Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FTzBM-f_e-4gAun8rE3o7DFuI3I.roa
File: FTzBM-f_e-4gAun8rE3o7DFuI3I.roa (raw, json)
Hash identifier: 0Yi+NxEtyCnHyVFpnqANGhQSr4V1yVhRtcgEFaVI0Sg=
Subject key identifier: 15:3C:C1:33:E7:FF:7B:EE:20:02:E9:FC:AC:4D:E8:EC:31:6E:23:72
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF5304E945B1AF1038D24F6F2980C
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FTzBM-f_e-4gAun8rE3o7DFuI3I.roa
Signing time: Sun 01 Jan 2023 11:15:12 +0000
ROA not before: Sun 01 Jan 2023 11:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206337
IP address blocks: 188.93.106.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f5:30:4e:94:5b:1a:f1:03:8d:24:f6:f2:98:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=153cc133e7ff7bee2002e9fcac4de8ec316e2372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:89:f3:a1:69:4d:f8:e7:83:c3:5f:f1:0a:e7:
23:cf:0f:7b:45:8f:3b:01:67:e2:8c:73:3c:0e:b7:
fe:de:af:45:92:cd:3c:75:b6:7a:24:58:86:9a:38:
bd:24:9b:48:e4:41:3d:5e:90:0b:b4:ca:f2:59:e8:
eb:a4:67:fa:de:f6:42:ac:25:2d:26:1d:cd:39:b4:
9a:29:bf:d6:cf:ce:e1:b4:fe:d1:62:4c:d7:72:e7:
bd:b0:78:c7:92:0e:61:8b:7e:7f:81:0d:ef:88:cf:
1d:9c:2f:16:11:24:0a:18:38:6b:27:df:b8:67:60:
10:6a:e5:31:32:e6:16:a7:a2:54:5e:b7:c2:62:6c:
21:29:99:f2:1c:0b:5f:8f:36:cf:22:57:42:b8:0f:
73:2b:31:43:16:ae:a9:47:0f:cf:c2:e6:b8:dc:d5:
d9:37:1c:d3:04:2d:e5:87:b3:91:89:eb:5b:79:f7:
78:da:c7:6d:ae:4b:fd:bd:32:3a:f8:9a:2f:b1:8a:
4f:a1:cc:58:87:07:bf:58:d7:e3:8e:11:e2:19:21:
39:58:d5:3d:3e:3e:fa:1c:0f:a7:ae:87:c8:af:0d:
84:76:a4:2b:58:2f:41:c2:65:c2:18:62:17:2a:76:
1e:62:c8:1a:1a:02:d9:6f:73:d4:97:49:2f:57:a9:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:3C:C1:33:E7:FF:7B:EE:20:02:E9:FC:AC:4D:E8:EC:31:6E:23:72
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/FTzBM-f_e-4gAun8rE3o7DFuI3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.93.106.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:a6:6a:45:43:f5:fe:cd:22:58:9c:a3:1c:81:94:45:c0:f0:
54:d9:f7:63:95:df:ee:e3:b0:f9:7d:d4:7e:e4:93:2f:12:cb:
33:e4:a9:d5:03:84:1e:93:3d:94:a2:62:f9:be:9b:e8:75:50:
c5:f5:8f:5f:41:47:7c:1e:5f:d5:9c:84:81:7d:b5:c1:9e:ca:
75:f4:91:87:ca:57:f6:91:60:73:5a:1b:7f:7a:82:52:5d:70:
c9:74:74:7a:cd:54:4f:56:4d:e1:a8:f7:a1:1c:6b:42:fe:07:
69:8d:53:19:d7:d9:e2:d8:5d:21:c9:81:c8:d8:c3:90:49:9c:
d7:f5:e0:3d:8a:c1:10:bb:46:67:5a:6b:6a:11:22:c6:b5:86:
28:40:c0:cb:5b:d0:04:bb:e6:b2:52:aa:4e:a6:18:98:7b:8c:
2b:8c:e5:48:60:ae:03:ea:c0:47:33:f5:d9:aa:7a:ff:9f:26:
bf:ad:63:d2:e2:5b:ff:a2:fc:5f:87:41:a6:4e:df:11:cb:15:
ea:a9:84:9b:4c:14:78:cc:da:24:54:c6:94:57:cc:1a:89:ea:
46:43:ce:c7:e5:92:a6:93:dc:bb:52:ae:18:7c:65:cc:fb:4d:
99:61:d6:d7:1e:8f:d5:48:79:22:78:f9:3a:09:24:83:4c:c6:
51:0c:7b:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org