Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-8p4R5YSN_1ZuJnco1EXK96TkOU.roa
File: 1-8p4R5YSN_1ZuJnco1EXK96TkOU.roa (raw, json)
Hash identifier: ef7f009n6VRaV8PgjABsHgACY0K4YN6xqu9MN5+Wbzs=
Subject key identifier: FB:CA:78:47:96:12:37:FD:59:B8:99:DC:A3:51:17:2B:DE:93:90:E5
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 018CC56F02638A721E3A6DE5015900B1CC5B
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-8p4R5YSN_1ZuJnco1EXK96TkOU.roa
Signing time: Mon 01 Jan 2024 14:30:35 +0000
ROA not before: Mon 01 Jan 2024 14:30:35 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 50866
IP address blocks: 82.119.72.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 05 Apr 2024 10:14:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:6f:02:63:8a:72:1e:3a:6d:e5:01:59:00:b1:cc:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Jan 1 14:30:35 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fbca7847961237fd59b899dca351172bde9390e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:38:d5:56:48:97:51:f3:c4:40:36:50:75:ca:
3b:65:78:85:fc:92:84:0e:a7:0c:a7:bc:00:ab:90:
d7:9b:be:b7:da:a3:98:df:fa:46:05:2a:36:40:57:
7f:38:6f:2e:6b:f5:b1:60:e8:dc:7c:86:f9:15:1c:
69:c0:fb:4b:c0:99:ae:ec:94:dd:c6:11:cb:d7:f6:
9c:ba:da:95:c9:a8:05:07:0f:ac:3e:fa:b4:88:19:
bf:18:79:9a:aa:6e:ae:e3:48:b5:f8:6f:08:27:d5:
27:9e:72:a3:40:47:6e:b5:4a:74:04:ab:63:20:b6:
bb:ce:f2:c5:68:54:47:bd:d2:2d:ef:ec:fc:80:82:
80:46:79:0c:b3:72:93:ad:20:48:13:4b:aa:b5:31:
4d:e2:c1:67:a3:53:36:ab:ec:80:50:8e:93:ad:80:
78:8d:35:e4:d9:30:9c:e3:74:4e:5f:b3:8e:a5:50:
c5:ef:6f:a1:61:9c:27:46:d0:a5:07:35:c0:c1:f0:
63:a1:00:28:8c:c9:ef:bc:0a:3f:07:16:66:f2:ab:
b4:e8:20:6e:d3:16:a7:05:61:4c:07:4b:0f:10:33:
e3:61:a7:dc:79:ea:b6:ce:14:e9:6b:de:93:b7:9d:
8a:a2:7d:39:08:42:f7:ea:ca:57:97:02:c7:39:66:
96:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CA:78:47:96:12:37:FD:59:B8:99:DC:A3:51:17:2B:DE:93:90:E5
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/1-8p4R5YSN_1ZuJnco1EXK96TkOU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.119.72.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ee:02:59:7a:f8:b6:a1:7c:42:05:44:84:04:82:f5:bd:c8:
b9:11:9c:71:cc:61:96:f5:e1:ed:a4:36:29:31:a6:b7:e9:a7:
28:12:49:d0:c8:73:22:35:7e:61:e6:5d:0f:66:79:39:cc:87:
e3:44:05:96:bb:c6:b2:55:56:63:8f:4f:5a:2f:92:f3:c5:f0:
45:f1:4f:26:40:ae:cf:ee:8c:c8:70:de:f1:14:9b:8e:b6:41:
7a:0b:2b:b2:e2:79:78:37:9d:7e:cd:af:4d:92:14:a1:13:3f:
93:53:3d:68:5a:1c:31:92:a2:bd:0c:27:d8:a2:2f:da:9c:60:
2c:6f:02:58:0e:9f:2c:66:4b:d3:eb:be:83:8f:8f:1a:6a:2c:
d2:0d:0d:6c:df:44:33:9a:ec:45:c9:de:12:46:f2:0e:05:b0:
5e:75:18:6e:3e:30:43:89:cd:dd:53:ff:24:bc:2a:46:bd:c3:
dd:21:80:a0:bb:5f:c9:76:7a:46:37:15:f8:d4:35:61:65:c0:
be:4c:6e:a8:5d:84:bf:74:30:17:22:c4:05:db:58:2e:74:6b:
b3:30:3b:c9:67:93:4e:bd:d5:06:72:21:af:c2:10:92:3c:da:
5c:83:88:84:16:27:ca:f1:4a:38:98:c9:7e:4a:30:22:20:18:
b5:0b:68:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:18 2024 by rpki-client on console-ams.rpki-client.org