Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/FiBx-1elx6zKKM4qVsTIgZQ_ps8.roa
File: FiBx-1elx6zKKM4qVsTIgZQ_ps8.roa (raw, json)
Hash identifier: 9Q9oWPUUtFAaPiXxxT83aoZu1i4z6UZM2Ea3ovI+tJo=
Subject key identifier: 16:20:71:FB:57:A5:C7:AC:CA:28:CE:2A:56:C4:C8:81:94:3F:A6:CF
Certificate issuer: /CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Certificate serial: 01856C1CABBF98C2AC8E62BD0698690F94F3
Authority key identifier: 02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/FiBx-1elx6zKKM4qVsTIgZQ_ps8.roa
Signing time: Sun 01 Jan 2023 06:54:56 +0000
ROA not before: Sun 01 Jan 2023 06:54:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 6735
IP address blocks: 194.113.117.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:1c:ab:bf:98:c2:ac:8e:62:bd:06:98:69:0f:94:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=028fdf719d47a10033451a83384a6db68dbd5b0f
Validity
Not Before: Jan 1 06:54:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=162071fb57a5c7acca28ce2a56c4c881943fa6cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:e8:e9:8d:bb:3a:dd:30:01:65:4e:95:bf:2b:
57:2c:0c:38:e5:6b:ba:55:73:14:d7:76:8a:b6:0b:
4f:38:48:c4:af:e6:98:94:16:51:4f:49:aa:65:bf:
f9:3a:2d:ac:5f:6e:41:9c:cb:a2:2a:e9:6b:74:58:
20:ee:cc:a1:06:74:aa:3b:a3:f6:9b:26:18:11:33:
76:e5:ca:b7:a8:08:de:ab:42:9d:b6:f3:63:e9:c8:
de:45:0e:2b:5d:94:69:83:04:38:40:c1:f3:74:57:
32:7b:7f:f2:65:61:0e:f1:1b:04:61:9f:0c:df:20:
bb:be:f2:c2:79:f6:bd:37:fd:3d:8b:71:6d:2a:3f:
17:cb:cc:1f:27:0c:91:ee:e3:65:76:06:d8:6d:f1:
18:5c:a2:0a:55:c6:0d:18:e2:f2:c9:4b:74:4f:4d:
76:70:57:58:a8:a3:af:60:61:f0:b7:ef:59:f5:34:
36:71:c0:5b:94:41:a2:95:0a:c6:39:13:fe:31:08:
cc:ff:ea:45:31:34:8a:00:4d:19:11:d5:40:56:d3:
92:a4:8e:99:a4:57:e0:ea:30:ad:73:4b:4e:34:bd:
cc:0a:8c:4e:0b:1f:55:30:d5:0f:bc:6f:b0:c5:fc:
7b:46:e9:29:ed:03:fc:ef:08:e7:0f:6d:ac:a2:c1:
0c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:71:FB:57:A5:C7:AC:CA:28:CE:2A:56:C4:C8:81:94:3F:A6:CF
X509v3 Authority Key Identifier:
keyid:02:8F:DF:71:9D:47:A1:00:33:45:1A:83:38:4A:6D:B6:8D:BD:5B:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ao_fcZ1HoQAzRRqDOEptto29Ww8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/FiBx-1elx6zKKM4qVsTIgZQ_ps8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/d49d52-50b1-4948-b1f7-055a9cad8df7/1/Ao_fcZ1HoQAzRRqDOEptto29Ww8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.113.117.0/24
Signature Algorithm: sha256WithRSAEncryption
