Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fpae2cjjQo-_MPJy_uGGGi8IEME.roa
File: Fpae2cjjQo-_MPJy_uGGGi8IEME.roa (raw, json)
Hash identifier: cNEjIha5VPxceZkBnPe2TRQd2Rs9gEABqJlC31Yw+xQ=
Subject key identifier: 16:96:9E:D9:C8:E3:42:8F:BF:30:F2:72:FE:E1:86:1A:2F:08:10:C1
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 0192CDA6D9E03BE65EBAA9F19B5935AAE9BA
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fpae2cjjQo-_MPJy_uGGGi8IEME.roa
Signing time: Sun 27 Oct 2024 11:05:16 +0000
ROA not before: Sun 27 Oct 2024 11:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 60781
IP address blocks: 185.210.168.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 28 Oct 2024 09:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:cd:a6:d9:e0:3b:e6:5e:ba:a9:f1:9b:59:35:aa:e9:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Oct 27 11:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16969ed9c8e3428fbf30f272fee1861a2f0810c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5b:51:c3:7a:a3:dd:e7:d6:43:f3:35:a6:31:
86:28:85:5a:b4:8f:68:80:6b:fe:a2:12:5e:21:78:
54:48:78:c1:ab:e1:9a:e8:63:b3:95:76:84:53:fe:
b7:6e:ab:7f:66:a6:b1:02:86:35:ea:8a:aa:e0:49:
84:dd:40:38:57:e3:82:fb:02:aa:0c:7f:03:e5:ff:
1b:e4:6d:f1:d4:81:a7:d5:86:a3:1e:09:f8:f8:48:
0e:e5:74:8c:39:54:22:4e:d6:13:07:15:f0:6b:2b:
48:6e:ef:dd:b3:7c:d8:3e:c5:04:51:64:16:1a:9a:
40:57:7d:36:3a:e0:b6:d1:64:19:24:46:79:13:55:
ba:6e:ea:e1:f7:d6:21:03:27:04:c5:7b:b2:00:ac:
47:32:8b:87:76:d1:14:74:f5:8e:b5:65:aa:e1:d7:
cb:bf:2f:72:be:0d:c2:c8:dd:32:db:d0:75:47:f6:
e4:6b:8e:64:52:91:c2:ef:cf:4e:6e:b9:7b:8d:e9:
db:10:45:5e:ca:2e:52:04:fe:36:f7:c1:e7:37:7e:
f7:ee:ec:9a:80:40:8e:a9:92:0b:16:1f:00:6c:5c:
7b:33:c4:44:2a:15:6a:4c:71:06:3a:2e:27:b8:08:
ea:41:69:d5:ad:df:ff:63:47:88:21:26:09:c4:2e:
84:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:96:9E:D9:C8:E3:42:8F:BF:30:F2:72:FE:E1:86:1A:2F:08:10:C1
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/Fpae2cjjQo-_MPJy_uGGGi8IEME.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.210.168.0/23
Signature Algorithm: sha256WithRSAEncryption
ac:2c:d1:a5:39:99:54:78:34:60:8f:4c:80:4e:18:c6:80:37:
e3:a7:53:60:42:2f:47:bf:8c:3f:35:29:3d:9e:e4:a9:13:22:
fd:c8:19:00:07:bb:53:80:6d:f5:a9:73:b3:2d:dd:f6:ee:f5:
79:f2:7d:8e:a3:3f:e9:21:73:82:cc:80:6a:8d:19:c4:34:4e:
46:96:fd:ae:7e:bc:08:29:96:a2:2f:34:80:cb:0c:fe:55:98:
02:2a:39:00:85:ef:49:2e:06:eb:f5:d0:a6:de:a0:52:a1:f0:
dc:6e:52:a1:4f:78:a8:3e:9b:8f:46:a1:dd:42:e9:13:40:a1:
9f:3e:ac:76:e7:5e:cb:ac:b3:26:a1:94:3a:5e:6c:5d:5f:24:
2a:1d:a1:00:68:3f:ac:6e:74:5e:e4:f5:40:75:76:1f:b5:4d:
cc:b5:3c:d6:c6:d0:01:a5:eb:f1:af:00:11:7b:a9:c8:91:e9:
1c:c4:cc:b5:a8:b9:89:48:79:13:62:87:61:01:bf:f2:9c:9b:
41:4d:d2:6f:c5:be:4a:32:93:2c:c9:9f:ad:ef:18:e2:d5:53:
01:33:a5:62:05:fe:43:11:d2:11:0b:18:0f:4b:1c:09:76:30:
42:fe:fd:81:5a:d1:99:d8:8e:cd:b7:36:db:4e:69:bf:d9:81:
7d:98:8a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 28 12:17:13 2024 by rpki-client on console-ams.rpki-client.org