Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fxWZrY_0gCxicBTcmZnsMsIKeBA.roa
File: fxWZrY_0gCxicBTcmZnsMsIKeBA.roa (raw, json)
Hash identifier: cR7G3xHzMdEb6o1OqijjJBbFMox4D9yjqpaswtPNGDU=
Subject key identifier: 7F:15:99:AD:8F:F4:80:2C:62:70:14:DC:99:99:EC:32:C2:0A:78:10
Certificate issuer: /CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Certificate serial: 018B8028BF97ED75038B4AF7CA031BEFD914
Authority key identifier: 32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fxWZrY_0gCxicBTcmZnsMsIKeBA.roa
Signing time: Mon 30 Oct 2023 10:37:15 +0000
ROA not before: Mon 30 Oct 2023 10:37:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205663
IP address blocks: 192.145.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:29:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:28:bf:97:ed:75:03:8b:4a:f7:ca:03:1b:ef:d9:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3263787fd0f94b37813eef16bc8137423ee3fef3
Validity
Not Before: Oct 30 10:37:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f1599ad8ff4802c627014dc9999ec32c20a7810
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2e:22:58:93:99:67:57:cb:c3:33:05:30:78:
11:01:e0:8f:a8:e1:ce:3f:53:e6:7c:ab:cd:62:df:
66:e6:86:b9:19:73:21:0c:87:40:8a:b7:d9:b8:72:
35:50:df:58:30:0a:10:2f:99:19:d6:a7:05:60:aa:
9e:48:10:65:7e:5e:4c:d4:e8:5b:54:d6:c1:2f:a9:
11:b8:98:29:0d:4b:4c:43:89:40:fd:4c:d9:2b:5c:
28:25:61:c1:b4:36:64:4c:5d:a5:bd:0c:e7:aa:09:
54:81:ec:77:f2:a9:f4:5b:cc:69:33:9b:51:5b:6d:
99:2c:96:41:a2:db:5d:e0:68:79:87:83:23:42:d7:
f7:4f:fb:8d:f9:49:cc:f8:0a:9d:1d:fb:fd:6f:fe:
ef:36:86:3c:73:87:18:a8:0f:6d:fe:6d:d7:5f:1d:
15:89:b5:8c:6d:6e:df:1b:73:3e:91:f0:16:20:ff:
9b:07:e9:1a:f1:37:1f:42:62:38:a7:c9:1f:2e:d7:
65:54:97:f8:05:dd:db:e8:43:d1:12:ad:40:6d:6f:
e8:7c:15:1a:68:18:41:ed:3a:3c:17:cf:72:39:f1:
ec:d0:df:c8:34:4b:e9:c0:de:4d:61:6c:3d:46:37:
4f:4a:b5:d1:46:66:29:bf:8d:3f:ce:66:1c:b2:f6:
c9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:15:99:AD:8F:F4:80:2C:62:70:14:DC:99:99:EC:32:C2:0A:78:10
X509v3 Authority Key Identifier:
keyid:32:63:78:7F:D0:F9:4B:37:81:3E:EF:16:BC:81:37:42:3E:E3:FE:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/fxWZrY_0gCxicBTcmZnsMsIKeBA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/7703ef-2422-437c-b93d-595e0bf5c613/1/MmN4f9D5SzeBPu8WvIE3Qj7j_vM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.145.52.0/24
Signature Algorithm: sha256WithRSAEncryption
72:6c:11:f4:8d:4f:38:cd:4a:c2:92:70:3c:c4:96:74:d8:38:
db:82:fa:ed:7b:5c:ab:c6:63:46:ff:80:20:98:04:22:fc:94:
6e:dc:ce:d0:ae:22:11:4a:ab:ee:8b:4b:74:87:a5:dd:22:4a:
54:de:6e:4a:f4:40:dc:bc:4f:14:ac:46:67:a3:e4:45:02:e7:
61:9a:37:c6:0c:13:c1:7f:43:15:75:92:bb:12:df:1c:67:28:
d1:65:74:9e:40:cb:95:ca:d5:fd:21:26:59:1e:f7:7e:50:60:
49:78:53:4f:1b:8f:47:05:d3:10:fa:11:63:1a:ba:8d:e0:3f:
39:d6:b9:38:ba:f4:43:4c:ae:49:94:7e:87:63:0d:74:62:93:
54:29:0c:45:b5:62:04:7c:1b:fb:15:78:db:6f:1c:9e:4a:c3:
5e:77:d4:d8:7f:f6:d4:49:63:e1:fe:42:7c:fa:8a:0d:45:29:
6c:d5:5f:35:8f:97:5b:ff:24:50:90:cc:cb:9a:fd:5a:56:b0:
8e:1e:e8:7c:36:61:83:be:d0:01:54:b8:18:ff:0a:f2:0c:6b:
f4:16:98:03:ca:61:a5:93:e3:e1:cd:8f:00:23:0f:eb:20:bc:
e5:f5:8c:80:0d:4f:cd:1b:a6:9d:5d:df:8b:16:6a:60:06:ea:
6e:72:47:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:15 2024 by rpki-client on console-fra.rpki-client.org