Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa
File: fuTOiFHzY8RIh34EYJ33IckGU5U.roa (raw, json)
Hash identifier: OeJwMpkcKylCqt23T1upSh3sCOHpaJDnwqoXKwh1WgU=
Subject key identifier: 7E:E4:CE:88:51:F3:63:C4:48:87:7E:04:60:9D:F7:21:C9:06:53:95
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 01880E8185D2BE6834CDC686A482C20A8A0F
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa
Signing time: Fri 12 May 2023 05:49:09 +0000
ROA not before: Fri 12 May 2023 05:49:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54339
IP address blocks: 62.112.12.0/23 maxlen: 24
86.107.108.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 15:53:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:0e:81:85:d2:be:68:34:cd:c6:86:a4:82:c2:0a:8a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: May 12 05:49:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee4ce8851f363c448877e04609df721c9065395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:b3:03:a1:a4:5b:ce:32:74:5b:3c:4a:df:4a:
38:3f:bb:a6:69:1e:5d:2d:41:c8:76:dd:ea:a6:00:
f9:a3:ed:93:c7:b4:75:3c:92:97:50:9d:64:a8:e2:
1e:e1:3a:d8:2d:e3:f6:df:96:05:67:97:28:cf:95:
48:5a:99:28:ad:c4:42:31:4d:93:22:c2:ae:06:43:
1f:ac:44:d1:15:01:59:3f:f3:5b:23:10:33:e0:3f:
be:53:00:ba:55:37:3b:b2:c7:04:2d:84:59:7f:90:
16:09:5e:ee:49:3b:9a:71:8d:c2:d3:cd:09:02:53:
aa:81:33:17:59:eb:9c:57:be:ce:49:44:a5:7d:9b:
6e:07:62:97:4d:cb:78:9e:0f:f3:60:6e:c3:6e:3a:
7d:f2:dc:b5:72:32:39:f5:3b:65:ce:97:9d:eb:83:
9a:29:66:73:3d:b5:42:1b:c2:88:83:29:ed:cb:87:
a5:73:db:bd:cb:fe:d4:db:b1:10:ad:89:98:5d:cd:
8d:96:ce:de:51:ad:cd:54:ac:16:48:43:21:e2:6c:
92:6a:0c:4d:94:2b:c8:68:42:f6:85:55:e9:90:35:
82:5b:eb:78:04:16:f0:2f:69:07:3c:2b:35:0d:ea:
7a:1e:4f:ac:6d:ae:d9:37:3d:0d:77:a9:ec:80:d6:
a2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E4:CE:88:51:F3:63:C4:48:87:7E:04:60:9D:F7:21:C9:06:53:95
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fuTOiFHzY8RIh34EYJ33IckGU5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.112.12.0/23
86.107.108.0/23
Signature Algorithm: sha256WithRSAEncryption
93:97:af:90:73:e1:00:7e:6e:92:13:fa:cb:8d:ee:a7:97:20:
c2:87:ef:fd:7f:ca:5b:ef:19:23:8b:39:0a:f7:2d:5c:39:c8:
a3:5c:1f:7b:b7:7a:ee:6a:e1:cd:5d:b1:dd:78:86:cb:cf:4f:
9b:ab:01:71:c7:9b:09:4f:35:f4:32:57:d6:aa:d0:36:09:1e:
b2:03:e9:fc:26:85:8c:ca:13:92:31:49:5e:f8:ea:cf:f0:37:
63:cd:7b:76:03:ff:dd:a2:b8:19:21:59:10:48:76:bf:0a:22:
f8:42:06:04:76:e1:a7:b3:8e:b7:c6:90:0b:7e:1a:0c:fa:31:
fc:56:7f:2e:da:d5:cc:9f:9a:fc:52:1b:8e:6c:b5:a1:72:a0:
2f:b0:69:46:0f:b0:ba:03:62:93:27:1e:95:cc:69:4e:87:f4:
9c:85:b7:3c:28:7c:5b:2d:39:36:73:f4:2f:cf:2f:f1:6a:44:
94:f5:3b:6c:f6:f5:48:55:05:87:f9:84:a6:48:30:e5:34:61:
d3:74:ce:97:78:c9:b2:b8:e5:89:26:92:57:ca:ce:e8:d3:fe:
79:42:ee:b7:ae:b7:b9:9b:26:92:99:b6:ec:2c:5c:64:88:b6:
fc:eb:7f:a2:d5:44:63:5f:36:25:7d:04:09:5d:ad:3e:c2:b6:
b3:b7:f6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org