Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Fo-MEE7q_CA_xiEEsBWYWqF2buk.roa
File: Fo-MEE7q_CA_xiEEsBWYWqF2buk.roa (raw, json)
Hash identifier: Elz60yBB5M1l67PyCOnm169cZB0dKQK6zXYG12Q+i8s=
Subject key identifier: 16:8F:8C:10:4E:EA:FC:20:3F:C6:21:04:B0:15:98:5A:A1:76:6E:E9
Certificate issuer: /CN=f0ff2c6229af763a99f5349a32510df4a4526143
Certificate serial: 018572A6F5C18D2A5F7CC0AAC2F75D8FB50B
Authority key identifier: F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Fo-MEE7q_CA_xiEEsBWYWqF2buk.roa
Signing time: Mon 02 Jan 2023 13:23:42 +0000
ROA not before: Mon 02 Jan 2023 13:23:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203878
IP address blocks: 212.54.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:a6:f5:c1:8d:2a:5f:7c:c0:aa:c2:f7:5d:8f:b5:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0ff2c6229af763a99f5349a32510df4a4526143
Validity
Not Before: Jan 2 13:23:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=168f8c104eeafc203fc62104b015985aa1766ee9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:aa:58:09:4f:6b:62:ca:10:6c:6a:de:6f:5a:
3b:f3:6d:89:ad:23:f2:2f:a9:19:5c:9a:15:4f:7a:
68:91:83:24:55:79:1e:fa:ad:fc:0b:c5:f2:46:fe:
f9:81:0c:84:be:6d:e4:90:d0:bb:60:88:a8:cd:d4:
ac:30:85:f2:a2:c4:07:5b:c2:10:9b:80:ab:d5:b4:
2b:87:d3:41:7c:bf:df:65:74:11:f8:ca:ac:2b:b6:
6a:d7:d8:04:a0:68:39:d2:e7:0b:8b:cc:e1:2a:51:
78:54:a8:81:f2:67:79:03:ae:90:00:8c:8d:26:f4:
e2:5b:00:95:cd:b2:4b:b0:90:45:3a:60:bb:7a:b3:
41:fb:d7:f4:4f:52:d2:d5:83:bb:52:2e:6f:e4:22:
c5:80:6e:6d:89:d7:28:ac:2a:32:8d:69:f2:28:79:
ed:fc:57:86:02:93:5d:ca:1e:2e:09:d1:3d:9e:70:
53:ec:6a:9b:fc:41:f4:ae:e8:32:5b:46:67:fd:0b:
81:90:65:76:91:c3:05:c1:e8:10:f6:c2:03:54:4b:
f4:d9:5a:64:f1:bc:e9:54:a6:79:f7:e5:1b:9f:12:
ef:26:91:6e:ca:1b:67:3a:d5:b3:86:3b:ae:85:bf:
f3:07:8f:bb:88:25:93:c6:db:35:17:32:3b:08:91:
80:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:8F:8C:10:4E:EA:FC:20:3F:C6:21:04:B0:15:98:5A:A1:76:6E:E9
X509v3 Authority Key Identifier:
keyid:F0:FF:2C:62:29:AF:76:3A:99:F5:34:9A:32:51:0D:F4:A4:52:61:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8P8sYimvdjqZ9TSaMlEN9KRSYUM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/Fo-MEE7q_CA_xiEEsBWYWqF2buk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/051fa2-c580-4a02-a186-e69f7a5d2d90/1/8P8sYimvdjqZ9TSaMlEN9KRSYUM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.54.213.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:1a:ee:ff:5a:30:e6:20:19:2d:db:1e:b3:0b:b0:1f:5c:b8:
d9:1d:dc:56:66:20:d7:c6:b2:56:d6:d5:ac:bd:76:31:4a:67:
8c:62:a4:de:8d:a2:95:68:7d:73:cb:28:48:6c:03:95:2e:b6:
5b:00:a3:92:91:bc:63:19:3a:aa:09:92:ec:67:b0:fd:fc:f4:
e9:a8:a1:57:3c:c1:5e:2b:50:6e:b5:ea:03:32:b6:07:50:91:
fd:62:73:63:a0:12:4c:6f:19:4a:44:6b:b0:6f:08:d8:28:0f:
02:39:07:91:97:c9:3b:bf:0a:9b:f6:6a:c8:9c:e2:b5:3b:98:
a6:14:0a:51:19:a5:5f:6c:d1:16:22:57:7d:28:a6:48:c4:64:
ee:25:ca:b9:ff:78:d2:e2:aa:d0:9c:7f:6f:c8:ae:f6:ad:50:
2d:6b:19:4e:fe:da:52:02:bc:7a:86:c9:ec:90:0e:45:84:25:
cb:ad:ff:30:eb:28:e6:85:d8:f0:1f:5c:a0:e6:2b:51:a1:f6:
c8:71:e1:1a:0b:9b:60:cf:9d:73:32:cb:5a:55:d6:ab:25:4c:
12:b9:ea:a2:cf:a1:fc:e4:57:47:59:41:a6:bc:75:ca:37:ba:
de:ca:8b:4b:4d:ba:bc:b9:db:41:c4:05:f0:3c:55:c6:b5:01:
06:82:c3:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 11:52:45 2024 by rpki-client on console-fra.rpki-client.org