Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/FNVLpeP9NZVRPhBk06Af4yNmnNE.roa
File: FNVLpeP9NZVRPhBk06Af4yNmnNE.roa (raw, json)
Hash identifier: s40n4eGkDb0CVrrvKKsT74MFtRrpLEIi6w/NOp5G/ug=
Subject key identifier: 14:D5:4B:A5:E3:FD:35:95:51:3E:10:64:D3:A0:1F:E3:23:66:9C:D1
Certificate issuer: /CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Certificate serial: 018CC7272AD0F33DB7C5B63357749D886D93
Authority key identifier: FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/FNVLpeP9NZVRPhBk06Af4yNmnNE.roa
Signing time: Mon 01 Jan 2024 22:31:21 +0000
ROA not before: Mon 01 Jan 2024 22:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 62651
IP address blocks: 176.67.82.0/24 maxlen: 24
176.67.84.0/24 maxlen: 24
176.67.87.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 21:23:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:27:2a:d0:f3:3d:b7:c5:b6:33:57:74:9d:88:6d:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8199e8345567d8516b788fe2e1d397e27c73a4
Validity
Not Before: Jan 1 22:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14d54ba5e3fd3595513e1064d3a01fe323669cd1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:12:35:6d:cb:27:88:a7:0a:3c:b9:5e:59:cb:
63:6e:df:e1:37:cf:a0:1d:56:3d:0e:ca:59:04:5c:
0a:4d:31:bd:50:04:b1:41:52:00:79:40:f3:98:8d:
05:51:cf:90:b5:9f:9c:20:27:ff:35:13:0d:82:2c:
b1:e1:99:23:88:fc:30:b4:c9:15:cc:d9:f7:3c:c9:
b7:b6:0b:28:66:77:96:31:8a:98:2b:18:e2:8f:d0:
fc:91:df:8d:51:38:fa:f6:39:02:bd:7a:6a:6e:da:
dc:55:29:8a:2a:4a:1f:c1:e6:63:ad:40:04:41:80:
89:b2:84:82:55:a2:65:f4:30:fe:47:45:31:65:4d:
e7:6b:39:6f:13:4e:fd:86:46:d1:7d:d9:3e:98:17:
ff:eb:cd:e0:99:e2:a3:d9:37:51:08:d8:1d:9f:3c:
be:ae:07:1d:48:a4:34:33:45:b3:2a:f0:db:69:14:
38:8a:e1:1f:01:c4:51:52:d4:6d:58:93:31:ad:b7:
93:a9:8e:fb:ea:17:41:63:b0:66:38:91:fd:45:8d:
7b:e6:07:7f:76:22:99:44:94:74:0e:5d:92:3c:6e:
30:49:4b:11:72:50:5c:29:0f:eb:38:1d:bf:56:3c:
19:0b:60:95:3a:3e:09:92:55:ba:05:8b:5e:67:db:
81:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:D5:4B:A5:E3:FD:35:95:51:3E:10:64:D3:A0:1F:E3:23:66:9C:D1
X509v3 Authority Key Identifier:
keyid:FE:81:99:E8:34:55:67:D8:51:6B:78:8F:E2:E1:D3:97:E2:7C:73:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/FNVLpeP9NZVRPhBk06Af4yNmnNE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/d09e34-cc11-4394-904d-840ccb34b3f5/1/_oGZ6DRVZ9hRa3iP4uHTl-J8c6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.82.0/24
176.67.84.0/24
176.67.87.0/24
Signature Algorithm: sha256WithRSAEncryption
76:31:8e:51:9f:00:d0:79:85:25:3f:51:c4:fc:40:77:ae:94:
0a:e4:45:6f:76:78:de:a9:31:cd:8e:ea:e1:f6:a8:a2:47:56:
87:1d:fe:86:cc:07:38:a4:20:c4:65:3c:9b:98:20:2a:65:e8:
0f:48:e7:3c:6a:48:35:7a:89:d4:d1:6f:41:2e:66:d8:64:6c:
74:90:38:39:2d:34:e1:cb:06:5c:c4:6d:f2:10:ba:9b:46:fc:
bb:c7:18:a9:dd:16:52:cf:6f:63:19:a3:48:e6:73:b8:18:28:
a8:1d:36:c7:67:ec:39:ea:cc:b7:f7:10:3b:4b:49:87:86:c7:
ba:a6:0a:7d:ee:cd:b0:20:86:fa:75:99:69:ec:0c:cc:ec:86:
c3:04:40:2d:45:74:53:1f:c1:b9:ab:87:8f:f3:5d:fc:10:61:
b2:c0:4a:85:23:d8:51:24:a2:0e:7e:ba:83:a9:70:a0:cb:b3:
52:1c:10:fd:10:9a:a4:8e:3d:ad:33:38:83:42:16:bf:aa:b9:
58:cf:d8:ca:44:7b:15:dc:d0:1c:d5:38:2b:5e:de:11:15:ff:
35:35:fe:8a:8c:b8:8e:85:5f:4f:32:40:52:3d:52:45:87:df:
d4:ab:70:1b:60:ad:7a:68:7b:96:e3:86:27:0e:3f:71:3f:09:
4c:ab:74:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:47:38 2024 by rpki-client on console-ams.rpki-client.org