Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1-xzmGoubI5EZkDArV4dtNAYjGnY.roa
File: 1-xzmGoubI5EZkDArV4dtNAYjGnY.roa (raw, json)
Hash identifier: S2Pfu4+DazJCkuil8FiEumYspPIFnOT45ozZzPCSVwU=
Subject key identifier: FB:1C:E6:1A:8B:9B:23:91:19:90:30:2B:57:87:6D:34:06:23:1A:76
Certificate issuer: /CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Certificate serial: 0188FBF7D1D64B1F2B562DCAF9E85BFC4DCF
Authority key identifier: FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1-xzmGoubI5EZkDArV4dtNAYjGnY.roa
Signing time: Tue 27 Jun 2023 08:28:22 +0000
ROA not before: Tue 27 Jun 2023 08:28:22 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42649
IP address blocks: 45.86.105.0/24 maxlen: 24
45.86.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:fb:f7:d1:d6:4b:1f:2b:56:2d:ca:f9:e8:5b:fc:4d:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcea08e8421df2f245c7cb333ee76a14a8882d4a
Validity
Not Before: Jun 27 08:28:22 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb1ce61a8b9b23911990302b57876d3406231a76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:7d:08:02:b4:ea:78:72:35:8f:d2:8e:a3:28:
44:78:a7:aa:58:bc:f2:08:57:93:c4:70:6b:8c:ad:
35:49:bc:8f:df:ca:2e:5d:34:35:13:15:14:d3:fc:
42:40:33:61:e3:29:18:f9:cd:aa:2b:65:c5:37:4e:
49:6a:61:bc:9a:eb:2c:38:12:da:a1:77:7b:81:aa:
a8:03:11:ae:03:e2:c7:b6:48:a8:b8:97:f3:e5:9a:
3d:4d:bb:ca:4f:c2:52:24:ee:22:49:05:1b:d5:6d:
a2:34:f0:aa:06:be:9c:41:db:72:34:d5:98:ce:fb:
0d:f6:c1:bb:4a:e2:d8:bc:12:31:78:58:77:32:33:
f0:0c:ba:b1:8b:f3:e8:5c:65:13:f1:59:b7:dc:32:
c5:59:a0:90:d4:29:99:9f:d8:ab:b7:2e:04:f9:75:
4a:5a:67:8c:7d:e1:46:13:e0:f0:28:87:9d:91:39:
ff:cd:91:4e:82:f2:20:60:f0:ee:87:da:ad:ff:e8:
ed:0b:67:3b:0c:87:24:35:c1:0a:b9:b1:a6:ed:8f:
dd:bd:e3:b7:dc:37:5a:7c:8d:d1:16:79:2e:c5:e6:
bd:33:00:45:54:02:fd:ae:fc:10:f7:5e:ed:4b:a4:
76:bc:79:46:16:00:45:71:eb:0d:96:a3:96:86:18:
44:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:1C:E6:1A:8B:9B:23:91:19:90:30:2B:57:87:6D:34:06:23:1A:76
X509v3 Authority Key Identifier:
keyid:FC:EA:08:E8:42:1D:F2:F2:45:C7:CB:33:3E:E7:6A:14:A8:88:2D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_OoI6EId8vJFx8szPudqFKiILUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/1-xzmGoubI5EZkDArV4dtNAYjGnY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/ea7e61-98b3-4120-83ce-c077e1702bc7/1/_OoI6EId8vJFx8szPudqFKiILUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.104.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:b6:92:87:62:b0:71:3c:20:6c:4f:12:fb:8e:b4:3d:f9:8b:
1d:5b:35:9f:53:56:33:47:42:1f:d9:8c:c7:35:48:af:1d:92:
5c:77:7d:44:2e:72:1e:bc:da:b0:64:c8:a9:bb:ff:71:9a:eb:
90:c5:54:45:65:38:50:e4:fc:14:89:99:d1:71:36:9b:fb:8f:
e8:72:e6:e8:69:a4:c6:50:69:1d:ee:e9:87:a2:30:b1:22:d6:
09:91:eb:01:d6:ea:f6:e1:e0:56:9e:6e:ce:77:fc:52:d8:90:
41:71:49:25:88:68:2d:a2:f3:a0:ef:13:d3:22:2b:36:0c:04:
b6:75:80:46:4d:cc:0b:91:b5:ce:5d:72:89:0a:5e:87:c0:a1:
20:cd:16:08:e3:3c:91:2e:f5:7c:f0:84:3f:6c:b3:6d:43:b5:
fc:f5:21:45:be:18:3c:a8:1b:3c:81:b3:4d:8e:98:9d:bd:49:
d0:25:1a:f5:6e:49:40:fb:14:20:4b:08:49:d6:7a:2e:d3:c8:
1b:82:c9:76:c8:ef:27:a5:fb:11:7d:da:dc:53:3d:0c:a7:7b:
49:ad:93:31:7b:03:c6:c9:58:5c:7d:55:eb:dd:68:87:6e:08:
0c:4e:2f:34:f1:4f:03:e1:9a:31:2b:89:3a:83:89:80:79:78:
87:5f:0c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:03:00 2024 by rpki-client on console-ams.rpki-client.org