d:7c:f8:c7:7a:79:
41:2d:94:41:aa:82:cd:97:fa:2f:e1:e5:8b:23:e6:96:5a:09:
05:d5:60:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:57 2024 by rpki-client on console-fra.rpki-client.org