Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa
File: FaplbyVmrDNooU4A7NZFqadZ0Is.roa (raw, json)
Hash identifier: 7J3sO6K9JECyuiVnIod8kSoY0fUqXpV6Q+CfIO8tDNY=
Subject key identifier: 15:AA:65:6F:25:66:AC:33:68:A1:4E:00:EC:D6:45:A9:A7:59:D0:8B
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018C7363719A419574FD1E3CBD89E4852A5C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa
Signing time: Sat 16 Dec 2023 16:09:06 +0000
ROA not before: Sat 16 Dec 2023 16:09:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 17 Dec 2023 18:42:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:73:63:71:9a:41:95:74:fd:1e:3c:bd:89:e4:85:2a:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Dec 16 16:09:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15aa656f2566ac3368a14e00ecd645a9a759d08b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d4:d5:81:cc:5a:88:cb:64:ba:3e:c7:8f:11:
27:68:03:c1:cb:bf:0d:9d:70:c5:54:56:7f:49:0f:
18:8c:16:b6:ad:d2:9b:e7:76:4e:18:40:9a:ad:39:
c6:9f:00:0e:38:0a:f5:04:41:72:40:6a:a4:1e:1e:
68:5a:c4:5e:e8:6c:2a:9f:f8:d1:1a:e9:29:0b:5a:
73:80:a2:b6:d3:c1:b4:d7:1a:33:bf:b6:88:2e:79:
e1:15:18:46:b2:38:99:0d:f9:fe:93:74:b3:dc:69:
6b:b7:ad:83:d2:70:33:ed:75:d7:1d:92:40:99:a0:
bb:46:88:b0:59:64:5b:4a:93:70:59:26:c4:46:44:
68:19:a5:ae:a8:fb:04:0d:50:76:42:41:c8:f4:bf:
69:71:35:5c:64:38:67:38:fd:9c:bd:51:58:72:4c:
a1:84:a5:f6:21:15:97:b8:ae:22:6c:f9:af:e4:92:
f2:16:08:42:c1:b6:62:12:5c:0b:14:35:aa:49:81:
e5:af:ea:2c:d2:f9:f9:a3:18:8d:49:a9:f5:c9:d8:
0a:84:61:8a:9d:27:04:59:ee:da:7c:13:a9:22:95:
5e:85:14:51:95:39:a0:2d:80:1c:8e:3a:39:54:8a:
db:6b:9a:7d:fa:90:aa:93:2d:51:9b:c9:10:5e:e3:
75:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AA:65:6F:25:66:AC:33:68:A1:4E:00:EC:D6:45:A9:A7:59:D0:8B
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FaplbyVmrDNooU4A7NZFqadZ0Is.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
27:d3:da:e4:d6:d8:74:88:fe:d3:2c:6f:af:39:6f:1a:ff:5a:
77:c5:03:1e:6b:9f:5a:2b:99:0b:98:fb:ea:3f:cc:c6:de:d3:
9d:cc:95:5f:fb:72:06:8e:27:ed:d9:40:5d:32:b0:02:91:83:
ed:0a:24:ba:c5:5e:7f:e1:9e:99:61:0f:37:91:14:28:97:2e:
f8:43:01:95:57:46:88:fc:69:87:37:d8:81:bb:9c:0a:5e:68:
bc:19:20:3f:a5:00:8c:13:8f:23:38:4e:e5:b7:41:49:42:fb:
02:7d:f2:65:c5:aa:85:3c:c1:ba:5c:73:0b:7b:19:36:27:04:
2d:8f:6d:a5:e5:12:3f:18:1c:c0:b1:4d:52:41:db:c7:0a:b9:
ad:3a:81:16:6c:bf:65:47:18:04:0d:e4:03:f4:64:a1:4d:82:
1b:b9:65:71:3b:7e:e3:77:5a:40:be:0f:fa:db:7f:45:f9:fc:
80:5d:14:cc:ae:0e:a5:c6:fb:6b:70:0e:68:5f:d0:94:66:32:
ac:e4:fc:19:92:a2:2b:62:38:9e:ed:51:2b:46:0f:00:20:87:
b7:54:e7:b8:64:f8:d4:6d:e9:4e:b5:82:e6:45:53:83:27:9f:
18:35:44:3c:6a:fe:13:9e:a5:16:12:70:bc:e8:80:4c:c7:5d:
98:d7:7c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org