Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/FVCEbuM0QCGuqgeJqxrv86vq7TI.roa
File: FVCEbuM0QCGuqgeJqxrv86vq7TI.roa (raw, json)
Hash identifier: va1ZAKMBR+NsbEHmRGhnjUsAT5FHhCZ4f47vTe5c8Cc=
Subject key identifier: 15:50:84:6E:E3:34:40:21:AE:AA:07:89:AB:1A:EF:F3:AB:EA:ED:32
Certificate issuer: /CN=f030658f16d2d88d34164592fcd4de13131f1695
Certificate serial: 018D3D1DADDE716EEA4DF6A64A77BDCBD15C
Authority key identifier: F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/FVCEbuM0QCGuqgeJqxrv86vq7TI.roa
Signing time: Wed 24 Jan 2024 20:16:11 +0000
ROA not before: Wed 24 Jan 2024 20:16:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206728
IP address blocks: 217.196.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Mar 2024 14:43:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3d:1d:ad:de:71:6e:ea:4d:f6:a6:4a:77:bd:cb:d1:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f030658f16d2d88d34164592fcd4de13131f1695
Validity
Not Before: Jan 24 20:16:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1550846ee3344021aeaa0789ab1aeff3abeaed32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c5:03:d6:dc:8d:0b:98:c9:4f:60:fd:ec:d9:
7b:d5:1f:f2:5a:8c:13:f5:45:53:2a:b1:4a:90:1b:
c5:1a:ac:d2:46:9a:df:34:63:bc:56:53:82:c3:6e:
09:a0:1b:be:05:f5:e8:40:cb:56:a6:ec:67:bc:37:
0c:ae:ab:40:3b:d0:63:3e:24:bd:d3:8f:82:e8:f5:
2c:2c:f9:a3:12:46:6c:04:e9:b5:c6:04:34:70:a9:
60:6a:69:78:5d:f2:ea:90:79:90:7d:0e:f6:7e:96:
d9:c5:4d:05:e6:15:fb:da:6a:9e:dd:c5:66:ba:c7:
e7:15:16:95:de:d1:9b:0a:69:bb:f6:3e:04:cc:50:
8d:5b:9a:4a:a8:b4:0d:e5:93:33:8d:34:5f:13:b0:
e9:7f:01:a4:9e:f8:a1:e6:83:01:43:7d:b2:40:66:
2b:22:84:8d:7c:d5:47:d4:55:e7:ae:d2:25:17:14:
38:74:f0:09:c7:ce:44:f9:7d:ad:ea:c5:0a:32:64:
0e:28:1c:22:45:c0:96:b3:2d:30:c0:3d:22:b7:93:
ef:c9:3d:2a:c6:2b:45:14:21:74:8d:d3:c7:bd:86:
3b:38:75:20:e4:79:23:9f:e3:f3:cf:d5:0c:8c:28:
5b:e0:49:36:50:16:87:12:7c:92:72:b4:6c:0c:ea:
b8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:50:84:6E:E3:34:40:21:AE:AA:07:89:AB:1A:EF:F3:AB:EA:ED:32
X509v3 Authority Key Identifier:
keyid:F0:30:65:8F:16:D2:D8:8D:34:16:45:92:FC:D4:DE:13:13:1F:16:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DBljxbS2I00FkWS_NTeExMfFpU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/FVCEbuM0QCGuqgeJqxrv86vq7TI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6693e3-89ca-44a1-a8b6-894805289cc0/1/8DBljxbS2I00FkWS_NTeExMfFpU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.196.102.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:97:f0:9f:fd:fe:31:7d:64:24:35:b8:1a:61:6e:90:3b:35:
bc:e4:18:7a:7f:4f:20:77:d4:e7:2d:4d:19:55:f0:ef:17:88:
83:ab:c1:22:2f:ff:f8:89:53:ff:ed:fb:39:b9:a5:20:e6:62:
05:ad:0c:78:eb:cb:2e:5a:bf:d0:a4:e3:02:e3:04:79:e5:b9:
0a:3e:d5:65:78:c5:64:41:22:d4:b3:47:eb:2d:62:30:ba:e0:
ca:f9:38:fc:68:ef:71:df:52:76:aa:25:e2:63:d1:19:d8:99:
2b:fd:06:d0:47:87:08:f7:63:08:7f:8a:05:49:d2:9a:99:93:
22:20:6d:a4:66:06:81:9a:ad:6c:59:4a:1d:24:df:4c:75:d7:
ae:5a:c0:a1:fe:fc:bc:8a:01:73:6e:36:0c:1f:13:83:55:ad:
6c:0e:fe:22:53:5f:2f:2b:4c:6c:28:33:ea:8a:f4:06:c1:5a:
ec:2e:20:06:74:89:46:54:a1:1e:cc:81:48:77:a6:a7:5f:88:
e5:08:70:b4:8b:44:41:50:2b:80:e3:93:c9:82:42:69:1d:3b:
e6:21:31:ff:bb:90:d1:4b:52:ec:87:04:43:06:1e:ad:db:1c:
34:fb:13:e6:9f:a3:71:bb:a4:91:3d:ea:a9:1b:d1:03:0f:aa:
3c:70:ee:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:37 2024 by rpki-client on console-fra.rpki-client.org