Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/FDjkNFEMdF6S91IJkRW3yOBlbps.roa
File: FDjkNFEMdF6S91IJkRW3yOBlbps.roa (raw, json)
Hash identifier: 16T8O7ZMoCwiyrRU5O7xY9OCGem4LAN5AhHxxc+Inbs=
Subject key identifier: 14:38:E4:34:51:0C:74:5E:92:F7:52:09:91:15:B7:C8:E0:65:6E:9B
Certificate issuer: /CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Certificate serial: 01932060B8E7FF96A7B26A2B57AA036267A1
Authority key identifier: 97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/FDjkNFEMdF6S91IJkRW3yOBlbps.roa
Signing time: Tue 12 Nov 2024 12:37:09 +0000
ROA not before: Tue 12 Nov 2024 12:37:09 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4601
IP address blocks: 147.189.216.0/21 maxlen: 21
193.5.16.0/22 maxlen: 22
193.5.19.0/24 maxlen: 24
2a0d:3dc0::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 13 Nov 2024 12:11:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:20:60:b8:e7:ff:96:a7:b2:6a:2b:57:aa:03:62:67:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9783a5487b35c1d1e1f157c191312b3df4bc17ab
Validity
Not Before: Nov 12 12:37:09 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1438e434510c745e92f752099115b7c8e0656e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:09:31:21:cf:3a:e2:c3:0b:12:a5:06:d8:
8b:9b:30:46:b6:6b:1f:7e:34:85:c7:10:26:ff:08:
2e:8f:25:18:b9:7a:3c:ed:af:9e:13:56:1f:e7:70:
9b:74:2e:e0:7d:4d:d6:d8:f0:db:e5:af:8c:30:15:
fc:ad:ed:3a:3a:49:97:db:e7:61:1a:ad:71:77:3a:
d0:e1:b8:07:5a:1d:f0:9f:4d:5d:79:5c:73:96:d2:
d9:ae:46:04:0a:91:6c:c9:2b:d5:8c:01:2b:d5:2d:
83:18:19:92:88:c1:38:bf:9f:a6:f3:ec:1b:a5:43:
f0:b6:53:be:61:2c:52:eb:26:5c:18:10:98:d9:7a:
45:32:31:11:43:50:a9:cf:bb:33:fe:a1:fc:d5:ba:
b2:dd:ea:ea:bb:3b:e5:9d:5b:28:89:40:2d:8d:af:
8d:b6:dc:7e:ee:98:db:8e:1e:b1:c4:27:68:36:e9:
3a:fa:b0:b0:8b:bc:ef:5b:5e:dd:2e:21:02:93:a6:
06:4e:f1:0c:01:a4:b4:e8:91:d3:63:6b:56:34:df:
75:7a:cb:3b:79:42:db:e2:4a:bf:b6:8f:e8:7c:ba:
18:fb:7f:d8:82:69:09:52:1e:f8:ed:75:07:5f:3f:
cd:1e:88:6f:5c:0a:d9:1b:e6:32:37:4c:31:d3:47:
43:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:38:E4:34:51:0C:74:5E:92:F7:52:09:91:15:B7:C8:E0:65:6E:9B
X509v3 Authority Key Identifier:
keyid:97:83:A5:48:7B:35:C1:D1:E1:F1:57:C1:91:31:2B:3D:F4:BC:17:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l4OlSHs1wdHh8VfBkTErPfS8F6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/FDjkNFEMdF6S91IJkRW3yOBlbps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/f22131-a0ff-4f27-8dfa-69152e9a08c3/1/l4OlSHs1wdHh8VfBkTErPfS8F6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.189.216.0/21
193.5.16.0/22
IPv6:
2a0d:3dc0::/29
Signature Algorithm: sha256WithRSAEncryption
11:a3:b2:df:27:ae:62:df:3b:c6:bf:eb:84:44:5b:0c:91:7a:
7c:2c:ae:e7:2f:c0:8f:ae:6d:32:17:08:02:86:c7:17:16:7e:
64:f4:ac:3d:5a:71:18:04:c9:cc:cd:84:c8:19:0c:79:50:b5:
78:10:37:90:fa:75:2e:25:fe:22:4b:bd:91:fa:89:d2:54:79:
6a:c5:35:0b:fc:b5:c1:bb:64:bd:3c:ee:de:2e:80:70:ea:54:
a6:a0:75:05:7e:b3:87:04:77:5d:a8:f8:3d:bb:5e:9c:99:63:
2e:10:0c:4d:9d:18:2c:fc:c3:1e:e1:73:4d:72:66:a1:97:09:
da:12:25:2f:dd:63:48:1a:df:8d:93:fd:49:77:fe:dd:c4:65:
c0:6f:90:7f:12:cf:85:ba:46:94:e3:3a:b9:b7:fd:e5:57:77:
bc:77:63:d1:8c:ec:d7:98:27:dd:14:06:ae:7f:d1:38:7e:06:
4e:a9:80:4d:4d:87:ca:17:1b:ad:06:15:ef:11:be:4a:39:5f:
f7:d3:fc:6e:82:66:c4:79:9d:6b:dd:00:e3:c8:9d:96:fe:4d:
e7:35:ff:d2:2a:65:34:0c:44:04:06:6c:20:a2:a4:f1:93:de:
0b:b2:8d:a7:ad:12:fd:aa:44:71:78:46:26:56:8e:04:c8:f7:
9d:30:be:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 13 14:36:38 2024 by rpki-client on console-fra.rpki-client.org