Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/kL88Z1vZAQ9_lcf0EP6UVFagnUY.roa
File: kL88Z1vZAQ9_lcf0EP6UVFagnUY.roa (raw, json)
Hash identifier: eAKEeX1XGKsykxGPcgLKkklIA8rM1WQQJEvsIqGAY/o=
Subject key identifier: 90:BF:3C:67:5B:D9:01:0F:7F:95:C7:F4:10:FE:94:54:56:A0:9D:46
Certificate issuer: /CN=fe8b494455277ff530025cef2d51df7eab8e4510
Certificate serial: 0185A6BCB9944DCC228AA8946299B219E503
Authority key identifier: FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/kL88Z1vZAQ9_lcf0EP6UVFagnUY.roa
Signing time: Thu 12 Jan 2023 16:07:44 +0000
ROA not before: Thu 12 Jan 2023 16:07:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50274
IP address blocks: 109.127.0.0/18 maxlen: 18
185.112.192.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:a6:bc:b9:94:4d:cc:22:8a:a8:94:62:99:b2:19:e5:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe8b494455277ff530025cef2d51df7eab8e4510
Validity
Not Before: Jan 12 16:07:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=90bf3c675bd9010f7f95c7f410fe945456a09d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:d1:a2:a1:8e:dd:01:0a:8c:6a:11:bb:db:f7:
34:11:37:f3:a5:29:1b:de:71:73:4c:58:4f:6f:54:
24:4c:e2:fd:eb:43:fc:e2:8c:82:f4:41:ba:1a:cd:
f0:62:6f:ac:d7:f2:82:ae:15:b9:52:73:4a:c3:52:
9e:4b:b0:67:84:c1:51:f6:ac:5e:62:0d:5f:db:c4:
69:98:a4:20:f6:6d:b5:b7:49:c0:09:a6:1c:46:f3:
30:d6:65:49:48:e4:4c:06:40:52:01:a3:fa:55:c2:
f2:a4:68:99:94:50:bc:22:e1:46:bd:8a:ae:46:27:
01:7a:0f:c7:e9:66:7e:6e:2b:6c:f3:86:4c:cf:9e:
5c:53:32:c9:04:62:12:de:33:47:ee:ea:d6:a5:38:
f9:a9:55:b2:cf:16:27:22:ff:96:12:8d:b5:73:81:
f9:18:2a:08:20:a2:c7:c6:7e:3d:63:8d:98:a0:b8:
28:6d:dd:8f:b5:d7:a6:89:e6:fc:1d:7b:47:24:e9:
c2:97:62:be:7b:c2:5d:db:87:8b:9d:0c:9b:fc:2e:
2c:45:b8:28:3d:32:03:15:4c:25:84:02:5d:4c:81:
25:32:23:74:21:c3:a4:1c:c7:c6:41:78:c2:1e:86:
51:d9:d8:e5:7c:9d:af:10:49:20:cc:58:b7:8b:f8:
7f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:BF:3C:67:5B:D9:01:0F:7F:95:C7:F4:10:FE:94:54:56:A0:9D:46
X509v3 Authority Key Identifier:
keyid:FE:8B:49:44:55:27:7F:F5:30:02:5C:EF:2D:51:DF:7E:AB:8E:45:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_otJRFUnf_UwAlzvLVHffquORRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/kL88Z1vZAQ9_lcf0EP6UVFagnUY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/761a3e-880e-4f7c-9366-c8cc5b2d0aed/1/_otJRFUnf_UwAlzvLVHffquORRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.127.0.0/18
185.112.192.0/22
Signature Algorithm: sha256WithRSAEncryption
97:a2:f7:75:d2:f7:5c:fe:0f:d1:8c:86:a1:e2:4e:78:c5:57:
ec:46:c6:1d:14:3c:89:91:fa:88:54:dc:dd:9a:1f:3e:0d:44:
2f:61:ee:9f:70:e3:11:76:c4:7e:02:ae:54:0a:fb:f9:3c:9a:
24:05:19:1a:9b:8e:11:74:e0:48:40:81:89:fa:27:b7:1a:0a:
d4:1e:ac:4a:53:df:b7:0a:11:3b:08:c8:c9:ce:e7:3a:68:59:
e6:32:61:3a:00:33:ed:50:cb:2b:b8:fe:c1:2d:78:33:30:c9:
11:75:c1:2b:e7:65:0c:c9:42:1c:a9:3c:92:8f:a0:4a:a7:29:
c5:f4:bd:03:8d:e8:b9:34:b0:66:ac:56:fa:8a:b0:5b:95:c8:
92:7f:75:f2:14:dd:e6:17:b5:9e:5e:d1:8a:62:19:fa:d5:dd:
3f:4d:1c:4c:ba:98:d9:e7:17:72:ae:9a:f8:13:4d:3b:62:e6:
64:bc:94:0a:1f:4b:ab:0e:96:fc:7a:21:cf:da:18:b4:3b:aa:
29:ed:50:77:f8:b7:06:81:67:72:28:c5:71:13:07:8f:db:07:
4d:38:40:e7:cd:7a:69:67:96:2e:d9:01:24:3f:7f:df:55:58:
47:02:95:f0:db:87:9f:3d:23:31:a9:60:9d:63:d6:61:0e:6f:
08:0d:42:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:12 2024 by rpki-client on console-fra.rpki-client.org