Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKAxiLpCVtMNG54VGTUOxDBAYVA.roa
File: FKAxiLpCVtMNG54VGTUOxDBAYVA.roa (raw, json)
Hash identifier: jXt7hCKXez80YVuURDwDRQiAfnEkorWUnn21wAAsom4=
Subject key identifier: 14:A0:31:88:BA:42:56:D3:0D:1B:9E:15:19:35:0E:C4:30:40:61:50
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01903A1BBBF9375661AB1F3AFBFEFE57AF26
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKAxiLpCVtMNG54VGTUOxDBAYVA.roa
Signing time: Fri 21 Jun 2024 09:23:34 +0000
ROA not before: Fri 21 Jun 2024 09:23:34 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 28064
IP address blocks: 201.77.51.0/24 maxlen: 24
201.77.52.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 21 Jun 2024 09:52:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:3a:1b:bb:f9:37:56:61:ab:1f:3a:fb:fe:fe:57:af:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jun 21 09:23:34 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14a03188ba4256d30d1b9e1519350ec430406150
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b4:30:dc:c5:a1:66:12:46:ee:f5:2a:c5:c0:
44:a5:2e:f7:34:09:08:a6:72:d6:fa:8c:c1:cd:b1:
02:03:b3:c1:ca:ca:0d:f5:b3:b9:00:28:1d:c9:c1:
08:68:ee:ce:0d:80:04:36:55:83:d0:11:41:5a:ee:
43:63:62:5f:94:c9:84:57:b1:ee:0c:f8:0b:95:ee:
9c:db:9a:02:23:74:83:1c:10:ab:ad:c6:e8:80:ba:
b0:bf:17:59:d1:8b:e8:a0:fb:3f:21:11:67:f7:eb:
8b:97:f7:87:a0:c8:5e:97:c9:e6:ba:b0:c0:f4:8e:
9a:5e:3e:15:25:c9:3b:86:70:6c:6a:cf:89:da:67:
20:e9:84:ef:ad:b5:b0:16:34:ff:3f:54:0f:8f:d2:
d8:42:ea:a8:16:be:4b:b7:d1:2d:04:bf:10:d7:1f:
73:d7:3d:8c:de:2f:53:47:48:ed:7a:18:1d:7f:ce:
86:88:b9:5f:52:a4:c0:76:b9:d1:b0:e0:4c:89:26:
82:1f:6f:9d:74:32:e6:62:d0:bf:c4:b1:12:cb:d7:
54:57:b3:cf:87:56:0a:63:c3:76:46:29:63:05:75:
f2:5d:58:f7:8f:b8:53:ed:db:02:c2:27:c5:9b:dd:
72:d3:af:ce:41:75:bc:99:22:5f:b8:da:45:6c:bb:
80:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A0:31:88:BA:42:56:D3:0D:1B:9E:15:19:35:0E:C4:30:40:61:50
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/FKAxiLpCVtMNG54VGTUOxDBAYVA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.77.51.0-201.77.52.255
Signature Algorithm: sha256WithRSAEncryption
cb:0d:fe:76:f9:f7:9a:d1:84:f2:ad:84:84:c6:db:94:84:05:
77:72:e8:a5:fd:bb:28:e7:b0:a0:0f:f7:c2:5c:c2:d3:8e:64:
12:ad:f8:93:41:6c:d0:6a:8e:16:62:10:08:ae:33:cd:cd:89:
e3:c4:87:09:a0:5d:df:44:c4:33:7d:27:cc:e2:c8:98:c4:d6:
70:5e:07:95:da:03:d7:92:3c:dc:6c:4a:36:b2:31:bd:52:b3:
58:38:9c:7d:28:81:25:22:cf:10:87:cd:09:23:4f:90:b4:87:
59:7f:32:6a:1e:62:27:aa:e4:e9:86:a8:05:de:89:d9:a1:79:
6d:9c:6a:a5:b0:4d:23:c7:49:59:fe:ba:69:01:f4:bd:be:8e:
35:a4:fe:fe:5f:96:44:f2:7a:75:6b:7b:f8:c7:39:da:62:cd:
d6:c9:c1:dd:50:cb:11:cd:ef:0b:1a:af:17:08:d6:ec:0b:85:
a5:68:8f:e2:26:87:aa:38:1c:1f:f1:91:a1:d7:15:95:07:45:
cf:2a:1c:20:fd:c5:ad:e8:cf:33:9d:79:27:c8:f5:a0:0f:38:
72:7b:a0:ea:bd:19:a5:b1:38:ab:9f:71:d6:11:b3:27:30:f9:
0f:a7:21:fe:bd:7c:f9:4b:8c:05:db:47:04:7c:2b:b9:70:d6:
46:89:e1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 02:13:46 2024 by rpki-client on console.sobornost.net