Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/FiAMID4f3TRWKB6UbF-C3sLWJ6E.roa
File: FiAMID4f3TRWKB6UbF-C3sLWJ6E.roa (raw, json)
Hash identifier: oDFgqPWlJwOFixn8oalNTI5Z/zS9gKT3h5OXffIWt3Y=
Subject key identifier: 16:20:0C:20:3E:1F:DD:34:56:28:1E:94:6C:5F:82:DE:C2:D6:27:A1
Certificate issuer: /CN=498fd453f5e35f9c77d1d706e565138adf82256a
Certificate serial: 01857321C4F378D3A3FF95455A54E2451074
Authority key identifier: 49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/FiAMID4f3TRWKB6UbF-C3sLWJ6E.roa
Signing time: Mon 02 Jan 2023 15:37:50 +0000
ROA not before: Mon 02 Jan 2023 15:37:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203931
IP address blocks: 217.29.240.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:21:c4:f3:78:d3:a3:ff:95:45:5a:54:e2:45:10:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=498fd453f5e35f9c77d1d706e565138adf82256a
Validity
Not Before: Jan 2 15:37:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=16200c203e1fdd3456281e946c5f82dec2d627a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:bd:fc:15:68:2e:d0:1c:58:ee:d9:2d:90:7e:
b9:15:14:6b:ab:d1:6f:16:1c:1f:d7:a3:18:00:c6:
9d:34:3b:5b:ed:98:5b:7a:43:2b:aa:6f:ca:73:b9:
19:04:12:af:29:cb:7a:f4:0d:34:ee:a8:6f:df:c2:
84:54:54:0a:d8:5a:51:05:fc:c4:74:30:94:e3:79:
64:8e:7c:52:61:57:57:ed:5d:5a:e5:9d:75:55:0a:
ba:da:16:ac:b8:3f:b9:8a:00:00:cf:52:9f:82:4e:
f4:bb:84:96:e1:44:d2:8e:f7:73:b8:5e:a5:70:42:
a0:f1:d9:0e:a9:04:e7:8e:d6:cd:3b:d0:95:1b:5d:
cf:1a:64:6d:13:1d:2a:f2:13:26:1c:a4:eb:6c:ba:
27:3b:46:44:e8:cf:74:59:c1:5c:8f:b7:3e:a3:24:
22:33:9f:3e:a8:a5:39:af:4d:32:b2:a2:44:b4:97:
a1:56:64:9d:de:bb:5e:69:b7:0a:25:ab:19:d5:e9:
6d:40:5a:10:5e:cd:e1:10:2d:9a:20:60:2d:84:ae:
b3:00:f1:83:69:d6:c8:4f:54:56:21:d0:1a:08:3f:
b8:de:91:e2:ca:ba:64:00:8b:d6:dc:da:2b:b6:cb:
7f:b9:87:56:0a:7a:8f:ea:e3:98:8e:43:eb:d0:c1:
07:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:20:0C:20:3E:1F:DD:34:56:28:1E:94:6C:5F:82:DE:C2:D6:27:A1
X509v3 Authority Key Identifier:
keyid:49:8F:D4:53:F5:E3:5F:9C:77:D1:D7:06:E5:65:13:8A:DF:82:25:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SY_UU_XjX5x30dcG5WUTit-CJWo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/FiAMID4f3TRWKB6UbF-C3sLWJ6E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/545b06-8572-412f-a80f-3979ef0d32db/1/SY_UU_XjX5x30dcG5WUTit-CJWo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.29.240.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:a7:33:81:3c:0b:3e:3c:fb:9c:81:3f:80:03:6a:e2:ce:53:
81:bb:d5:87:b6:b9:59:77:74:2d:bd:2c:ad:74:01:0e:e1:6f:
1c:0c:2e:dc:73:02:2a:54:e2:a7:99:a6:15:58:48:88:4b:72:
8d:b3:5a:54:65:ac:5e:05:8d:fa:fa:d8:3b:16:27:65:4f:61:
45:50:2c:3f:75:6c:ec:64:71:5c:e1:86:54:bf:df:dd:cc:e3:
05:bc:46:a2:13:76:ec:d6:5c:ad:3e:d9:ca:08:80:7d:bf:53:
67:07:66:eb:06:ea:27:85:6f:4b:e0:9a:98:84:de:3d:7d:85:
e1:11:a3:02:eb:39:b5:4f:67:6d:56:84:d9:f8:a8:b8:ea:34:
c1:d7:75:72:1b:d1:a6:94:ef:d9:93:a4:75:4b:60:78:50:f2:
1a:0f:8f:76:ff:b3:12:ee:36:36:c3:cd:56:19:9b:87:5c:73:
fb:8c:f0:91:de:c3:71:ea:20:c9:68:3d:22:58:08:1e:01:4a:
fc:db:7d:b3:18:90:e6:66:47:83:a1:4c:73:02:18:61:80:60:
ad:f7:c9:8a:e4:4b:ee:7c:cd:3e:4b:c5:e7:17:92:6d:01:96:
cc:8a:8d:57:6f:7c:24:f7:d3:28:f0:cf:6d:31:ea:65:40:a7:
a9:a1:9b:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:11 2024 by rpki-client on console-fra.rpki-client.org