Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fytApQR08_j-cG_-K4-V4tFqabQ.roa
File: fytApQR08_j-cG_-K4-V4tFqabQ.roa (raw, json)
Hash identifier: Tx7GhLf/9JBi+k9c3YrHOzVhvq1nupZ1ZJ9IjhWKmiU=
Subject key identifier: 7F:2B:40:A5:04:74:F3:F8:FE:70:6F:FE:2B:8F:95:E2:D1:6A:69:B4
Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Certificate serial: 01856C0A4B4C5DF5E610866C169634C9C68C
Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fytApQR08_j-cG_-K4-V4tFqabQ.roa
Signing time: Sun 01 Jan 2023 06:34:52 +0000
ROA not before: Sun 01 Jan 2023 06:34:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1239
IP address blocks: 92.51.40.0/23 maxlen: 24
92.51.42.0/23 maxlen: 24
92.51.34.0/23 maxlen: 24
92.51.32.0/23 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:0a:4b:4c:5d:f5:e6:10:86:6c:16:96:34:c9:c6:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d
Validity
Not Before: Jan 1 06:34:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f2b40a50474f3f8fe706ffe2b8f95e2d16a69b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:33:57:3c:d2:d8:23:bc:6e:51:b9:9d:f7:f7:
2b:90:56:21:23:21:c6:0c:37:f9:88:27:10:66:90:
2a:1d:c3:79:52:b4:68:cf:d0:c9:b9:64:36:81:f2:
ab:4d:6d:71:25:60:dd:be:78:fe:99:6c:93:f4:dd:
ff:b2:bd:d1:62:fe:85:05:1d:0b:4d:3e:d9:45:c7:
af:5c:7e:3c:fc:70:e2:18:df:19:f6:7c:e7:d1:cd:
81:58:c3:50:a4:63:15:ba:f5:cf:9f:c9:61:35:63:
72:89:76:b5:43:04:6a:41:b2:af:be:58:17:e4:fa:
c7:b5:81:ec:82:81:aa:82:58:fa:82:12:7e:0e:93:
74:54:c9:aa:f0:78:8c:3b:9e:1f:8f:98:0b:a5:8c:
aa:5c:6e:5d:2b:35:9b:5b:55:9f:5b:b2:9a:e5:cb:
7d:c6:e5:cb:33:ea:6a:2b:44:fc:95:93:b8:70:45:
11:10:46:0c:e8:be:02:e1:b1:45:f0:ca:12:66:e1:
1e:38:34:5a:fe:e9:5b:f0:d2:5e:c7:e9:3c:8b:4e:
8a:44:55:65:94:a1:84:2e:c3:a6:6b:6a:7e:44:40:
d8:b2:fa:a6:3e:40:70:91:18:88:20:fa:5b:81:12:
03:e8:a2:ce:e6:41:9d:d5:00:0d:fc:54:e4:8e:a7:
67:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:2B:40:A5:04:74:F3:F8:FE:70:6F:FE:2B:8F:95:E2:D1:6A:69:B4
X509v3 Authority Key Identifier:
keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/fytApQR08_j-cG_-K4-V4tFqabQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.51.32.0/22
92.51.40.0/22
Signature Algorithm: sha256WithRSAEncryption
77:67:98:d0:44:e2:35:83:2d:8b:ca:ea:52:6b:30:bd:2b:ee:
5a:8e:3c:54:49:72:e1:6a:f5:44:54:64:a5:de:0a:17:b0:99:
a3:ee:cf:38:f0:29:0a:5e:5b:22:54:d5:a7:cd:63:61:b4:7d:
79:7b:aa:d4:d0:0c:18:9d:b5:c1:54:97:5c:f4:2e:ce:2b:a4:
dc:2f:93:e7:00:79:d2:27:29:c6:6c:07:75:f0:e9:a0:17:56:
0b:97:de:7d:0b:00:fa:83:5d:d1:47:16:f1:c5:d0:11:0d:fb:
b2:9c:1f:0c:c0:4e:1c:36:dd:51:23:ad:a4:be:49:d9:76:f5:
0f:a2:c6:90:97:d0:82:1f:37:a8:4a:b4:44:bf:4a:ec:6f:8e:
7b:0b:8e:17:8a:3c:54:91:e8:84:5c:60:07:69:fd:93:0b:66:
06:12:00:db:4d:b5:0a:13:2e:cc:cd:91:9b:46:49:28:4b:52:
c6:f8:04:9a:4b:6e:72:ec:fc:04:ea:8e:0d:56:ba:0a:e4:d6:
c7:1c:0f:f8:97:61:b8:84:91:fd:72:07:b1:0c:1b:22:59:7f:
57:35:3e:e3:3a:a8:b7:fd:d0:76:dc:fd:b7:91:03:c2:e6:4e:
33:22:05:aa:95:3a:5f:7a:21:bb:2b:bc:ac:54:c4:cd:9f:21:
fd:bb:02:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:16:57 2024 by rpki-client on console-ams.rpki-client.org