61:03:76:b3:8c:fe:27:bd:ee:22:e2:9d:84:8d:0e:89:c3:a7:
b9:1d:63:b9:bf:27:ef:e3:20:9c:2e:a3:f6:9d:48:6c:14:ec:
9b:cc:12:1a:c5:4d:4b:4e:7f:b2:db:69:92:a4:4a:64:ad:fc:
07:61:20:d6:da:b8:eb:c8:2c:08:01:d0:6a:41:b1:4f:ca:ee:
fe:07:1d:9f:d7:af:d5:9e:07:3d:b1:d8:34:07:dd:bd:cb:ff:
35:82:14:7a:31:21:4f:df:d2:a3:92:d3:48:c2:7a:d3:10:97:
1f:58:8a:6b:ea:44:31:65:7f:24:8f:1e:b8:f6:47:19:7a:c9:
51:92:20:fa:62:79:ed:20:b4:e6:b3:59:f0:c4:c5:5d:a9:d0:
29:53:c3:12:c8:96:2c:eb:d3:1b:59:61:83:1a:1b:f8:a3:8c:
55:6f:6b:b2:c7:23:68:1d:88:74:8d:ff:ed:ba:3d:4b:9e:bc:
94:1f:8d:d4:c7:38:04:b5:28:4b:4e:04:86:2e:70:23:67:ba:
98:9a:a3:f6:30:77:93:6e:6e:32:2c:a1:01:00:45:c4:0a:62:
a8:80:88:f5:96:59:c2:39:a4:74:b7:2a:fd:26:81:8b:95:79:
a6:0a:2d:f1:19:cf:ec:9e:59:80:81:5e:0b:c5:35:5e:f9:73:
01:6b:08:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYVsHKu/mMKsjmK9BphpD5TzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyOGZkZjcxOWQ0N2ExMDAzMzQ1MWE4MzM4NGE2ZGI2OGRi
ZDViMGYwHhcNMjMwMTAxMDY1NDU2WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxNjIwNzFmYjU3YTVjN2FjY2EyOGNlMmE1NmM0Yzg4MTk0M2ZhNmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArejpjbs63TABZU6VvytXLAw45Wu6
VXMU13aKtgtPOEjEr+aYlBZRT0mqZb/5Oi2sX25BnMuiKulrdFgg7syhBnSqO6P2
myYYETN25cq3qAjeq0KdtvNj6cjeRQ4rXZRpgwQ4QMHzdFcye3/yZWEO8RsEYZ8M
3yC7vvLCefa9N/09i3FtKj8Xy8wfJwyR7uNldgbYbfEYXKIKVcYNGOLyyUt0T012
cFdYqKOvYGHwt+9Z9TQ2ccBblEGilQrGORP+MQjM/+pFMTSKAE0ZEdVAVtOSpI6Z
pFfg6jCtc0tONL3MCoxOCx9VMNUPvG+wxfx7Rukp7QP87wjnD22sosEMRQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFBYgcftXpcesyijOKlbEyIGUP6bPMB8GA1UdIwQY
MBaAFAKP33GdR6EAM0UagzhKbbaNvVsPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjct
MDU1YTljYWQ4ZGY3LzEvRmlCeC0xZWx4NnpLS000cVZzVElnWlFfcHM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9kNDlkNTItNTBiMS00OTQ4LWIxZjctMDU1YTljYWQ4ZGY3
LzEvQW9fZmNaMUhvUUF6UlJxRE9FcHR0bzI5V3c4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwnF1MA0G
CSqGSIb3DQEBCwUAA4IBAQBhA3azjP4nve4i4p2EjQ6Jw6e5HWO5vyfv4yCcLqP2
nUhsFOybzBIaxU1LTn+y22mSpEpkrfwHYSDW2rjryCwIAdBqQbFPyu7+Bx2f16/V
ngc9sdg0B929y/81ghR6MSFP39KjktNIwnrTEJcfWIpr6kQxZX8kjx649kcZeslR
kiD6YnntILTms1nwxMVdqdApU8MSyJYs69MbWWGDGhv4o4xVb2uyxyNoHYh0jf/t
uj1LnryUH43UxzgEtShLTgSGLnAjZ7qYmqP2MHeTbm4yLKEBAEXECmKogIj1llnC
OaR0tyr9JoGLlXmmCi3xGc/snlmAgV4LxTVe+XMBawjo
-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:45 2024 by rpki-client on console-fra.rpki-client.org