Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/SFP6EVPgBU1MVWwi7hA2X3cEM68.roa
File: SFP6EVPgBU1MVWwi7hA2X3cEM68.roa (raw, json)
Hash identifier: xYRCyIFbFoztw7v+1PwYmvO1XQrkgFkM6zzOW+yd9mQ=
Subject key identifier: 48:53:FA:11:53:E0:05:4D:4C:55:6C:22:EE:10:36:5F:77:04:33:AF
Certificate issuer: /CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Certificate serial: 01856C813BE883C86C294EEBE931B48DEA0F
Authority key identifier: F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/SFP6EVPgBU1MVWwi7hA2X3cEM68.roa
Signing time: Sun 01 Jan 2023 08:44:46 +0000
ROA not before: Sun 01 Jan 2023 08:44:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51822
IP address blocks: 89.226.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:81:3b:e8:83:c8:6c:29:4e:eb:e9:31:b4:8d:ea:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f2e2810f49b36fdd641c326bd1de4e42d128b046
Validity
Not Before: Jan 1 08:44:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4853fa1153e0054d4c556c22ee10365f770433af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:fc:10:9e:20:fe:70:f6:bc:ff:06:5b:9e:9b:
cb:30:a8:26:c4:43:de:01:ac:37:98:0b:d9:81:56:
15:c8:d3:17:90:4e:3e:85:02:a2:6c:dc:6d:71:82:
55:36:52:e6:db:c3:17:d9:9f:16:91:d7:67:3a:de:
f8:38:cf:45:f3:37:d5:36:63:5e:e7:ad:30:a3:b0:
df:d5:1b:a6:ea:09:ca:c5:92:0b:8b:1f:7f:08:4c:
1b:af:3a:65:db:36:d0:20:38:71:c0:ed:a0:f6:81:
c5:10:8d:af:a2:af:d2:0e:9f:99:06:51:be:b8:a1:
85:04:32:e1:65:db:04:93:06:25:34:cb:b2:3f:f7:
a7:95:57:67:3e:84:b9:3f:2c:f2:a5:41:15:6e:00:
03:4d:30:51:4c:ce:1c:13:f2:62:e8:ca:54:47:c3:
a4:97:eb:71:00:da:db:98:30:f0:85:25:e1:81:a0:
4d:9b:f1:e9:d4:8a:56:76:56:cb:ee:c1:b8:36:7c:
d2:1e:64:46:d3:76:29:8d:33:bc:55:5b:5e:53:c0:
23:89:cf:a8:db:3c:69:5e:00:89:9e:ea:bf:97:c3:
3a:cf:29:7c:51:c7:f1:74:d1:45:bb:4b:33:be:22:
50:1c:33:48:92:7e:b5:46:d7:85:c2:dc:8c:37:6c:
f5:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:53:FA:11:53:E0:05:4D:4C:55:6C:22:EE:10:36:5F:77:04:33:AF
X509v3 Authority Key Identifier:
keyid:F2:E2:81:0F:49:B3:6F:DD:64:1C:32:6B:D1:DE:4E:42:D1:28:B0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8uKBD0mzb91kHDJr0d5OQtEosEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/SFP6EVPgBU1MVWwi7hA2X3cEM68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/79e905-fb0d-4b8b-9390-50d2b70bcf31/1/8uKBD0mzb91kHDJr0d5OQtEosEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.226.253.0/24
Signature Algorithm: sha256WithRSAEncryption
75:69:c7:a8:d0:eb:de:63:78:f5:93:e1:e0:12:be:20:81:51:
59:25:de:96:2f:ef:aa:b4:17:f1:17:28:75:ec:35:dd:b4:4b:
73:39:ac:a7:23:63:13:52:e0:cd:14:c2:7a:0d:64:61:6f:1c:
31:50:20:76:dc:f5:1d:4a:f4:ca:6c:3e:b4:e7:10:a7:dd:b4:
f1:49:90:89:b4:8c:9a:48:00:c1:f9:ff:83:ac:a8:5c:95:24:
42:52:e8:24:a7:d8:fe:70:04:53:00:ca:9e:81:f3:da:4c:07:
1c:5a:d1:4a:00:f9:1f:00:38:38:fd:f3:f7:b3:9d:f0:c8:d3:
68:66:48:ab:e3:aa:88:62:5e:9e:5a:99:47:be:7c:54:28:65:
5f:55:60:4e:84:0c:df:a9:75:36:e7:ed:fa:d0:f6:96:8d:03:
1e:86:fc:4b:de:7d:ce:a7:56:df:0f:ce:61:e5:32:67:9e:3c:
01:0e:45:d9:5d:60:4c:39:f5:b3:f4:10:0a:9e:ce:01:44:88:
9e:fb:ee:58:db:50:85:fc:57:95:9e:e0:ae:d0:3f:8b:a9:bf:
06:58:50:fe:b0:1f:63:a9:cd:25:e7:89:c6:35:5d:4d:5e:9f:
2d:6d:99:fd:dd:85:0e:07:a5:55:d8:0b:38:a1:4e:e3:b5:a6:
9b:94:de:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:23 2024 by rpki-client on console-fra.rpki-client.org