Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fpbdAkLl3oOC_o6H4MfRH4o2n8I.roa
File: fpbdAkLl3oOC_o6H4MfRH4o2n8I.roa (raw, json)
Hash identifier: jqyxlGwbOWP1QvIThwZSvMzTlIfNc2K5MHE1LsC8u/4=
Subject key identifier: 7E:96:DD:02:42:E5:DE:83:82:FE:8E:87:E0:C7:D1:1F:8A:36:9F:C2
Certificate issuer: /CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Certificate serial: 01856D6643B4DD206AE57E29947FA90D887C
Authority key identifier: 1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fpbdAkLl3oOC_o6H4MfRH4o2n8I.roa
Signing time: Sun 01 Jan 2023 12:54:56 +0000
ROA not before: Sun 01 Jan 2023 12:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 40999
IP address blocks: 83.125.8.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:66:43:b4:dd:20:6a:e5:7e:29:94:7f:a9:0d:88:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1fe90fde9784a91d93a7a2af59d4d043f1171fba
Validity
Not Before: Jan 1 12:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e96dd0242e5de8382fe8e87e0c7d11f8a369fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:cd:8a:ba:9d:1a:3c:e7:e3:79:84:b8:7a:86:
a5:bc:f2:0b:42:8e:12:3a:9e:1d:90:b5:19:e2:e2:
74:65:4b:a7:c4:f4:99:3c:39:c4:3c:30:cf:99:28:
9b:5b:34:37:f7:02:45:cf:8e:a5:ab:d8:57:b1:b7:
33:87:db:9f:f9:7d:2e:13:49:43:17:bf:b3:9e:21:
b7:bd:8d:40:6d:a8:bd:5a:d6:cb:ec:58:4a:4b:d8:
98:90:d9:45:88:a7:d8:eb:fd:e5:eb:8e:c3:b0:5f:
57:ce:d4:52:df:3d:69:eb:01:26:6a:a7:59:a4:da:
43:08:ab:0d:c0:55:2e:68:1e:cc:00:39:49:0f:49:
7f:45:29:64:d9:1f:0d:46:79:63:02:a5:63:97:8c:
42:3c:34:f6:1e:53:3d:42:a5:e3:4c:e5:80:e7:30:
de:f7:54:86:fb:93:91:50:8b:9b:9f:f4:74:b2:34:
0e:19:dc:27:6e:e7:b9:ef:89:e7:4d:3a:8a:6f:18:
48:d0:b4:ea:a5:3e:17:59:5e:51:6e:b3:5c:fd:e3:
0f:c1:90:d9:a4:01:7c:2d:a4:2b:6f:ea:fb:f8:80:
98:e9:44:28:38:dc:2c:0f:4e:1d:fe:8b:15:34:37:
6f:36:36:83:e0:d4:0f:65:7c:34:7a:cc:c8:52:35:
97:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:DD:02:42:E5:DE:83:82:FE:8E:87:E0:C7:D1:1F:8A:36:9F:C2
X509v3 Authority Key Identifier:
keyid:1F:E9:0F:DE:97:84:A9:1D:93:A7:A2:AF:59:D4:D0:43:F1:17:1F:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/fpbdAkLl3oOC_o6H4MfRH4o2n8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/a945f7-53b3-4db5-ae04-23772e7f92e3/1/H-kP3peEqR2Tp6KvWdTQQ_EXH7o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.125.8.0/22
Signature Algorithm: sha256WithRSAEncryption
96:5e:76:e3:cf:a6:4a:5b:a4:71:6d:27:39:ae:52:ea:ea:a2:
c9:65:ca:6c:36:9b:c4:3d:71:d2:55:7d:21:11:55:e5:c5:21:
9d:d1:5f:ec:4b:e8:7c:99:34:f5:bf:f8:e4:88:52:84:ad:a6:
9c:34:75:0e:af:67:d8:54:48:a2:0d:36:e8:df:58:df:a8:2d:
5b:1a:0e:25:c2:90:04:3c:81:20:e4:e9:6a:91:8f:5c:8c:e1:
26:bc:4c:e7:d4:ea:18:24:b4:c2:63:b1:8b:b9:50:b6:44:26:
3c:76:96:4d:ca:fc:84:e0:0e:af:c1:c7:27:b2:05:af:cf:7e:
93:2c:21:74:54:40:31:6b:0a:f1:ee:90:0d:94:f6:70:04:e8:
81:78:96:00:c9:93:8d:f6:3b:00:cd:e5:6b:9e:94:b7:5d:b6:
51:44:3e:5c:89:8c:7f:46:6e:55:ae:a0:d3:a8:c6:fe:63:2c:
65:af:12:73:71:bb:85:c2:3e:84:80:dc:af:b2:4f:90:37:ba:
95:c5:91:7d:60:32:0e:06:9d:5a:fa:dd:84:24:e4:e1:7a:d7:
6d:2d:94:ca:0e:01:7f:29:54:a4:9c:d8:a8:0a:15:93:87:72:
de:b6:3e:8f:09:44:9d:77:e7:78:3e:78:d3:0c:29:c0:ee:37:
83:1f:73:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:13 2024 by rpki-client on console-fra.rpki-client.org