Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/fpLGR5YNl74yt91OqxVGwU09yss.roa
File: fpLGR5YNl74yt91OqxVGwU09yss.roa (raw, json)
Hash identifier: VbdysW4xbBf6W7FQXHbWRWhU8tPlB0dxKTTD7o1Hg1Q=
Subject key identifier: 7E:92:C6:47:96:0D:97:BE:32:B7:DD:4E:AB:15:46:C1:4D:3D:CA:CB
Certificate issuer: /CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Certificate serial: 018CC3491202510B7994161CDE68677E7309
Authority key identifier: FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/fpLGR5YNl74yt91OqxVGwU09yss.roa
Signing time: Mon 01 Jan 2024 04:29:54 +0000
ROA not before: Mon 01 Jan 2024 04:29:54 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200424
IP address blocks: 45.92.56.0/22 maxlen: 24
185.107.144.0/22 maxlen: 24
2a06:42c0::/29 maxlen: 32
2a0e:1ec0::/29 maxlen: 32
Validation: Failed, certificate revoked on Tue 30 Jan 2024 18:03:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:12:02:51:0b:79:94:16:1c:de:68:67:7e:73:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb357f291af4a4c6747b3e4fbe61181d357c8bcc
Validity
Not Before: Jan 1 04:29:54 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7e92c647960d97be32b7dd4eab1546c14d3dcacb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:86:e2:93:66:5f:e1:01:22:5d:17:03:e0:6b:
2d:16:1f:c4:8a:19:1c:73:41:69:a5:3f:2b:6e:12:
fc:1f:d1:8a:5b:8b:d1:27:bc:ca:2f:86:1f:ce:81:
04:47:90:ca:3d:60:c9:41:f3:31:cd:3e:eb:a7:2c:
6b:32:b3:c6:98:a6:79:f5:e8:8a:76:4c:28:02:51:
bb:f7:2a:b5:48:cb:81:94:eb:16:72:a3:a4:30:bc:
46:42:f4:ae:c2:6d:83:d0:17:94:d0:a1:2b:bb:63:
d0:3d:89:4e:8c:e0:03:48:51:90:d8:17:79:e1:9a:
35:11:3d:ed:dc:1b:db:8b:3b:f2:32:62:42:41:91:
b1:c4:23:2e:32:f9:93:96:61:37:56:65:46:90:98:
fd:2b:e6:a6:d6:67:ba:65:7f:32:49:4c:6f:73:71:
34:b6:94:47:98:2c:42:c3:bf:23:fa:94:eb:8e:82:
4a:56:18:f9:57:6a:51:30:0a:66:f6:2b:9f:d1:62:
e4:3e:7f:0e:62:67:63:a9:e6:12:da:20:83:30:14:
5c:4f:f4:02:b5:9d:80:a5:b4:8b:3e:21:a6:99:73:
09:d5:b5:7b:7f:9c:ac:c3:e4:c2:08:32:46:7b:1c:
f5:9f:86:83:bc:4a:39:e9:59:c0:16:7a:47:7e:67:
37:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:92:C6:47:96:0D:97:BE:32:B7:DD:4E:AB:15:46:C1:4D:3D:CA:CB
X509v3 Authority Key Identifier:
keyid:FB:35:7F:29:1A:F4:A4:C6:74:7B:3E:4F:BE:61:18:1D:35:7C:8B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/fpLGR5YNl74yt91OqxVGwU09yss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/810b0e-10de-43d2-9d27-4c26ca4c77b8/1/1-zV_KRr0pMZ0ez5PvmEYHTV8i8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.56.0/22
185.107.144.0/22
IPv6:
2a06:42c0::/29
2a0e:1ec0::/29
Signature Algorithm: sha256WithRSAEncryption
16:ae:68:f7:d9:f9:14:bb:b1:a8:02:8c:4b:0a:01:71:16:8b:
68:00:8c:6b:75:20:ab:fe:3d:d3:c9:ed:fb:f8:25:1c:1e:a5:
6a:6e:ec:00:d8:9a:40:f9:8c:e9:71:e5:49:7f:cd:9f:ad:1e:
83:ee:79:ba:ed:fc:92:f4:8d:38:35:19:b5:97:8c:2a:89:f6:
6f:16:9a:05:6f:2f:54:49:15:e1:04:9b:20:3f:aa:7b:56:95:
0c:99:d5:08:9e:7e:e0:36:32:5d:4a:54:61:2e:cc:00:49:0c:
09:1a:3e:c0:96:27:b4:4c:fb:9f:be:51:9b:10:2d:b7:5e:21:
0f:c6:ff:23:3c:20:bf:3b:b9:a0:cd:8f:34:36:3b:28:88:7b:
15:af:76:0d:15:ab:73:36:72:fc:9f:24:21:44:9b:13:1c:6e:
a4:4f:3c:b3:98:99:0a:12:e0:57:85:36:f0:2e:0d:13:80:a0:
73:f1:e4:ef:48:1a:3a:18:c4:f5:fb:14:9f:71:0a:a9:99:92:
68:95:ba:38:05:e9:ee:fe:60:89:0a:8f:a1:30:73:59:de:1f:
45:37:76:6c:a6:ec:5a:c7:04:51:08:4f:03:47:91:17:25:fa:
06:83:ed:5b:e4:5c:69:4c:5e:eb:c6:fa:47:c7:97:7c:49:46:
58:4d:33:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:25:25 2025 by rpki-client