Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fkwJaZbkTFjmb7r_EIyd7_PSE94.roa
File: fkwJaZbkTFjmb7r_EIyd7_PSE94.roa (raw, json)
Hash identifier: 0ZQsOOnevSESPJL/U0gE8jqHxw9RvqNYUQu55Ee49c0=
Subject key identifier: 7E:4C:09:69:96:E4:4C:58:E6:6F:BA:FF:10:8C:9D:EF:F3:D2:13:DE
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01870A816E0350A039576046235237D6AB5E
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fkwJaZbkTFjmb7r_EIyd7_PSE94.roa
Signing time: Wed 22 Mar 2023 18:07:47 +0000
ROA not before: Wed 22 Mar 2023 18:07:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199191
IP address blocks: 87.246.27.0/24 maxlen: 24
87.246.32.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 23 Mar 2023 14:05:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:0a:81:6e:03:50:a0:39:57:60:46:23:52:37:d6:ab:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Mar 22 18:07:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e4c096996e44c58e66fbaff108c9deff3d213de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:c2:ce:44:7b:ca:d7:77:64:63:30:03:89:b0:
31:d5:aa:95:24:81:82:1e:6e:15:f3:ab:35:28:ca:
b0:62:2d:cc:10:6c:6b:67:88:f5:a9:0e:26:71:b4:
1d:40:ff:32:ce:5c:62:6c:88:52:55:40:96:bd:c6:
84:c1:a3:bb:f1:97:ba:fb:92:40:85:07:2c:46:4f:
12:0b:63:58:4e:f8:de:aa:0c:84:76:81:31:ed:e1:
88:1a:76:14:05:29:f5:80:3c:db:02:36:21:0f:5e:
f8:3f:e2:79:4e:72:1d:dd:d8:8d:80:75:ac:c3:e7:
92:83:73:d4:06:37:2b:4b:13:21:73:d5:d7:c7:e1:
40:b6:7c:e0:25:81:98:39:a7:9a:d2:92:d7:87:47:
62:9b:67:a8:c0:92:15:ef:72:0d:b3:9c:ab:b3:a3:
e6:17:9c:9e:c5:40:d5:3f:fa:d5:85:b0:6a:ac:bd:
1c:52:de:37:4c:21:f2:cf:14:d2:65:8b:89:1b:6c:
35:e5:0d:55:c6:59:83:0d:d6:f6:98:80:d3:49:2e:
dd:0e:57:af:e1:54:77:c7:7a:f4:46:fd:fe:c3:11:
8b:c4:0e:e9:f3:d7:dc:30:e8:69:c1:45:6f:cb:91:
e1:21:47:61:60:d2:14:3d:0e:23:5c:ad:2b:ef:91:
7f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:4C:09:69:96:E4:4C:58:E6:6F:BA:FF:10:8C:9D:EF:F3:D2:13:DE
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/fkwJaZbkTFjmb7r_EIyd7_PSE94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.246.27.0/24
87.246.32.0/24
Signature Algorithm: sha256WithRSAEncryption
08:35:43:ae:37:35:86:d9:0b:48:bf:8b:27:e5:99:32:f7:61:
02:f0:94:b1:e6:70:57:fc:14:f3:39:6d:80:bb:e4:46:31:e0:
46:62:57:66:bc:cc:6f:cc:32:a6:09:91:f4:a3:01:9c:22:b4:
64:d3:08:c6:53:01:ac:3c:15:f0:9b:b4:ec:f2:df:cb:49:dd:
90:b2:5b:48:b9:bb:d8:c8:d7:c0:89:97:83:a5:53:7c:e4:15:
df:0e:24:a9:80:d9:fa:ab:44:cd:69:ba:6c:3d:5a:e1:af:89:
d9:32:04:dc:9d:04:d7:fa:d4:7c:30:dc:79:af:3e:fe:e2:3d:
5c:29:fc:2c:a5:ac:09:a2:99:8e:9e:6b:ca:0e:4c:73:3f:18:
35:f8:b8:7b:6a:bf:6f:06:c4:92:48:04:0f:f6:5e:c9:29:f1:
ad:0b:a6:62:fb:bc:b0:cc:c4:ac:e8:d4:84:5d:8a:db:a0:bc:
21:1c:c2:3e:36:0e:68:17:39:9c:22:d1:54:6e:1f:86:77:c7:
3f:89:41:32:2e:73:a0:3a:0c:01:d5:65:b3:72:f7:70:29:42:
77:a9:59:4a:a3:5a:58:2a:e7:f7:6c:d4:55:8c:77:bb:74:cd:
9c:da:fc:77:7f:9d:51:4b:58:6b:2d:fb:4d:1d:79:41:ff:7b:
99:3e:0c:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:14 2024 by rpki-client on console-fra.rpki-client.org