Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/fcn5X-kRaGSIHay68tVgEDIzSos.roa
File: fcn5X-kRaGSIHay68tVgEDIzSos.roa (raw, json)
Hash identifier: Mpq7XKyDNncY6X89PkVE2HP+eBLrVyhBrJzAPGwEB04=
Subject key identifier: 7D:C9:F9:5F:E9:11:68:64:88:1D:AC:BA:F2:D5:60:10:32:33:4A:8B
Certificate issuer: /CN=040c6423e980b289765aad924235f46d2e20c01c
Certificate serial: 018BAB3325AE325BF8804470FDB3E6FBA637
Authority key identifier: 04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/fcn5X-kRaGSIHay68tVgEDIzSos.roa
Signing time: Tue 07 Nov 2023 19:12:17 +0000
ROA not before: Tue 07 Nov 2023 19:12:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216148
IP address blocks: 84.38.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:29:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:ab:33:25:ae:32:5b:f8:80:44:70:fd:b3:e6:fb:a6:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6423e980b289765aad924235f46d2e20c01c
Validity
Not Before: Nov 7 19:12:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7dc9f95fe9116864881dacbaf2d5601032334a8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:7b:86:3f:dc:61:6d:f8:27:98:e6:a1:33:99:
73:c4:bf:24:7f:60:b1:70:8c:69:e9:b8:d3:24:0a:
42:1e:26:c1:c8:bf:97:44:8a:0d:db:fa:60:ca:da:
4a:16:07:11:f5:af:b5:4f:55:4f:85:3c:c3:12:97:
77:38:27:1d:f9:1d:3e:01:cc:ad:6c:0a:d9:17:15:
1a:be:7d:37:a4:e4:2a:9d:d8:3a:a7:85:f0:2b:ef:
26:58:22:74:48:d5:dd:68:c9:2c:f4:10:aa:ca:1e:
ba:b0:18:fb:e8:19:dc:e4:a5:b6:b6:55:bc:32:3a:
61:bd:29:92:f5:25:c2:2e:29:81:a6:71:55:af:2c:
51:77:7c:2d:a4:eb:40:4e:53:3e:de:ed:57:ec:ad:
59:99:65:71:f6:34:0e:6e:bc:fe:4e:a8:b5:8c:00:
b1:37:02:c8:b9:4a:14:ab:7e:cb:a9:99:53:1e:63:
af:d4:da:28:b1:f3:a2:9e:f1:f3:2a:89:b3:71:69:
8b:b5:e1:5b:72:49:57:2b:ed:34:54:1d:e6:29:d4:
90:27:4b:de:18:35:b6:62:45:c4:b0:51:f4:6b:fc:
30:d0:f1:c0:56:c2:ee:33:34:d3:68:d4:97:96:10:
b3:61:bd:0a:e1:97:74:3d:92:8e:11:77:b5:9e:39:
3e:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:C9:F9:5F:E9:11:68:64:88:1D:AC:BA:F2:D5:60:10:32:33:4A:8B
X509v3 Authority Key Identifier:
keyid:04:0C:64:23:E9:80:B2:89:76:5A:AD:92:42:35:F4:6D:2E:20:C0:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxkI-mAsol2Wq2SQjX0bS4gwBw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/fcn5X-kRaGSIHay68tVgEDIzSos.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/642ab3-9c72-4b6f-8772-d52f4228f8b3/1/BAxkI-mAsol2Wq2SQjX0bS4gwBw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.38.250.0/24
Signature Algorithm: sha256WithRSAEncryption
73:f8:a3:f6:c8:e2:1d:ca:9b:d5:53:23:ae:19:79:04:09:cd:
95:86:36:f2:b2:d0:60:c3:2d:a2:37:f1:a6:dc:07:9e:07:ab:
be:fb:25:33:b2:6e:d0:b1:2f:e2:15:e2:ca:85:10:2a:d5:88:
31:f0:6e:fa:32:4b:33:37:fd:b5:71:9c:51:f6:99:bf:87:68:
74:71:b6:c4:b7:e5:a0:0c:5b:9c:ef:17:04:c6:3f:37:5f:a9:
52:84:48:76:70:db:ea:c7:06:09:3f:6e:17:01:58:c8:7c:48:
97:39:1e:5f:cf:fc:31:d1:96:b7:af:5f:e9:21:0c:f0:ad:16:
d1:b8:f8:b2:0b:82:3a:42:95:62:44:b4:63:0a:1a:79:f3:74:
65:cd:3f:b0:34:98:4e:d6:46:50:68:2a:c2:c6:00:ee:f5:b7:
84:6d:f4:b8:92:9a:c0:3d:fd:74:0a:96:14:c9:0c:a2:77:de:
b7:31:ed:15:a4:39:e3:4a:fb:2b:f7:f7:76:7a:9a:c8:3c:52:
3e:c6:46:dc:a8:46:4f:76:92:9b:4e:5c:dd:ea:58:d0:12:26:
59:01:45:d4:c4:9e:20:65:8e:d4:3e:95:d4:2f:59:03:3d:f6:
c2:f7:80:d3:aa:08:eb:14:ce:02:d0:98:b4:3a:86:9e:b9:31:
54:cf:65:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:05 2024 by rpki-client on console-ams.rpki-client.org