Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkDHf11pUKsDHkMfcb6eB8tLLF0.roa
File: fkDHf11pUKsDHkMfcb6eB8tLLF0.roa (raw, json)
Hash identifier: 6vs+VMH3AOEn/irYZsu3oSGEes6yPxf5SLF7bOI2GVw=
Subject key identifier: 7E:40:C7:7F:5D:69:50:AB:03:1E:43:1F:71:BE:9E:07:CB:4B:2C:5D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 0188C391AF64AD98C27114443BCA81D06752
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkDHf11pUKsDHkMfcb6eB8tLLF0.roa
Signing time: Fri 16 Jun 2023 09:38:04 +0000
ROA not before: Fri 16 Jun 2023 09:38:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39120
IP address blocks: 213.145.94.0/24 maxlen: 24
213.145.93.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 15 Oct 2023 11:05:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:c3:91:af:64:ad:98:c2:71:14:44:3b:ca:81:d0:67:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jun 16 09:38:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e40c77f5d6950ab031e431f71be9e07cb4b2c5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:48:fa:be:b7:00:49:8e:0e:13:06:99:fc:
55:8d:6b:35:43:c9:f4:a1:58:eb:c2:92:6e:f3:c5:
5b:af:63:45:d5:3d:55:b0:5d:bf:58:a9:93:61:09:
ac:5a:d9:17:31:7a:a9:b4:73:ef:d7:75:55:04:7d:
9c:61:b9:4b:f8:a3:fa:96:88:d2:42:99:31:ea:5c:
91:10:b0:e2:ea:1f:4a:cb:7a:4e:41:a4:98:6b:35:
a8:f4:80:fb:e8:5d:f1:e6:eb:17:7e:37:8e:12:10:
40:2b:78:ce:04:be:7e:db:b9:6f:7b:b1:a6:c5:eb:
41:cf:94:32:a9:ac:20:61:87:3c:df:52:87:41:df:
39:5a:41:64:2c:38:17:8a:90:00:10:c9:88:9c:d3:
8a:7f:4a:0e:7b:c8:6d:9d:15:90:5d:27:d0:b0:a7:
69:91:85:60:18:32:d5:aa:50:9b:fd:b6:18:e1:c4:
5d:47:46:98:1c:d2:d7:99:f4:a6:79:1d:4c:d0:07:
be:ca:07:57:52:68:92:7c:ca:15:85:2c:af:e1:73:
35:4c:a0:53:da:87:04:dd:c8:0e:ab:4e:5d:a2:21:
4b:94:84:68:fa:da:fb:79:17:88:d4:08:84:03:5c:
c6:43:86:dc:dd:9d:c8:76:5a:fe:bf:38:f5:37:39:
70:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:40:C7:7F:5D:69:50:AB:03:1E:43:1F:71:BE:9E:07:CB:4B:2C:5D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/fkDHf11pUKsDHkMfcb6eB8tLLF0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.145.93.0-213.145.94.255
Signature Algorithm: sha256WithRSAEncryption
e1:11:a7:2d:10:3a:85:55:2d:7e:28:21:1a:9a:fb:69:92:49:
03:17:b6:39:21:62:16:91:16:c8:ed:59:81:49:9e:1b:b9:00:
bb:c4:4d:04:cb:79:ad:a5:d3:34:b8:d9:96:5b:a5:f5:d6:49:
ea:e3:8d:83:ec:0a:88:a7:30:d4:7a:66:08:53:bb:c6:22:b6:
5e:9a:1f:bc:cc:5c:83:8b:37:63:d8:fa:eb:4f:a2:a4:34:85:
4a:33:b1:85:12:52:f4:5b:81:81:72:bf:83:55:36:7c:17:4d:
45:36:6b:ec:3f:d2:50:f3:ea:26:13:86:6e:98:a3:45:01:9e:
91:25:e5:2e:2d:dd:a1:64:46:93:4b:a2:d4:cc:f9:12:da:02:
36:5e:f0:29:8a:03:e4:36:fd:98:4d:63:37:bf:db:b0:85:0a:
f9:5d:17:f0:0f:88:69:7a:3c:38:09:ce:d5:8f:43:bf:23:ca:
b6:a8:7f:90:be:2c:2c:29:16:22:52:68:d7:75:13:5e:52:45:
91:dc:2b:d7:92:fc:4a:76:ae:3b:3f:84:a0:05:4c:d7:cd:66:
3f:a0:f4:e5:52:c5:e4:08:26:ca:e9:32:c1:b6:7a:7f:2c:79:
32:99:8a:f5:d2:89:36:3f:f1:f1:a1:74:c3:4a:a8:5c:8b:4c:
10:67:71:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:53:12 2024 by rpki-client on console-ams.rpki-client.org