Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/FCvPHrmpSWDI19IZZJpJ-fM3cy4.roa
File: FCvPHrmpSWDI19IZZJpJ-fM3cy4.roa (raw, json)
Hash identifier: SOiSC4IEJXm3k2xycUiK2qs8x5hqaVyuUP27atrtH2s=
Subject key identifier: 14:2B:CF:1E:B9:A9:49:60:C8:D7:D2:19:64:9A:49:F9:F3:37:73:2E
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01856C7801B5CC02E9E1781EAE7E7EDC7832
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/FCvPHrmpSWDI19IZZJpJ-fM3cy4.roa
Signing time: Sun 01 Jan 2023 08:34:42 +0000
ROA not before: Sun 01 Jan 2023 08:34:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42910
IP address blocks: 91.240.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:78:01:b5:cc:02:e9:e1:78:1e:ae:7e:7e:dc:78:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jan 1 08:34:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=142bcf1eb9a94960c8d7d219649a49f9f337732e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:3b:08:d4:2a:67:53:3f:be:7b:4f:db:7a:a8:
64:2a:97:1d:ef:ae:c2:d6:a9:5a:67:e5:66:62:54:
0b:10:40:5a:58:f6:5d:34:18:00:f3:a4:a1:ec:26:
94:20:50:a1:4e:8d:45:fa:bb:44:f2:16:44:dc:4d:
71:f9:37:e9:67:40:ba:1d:48:de:95:52:ce:fe:b4:
46:27:99:99:37:ca:08:a6:f9:6d:62:a3:45:9b:a7:
5c:21:14:16:18:10:ad:6a:42:2e:82:43:6b:37:62:
1b:88:40:78:dc:99:0e:19:f8:8f:56:fa:57:33:a5:
36:47:2b:4a:d4:fa:3e:0e:08:7a:ea:4b:78:92:d4:
90:9b:8b:47:60:2c:07:9b:18:44:3b:36:1a:7d:bc:
53:a3:43:75:a2:49:a2:2a:4d:87:21:25:36:d2:d4:
ab:61:e3:6a:d3:a5:89:dc:c1:80:64:4f:13:bb:ff:
53:3f:1b:22:30:f5:88:2e:64:38:d5:4e:34:9c:45:
2f:dc:fb:2f:e2:36:08:b3:ed:35:61:5a:1b:87:5c:
73:c7:ca:ad:9c:ec:32:87:99:cc:bd:b6:0f:1f:f9:
89:b8:9d:d8:93:cc:38:29:79:a0:bb:a8:c7:e2:0c:
d7:73:99:cf:d5:69:5f:e5:53:08:30:86:71:60:ff:
40:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:2B:CF:1E:B9:A9:49:60:C8:D7:D2:19:64:9A:49:F9:F3:37:73:2E
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/FCvPHrmpSWDI19IZZJpJ-fM3cy4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.232.0/24
Signature Algorithm: sha256WithRSAEncryption
32:a1:e2:85:38:92:92:b8:f3:01:b2:f0:3e:6a:88:e9:a9:76:
f3:4a:17:c5:ba:01:93:ea:97:e6:a7:c3:d8:13:31:0e:2b:1d:
7d:28:6e:6f:97:09:5d:e9:48:b5:90:8b:24:ef:92:ee:de:d5:
ff:ec:23:09:92:bc:3e:c8:b8:33:bf:84:c1:b4:a4:6f:fe:bb:
ea:18:52:7a:91:18:c6:56:72:2f:d2:b0:71:a8:8a:b6:8b:52:
5c:57:af:d6:81:fb:26:7d:e8:3d:0b:92:84:a8:f3:d4:5e:f6:
64:61:97:b1:0d:ef:64:07:30:fa:ca:2e:f8:dd:14:27:08:1f:
cf:5a:17:39:f8:53:07:11:3a:80:ee:7d:8b:b7:15:f7:62:c4:
c6:7b:f0:64:a9:d5:44:a4:00:ef:fb:71:47:95:3d:85:38:9f:
f1:39:c9:09:30:5f:73:ec:71:7d:e8:05:f3:36:d2:89:61:c3:
7d:4f:c3:4c:87:32:3f:1d:78:f2:e9:d1:99:d5:77:42:01:66:
1a:26:fe:0f:2d:69:e2:6b:9f:88:c3:2f:f6:50:b4:57:ba:0a:
c0:24:18:2c:4b:09:41:21:31:6e:09:57:98:be:23:51:e4:93:
36:e2:96:f7:ae:dc:58:5f:de:b5:26:1b:20:c8:6c:1c:04:4f:
8d:4d:bb:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:45:55 2024 by rpki-client on console-ams.rpki-client.org