Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fbxf3E1e3fzDxuuDPDrK40raG_o.roa
File: fbxf3E1e3fzDxuuDPDrK40raG_o.roa (raw, json)
Hash identifier: wZxTDanOdYdCWwksqEbWoD20F7ZrXgL2SmOErCGqx94=
Subject key identifier: 7D:BC:5F:DC:4D:5E:DD:FC:C3:C6:EB:83:3C:3A:CA:E3:4A:DA:1B:FA
Certificate issuer: /CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Certificate serial: 0187277476C374B194E6223361891883974F
Authority key identifier: 30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fbxf3E1e3fzDxuuDPDrK40raG_o.roa
Signing time: Tue 28 Mar 2023 09:02:36 +0000
ROA not before: Tue 28 Mar 2023 09:02:36 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31418
IP address blocks: 195.53.129.0/24 maxlen: 24
195.53.128.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 25 May 2023 10:39:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:74:76:c3:74:b1:94:e6:22:33:61:89:18:83:97:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307f5fe2740a2b6de4c3709d2964115b3c967da1
Validity
Not Before: Mar 28 09:02:36 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dbc5fdc4d5eddfcc3c6eb833c3acae34ada1bfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:6e:0d:14:47:9c:75:7a:e6:7f:e1:51:57:15:
72:12:54:52:0d:a3:db:fa:81:fb:c0:8a:83:e5:62:
93:81:da:d5:a7:3b:44:97:25:6b:ec:17:d1:86:e0:
42:ff:ac:20:0e:2f:0c:0d:fd:6a:c3:b9:7b:6b:e7:
6b:23:2e:77:11:f5:63:fc:92:dd:36:3a:e4:c3:aa:
19:91:5c:db:33:c1:2f:94:bb:1b:03:ba:8c:ce:e5:
30:46:19:e8:49:20:1d:fb:4b:16:62:e8:80:9d:2c:
08:0b:64:2a:71:84:a1:bb:57:ad:8d:d7:75:9a:80:
bc:92:6c:b3:00:fc:f1:95:9e:f7:03:6c:38:ec:c7:
f4:2d:75:e3:49:fa:43:f1:f2:3f:3c:a3:12:ec:69:
77:56:ad:b7:4d:c4:8a:d7:9c:66:c0:9a:af:ae:fd:
7e:ac:c8:2c:ec:88:f8:a3:cf:d0:a0:7b:9a:0d:0b:
da:2d:97:39:b2:d9:a4:0f:db:6b:3c:85:3b:d0:08:
53:6e:83:1a:9e:ca:53:74:bd:60:33:64:8b:2a:6c:
35:b3:89:12:0f:6b:53:a3:48:8b:4e:14:e4:80:67:
b3:7d:9b:f9:48:a4:e6:47:26:04:47:c7:75:a5:95:
53:29:2a:09:d9:11:4d:02:f3:6f:36:64:cb:92:f2:
33:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BC:5F:DC:4D:5E:DD:FC:C3:C6:EB:83:3C:3A:CA:E3:4A:DA:1B:FA
X509v3 Authority Key Identifier:
keyid:30:7F:5F:E2:74:0A:2B:6D:E4:C3:70:9D:29:64:11:5B:3C:96:7D:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MH9f4nQKK23kw3CdKWQRWzyWfaE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/fbxf3E1e3fzDxuuDPDrK40raG_o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/dcfd48-c54a-4c78-a4ed-4ba2f8f1f83b/1/MH9f4nQKK23kw3CdKWQRWzyWfaE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.53.128.0/23
Signature Algorithm: sha256WithRSAEncryption
68:36:80:09:27:26:8a:45:6b:05:55:44:52:f1:dc:4d:ea:f5:
a9:a1:d2:e5:52:7a:0c:5b:44:96:d3:6b:ec:fb:52:04:3d:6b:
e2:d7:14:e1:0a:f5:f6:ca:07:a4:83:de:82:01:2d:74:ec:7f:
eb:36:ef:7e:5d:3e:bf:df:81:98:d9:69:f3:c8:de:09:78:0e:
3a:be:05:b5:fc:1e:50:99:7b:99:c7:7d:cc:07:c3:83:5a:e5:
f3:d2:29:1b:54:0a:45:87:79:cb:01:6d:d6:d1:2f:06:16:12:
8e:a4:d8:51:94:f1:84:9f:2a:24:c6:51:97:50:86:be:51:c7:
69:c2:09:a2:1d:3a:64:97:8b:33:2d:88:89:01:bc:23:de:7c:
11:04:29:e6:f9:2a:20:84:d7:56:0b:e8:75:b4:63:94:83:16:
e5:ce:1b:a8:cb:23:cc:a0:79:11:37:00:ae:b5:fb:0d:d2:c4:
7d:da:db:37:6f:74:27:77:87:f4:88:a6:95:33:ae:42:ae:a9:
92:2c:97:3f:39:36:8f:a4:86:1c:f3:d1:bf:a9:45:a2:c8:a1:
2c:c4:68:84:87:ce:6c:a5:c5:64:65:d4:41:89:06:71:77:e0:
8e:74:a9:f8:5a:f8:06:39:e1:b9:50:38:6c:90:dd:3c:32:29:
c2:88:3f:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:13 2024 by rpki-client on console-ams.rpki-client.org