Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/pkRfg_fw7MzXAB8QCUA3oTAyC2E.roa
File: pkRfg_fw7MzXAB8QCUA3oTAyC2E.roa (raw, json)
Hash identifier: c3bM9L9qeGFOmUFH361d/kKc3GdhRsURNh7ZiQvopMc=
Subject key identifier: A6:44:5F:83:F7:F0:EC:CC:D7:00:1F:10:09:40:37:A1:30:32:0B:61
Certificate issuer: /CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Certificate serial: 018CC64B70CD1A5FA82E8AACE42D716A6EF1
Authority key identifier: FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/pkRfg_fw7MzXAB8QCUA3oTAyC2E.roa
Signing time: Mon 01 Jan 2024 18:31:21 +0000
ROA not before: Mon 01 Jan 2024 18:31:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20572
IP address blocks: 193.108.184.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 13:47:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4b:70:cd:1a:5f:a8:2e:8a:ac:e4:2d:71:6a:6e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fba0053b68a4398fd52f07afdd6ad3109fded4b4
Validity
Not Before: Jan 1 18:31:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a6445f83f7f0ecccd7001f10094037a130320b61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9c:56:16:db:89:06:55:c2:75:a6:e7:50:66:
56:58:8a:3c:b9:e3:6e:f3:34:37:a7:b7:11:39:65:
7b:cd:96:14:9d:8b:ff:4f:ea:5f:6a:09:a9:56:aa:
dd:ee:b2:1d:40:37:97:fc:6b:94:74:71:60:c0:a4:
b0:b0:41:26:92:b6:66:ae:c6:af:9d:75:5e:89:51:
34:bb:98:f9:7e:4d:db:75:e0:59:64:49:52:18:ae:
28:a8:4d:1c:5a:23:34:fc:f8:b5:74:d0:0c:ba:22:
91:e0:9f:79:d5:4f:6e:20:44:56:65:e7:38:47:f3:
45:68:87:ad:d6:34:fb:d0:ed:4f:7d:81:9b:a6:0f:
28:8c:cd:6b:c8:aa:cd:1f:93:43:39:dc:e3:06:2b:
22:31:88:ac:7b:d5:5b:78:09:a4:32:49:b5:65:5e:
28:cb:eb:f4:16:1b:1f:f8:35:88:87:af:19:02:37:
d4:66:7a:e4:d3:b0:d0:09:4b:12:0f:94:a2:25:49:
5b:2c:24:f8:35:3b:38:c8:73:21:36:e6:18:e7:6a:
a5:7d:5c:42:68:60:ea:1c:03:54:1c:6c:78:00:40:
73:f6:69:1e:7d:b5:53:4f:c3:3e:eb:48:3f:01:d6:
47:fa:28:fb:12:b9:9f:bf:c5:5c:74:d3:80:c7:b6:
e4:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:44:5F:83:F7:F0:EC:CC:D7:00:1F:10:09:40:37:A1:30:32:0B:61
X509v3 Authority Key Identifier:
keyid:FB:A0:05:3B:68:A4:39:8F:D5:2F:07:AF:DD:6A:D3:10:9F:DE:D4:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/pkRfg_fw7MzXAB8QCUA3oTAyC2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/733174-edd6-4b42-b011-98058100a648/1/1-6AFO2ikOY_VLwev3WrTEJ_e1LQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.108.184.0/24
Signature Algorithm: sha256WithRSAEncryption
41:94:7b:86:06:b7:17:72:2b:e2:c8:90:d3:a9:3e:63:9c:81:
8c:91:51:12:6b:f7:f8:c3:0a:5f:5e:3c:e4:8b:87:67:5f:31:
75:b5:66:9e:14:b0:ad:da:bf:3f:f5:fb:f9:e4:01:d2:8e:0f:
4d:a1:f8:3e:a9:42:f8:2b:f5:34:d3:ca:58:3d:3b:32:ff:1b:
d1:38:92:af:9e:4b:f0:89:ba:4c:77:77:2d:ff:db:14:e1:12:
3e:5b:93:61:4e:33:72:0b:69:da:7f:74:42:1b:05:7c:ce:a7:
96:c8:68:23:f6:96:de:2e:dd:38:de:fb:8e:0a:87:92:1d:ae:
2d:ad:69:56:45:54:fe:12:3a:54:40:97:53:f9:52:22:b2:2c:
46:11:8c:a4:d9:02:8a:76:02:d4:91:f7:6a:27:03:8a:a0:a4:
4a:67:48:a7:24:a9:90:9f:2c:ef:31:3c:76:a2:ff:40:db:87:
a1:8f:db:e7:f2:66:17:1b:4b:9f:a6:42:b3:ed:a0:42:57:24:
2f:1b:c9:3b:d2:dd:34:f7:ce:b7:85:4c:37:b3:c9:74:ba:7c:
c7:c8:6f:a1:e4:73:75:43:f5:8a:57:41:16:a4:84:9e:05:05:
f1:19:e5:9b:6e:56:78:c8:56:0b:8a:b8:6c:7e:e2:6b:b3:9d:
0d:83:36:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 22 12:37:03 2025 by rpki-client