Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fwHbtk0He3-5Pxcj3B-0lqduoE4.roa
File: fwHbtk0He3-5Pxcj3B-0lqduoE4.roa (raw, json)
Hash identifier: 7XDfZf55k8H9VFD2i3bFzWU2htu/SK47bt23LxP0CpM=
Subject key identifier: 7F:01:DB:B6:4D:07:7B:7F:B9:3F:17:23:DC:1F:B4:96:A7:6E:A0:4E
Certificate issuer: /CN=da00e981953061972c896bd6d27738d083aadb0e
Certificate serial: 0185901966AE6F127922FC6FDF08FF14C5F3
Authority key identifier: DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fwHbtk0He3-5Pxcj3B-0lqduoE4.roa
Signing time: Sun 08 Jan 2023 06:37:41 +0000
ROA not before: Sun 08 Jan 2023 06:37:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 3320
IP address blocks: 188.240.83.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:90:19:66:ae:6f:12:79:22:fc:6f:df:08:ff:14:c5:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da00e981953061972c896bd6d27738d083aadb0e
Validity
Not Before: Jan 8 06:37:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f01dbb64d077b7fb93f1723dc1fb496a76ea04e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:e1:d8:a3:a7:18:f9:f5:89:c6:b5:6a:41:62:
10:19:c7:3e:be:8e:7f:93:81:2b:3f:df:99:99:3a:
87:4d:7c:20:63:f8:4c:cb:6b:43:8c:fd:8c:98:b2:
c0:0a:71:ad:c6:99:ca:bb:3c:31:ad:bc:6e:f0:31:
68:ab:25:e0:97:0f:d4:88:c7:28:76:25:43:d8:a1:
d7:8c:86:82:d4:74:de:86:97:26:99:c3:85:62:7a:
48:63:27:b3:78:c5:1d:d3:0b:eb:2f:e0:6b:d0:da:
c7:1f:d2:25:11:bd:4c:d2:72:70:6e:1c:c8:e2:b1:
53:0f:50:51:62:20:29:cf:bb:f3:33:23:a4:b7:fc:
27:b6:81:eb:90:c7:2d:02:ad:ad:2c:fb:51:ac:e5:
b4:ed:2e:53:44:86:7e:6e:c0:3c:64:59:15:86:f0:
0b:35:0f:93:24:25:aa:21:43:fd:13:b4:3e:58:cd:
8f:f5:fe:32:f7:2e:b5:c3:17:34:87:f5:d1:c6:3e:
88:7e:35:cc:6d:c9:52:13:04:5a:ce:72:56:9f:89:
fe:29:ee:9b:94:6a:de:b0:ae:3f:dd:55:8a:cb:2f:
2f:12:a1:cc:12:a0:e7:78:ac:f2:a0:f8:d1:f4:c8:
b4:49:43:41:c6:d3:c5:c9:56:b9:b6:a6:c9:b4:4c:
df:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:01:DB:B6:4D:07:7B:7F:B9:3F:17:23:DC:1F:B4:96:A7:6E:A0:4E
X509v3 Authority Key Identifier:
keyid:DA:00:E9:81:95:30:61:97:2C:89:6B:D6:D2:77:38:D0:83:AA:DB:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2gDpgZUwYZcsiWvW0nc40IOq2w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/fwHbtk0He3-5Pxcj3B-0lqduoE4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/82a7d6-92a9-4204-9ae0-9a48ecf9e15e/1/2gDpgZUwYZcsiWvW0nc40IOq2w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.240.83.0/24
Signature Algorithm: sha256WithRSAEncryption
18:eb:0a:0d:ed:28:08:6d:00:10:10:fc:4d:11:16:6c:cd:d8:
81:bd:d0:02:59:60:02:26:34:c1:22:10:c2:5b:50:72:8d:3a:
e9:97:00:66:2a:ba:ee:f4:f4:80:f1:24:61:49:1f:8b:a6:a6:
f3:ca:96:cc:4a:db:53:ad:c4:1d:34:31:8a:1a:ac:a9:ae:b5:
7f:6b:4e:c3:05:d2:7e:43:02:cb:88:75:b5:06:45:36:ba:94:
2d:7d:c6:6e:a5:1e:c0:fe:76:6b:5a:6e:6b:6a:c7:dc:58:15:
a1:d2:e5:a5:87:4c:c9:03:c6:f2:50:f0:05:6d:df:d1:1c:13:
96:98:3b:aa:60:45:44:04:64:03:a5:a6:3c:fb:ed:11:ff:fb:
47:49:eb:37:d9:56:91:54:2f:50:15:91:bb:1f:7f:6f:cb:40:
8f:d3:45:95:5f:3e:90:e0:0b:08:78:a1:fd:8c:ce:7f:63:48:
2c:55:a6:54:dd:65:e1:c7:61:27:85:89:77:4e:c5:2c:6f:34:
0c:09:93:8d:b3:34:9f:9e:15:6c:3f:ad:f6:71:bd:12:01:b2:
38:87:11:01:31:62:b9:92:ab:3e:fb:67:db:3a:de:b4:5d:6b:
aa:f0:e9:0a:15:5b:39:75:8f:4b:a6:04:d0:64:f2:ee:ad:b2:
c2:27:8a:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:10:55 2023 by rpki-client on console-ams.rpki-client.org