Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/FQpsTb2y73pkRjSAdT_jk23tPpw.roa
File: FQpsTb2y73pkRjSAdT_jk23tPpw.roa (raw, json)
Hash identifier: J5OTXdygpPpbY6CH/3+cwik2AvbqHAVvbVFjToDc/Jw=
Subject key identifier: 15:0A:6C:4D:BD:B2:EF:7A:64:46:34:80:75:3F:E3:93:6D:ED:3E:9C
Certificate issuer: /CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Certificate serial: 018B0FD38BCB31A06300341C7CB031E8F66F
Authority key identifier: 1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/FQpsTb2y73pkRjSAdT_jk23tPpw.roa
Signing time: Sun 08 Oct 2023 15:06:43 +0000
ROA not before: Sun 08 Oct 2023 15:06:43 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 142113
IP address blocks: 185.48.251.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:0f:d3:8b:cb:31:a0:63:00:34:1c:7c:b0:31:e8:f6:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b982883e1dfbf4633e08c0b58c85e89ffc32101
Validity
Not Before: Oct 8 15:06:43 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=150a6c4dbdb2ef7a64463480753fe3936ded3e9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9d:38:bd:29:2a:67:d0:05:e8:b3:a0:b1:4e:
b8:57:f3:70:a5:ea:71:68:2e:21:90:71:cb:63:59:
d4:e6:1e:76:60:25:eb:22:48:3e:e0:71:fc:e2:17:
b3:88:54:a0:23:9e:9c:d6:85:ba:e4:8c:50:fe:0d:
ba:36:85:3b:1d:83:16:4d:00:4f:14:ea:bf:3c:5f:
12:66:07:87:c5:52:f8:7f:06:5b:aa:a8:68:7c:32:
d8:e9:32:d1:83:e3:ad:03:0b:e2:8d:87:f4:91:62:
ef:95:58:bc:1f:7f:25:7d:41:7f:e0:3c:3a:d0:6d:
06:bb:a1:18:70:0d:49:97:cf:80:4a:12:69:7c:aa:
99:af:b0:4b:2c:32:6b:52:03:2f:fc:45:0e:42:64:
56:f2:27:6e:97:42:35:10:5e:84:b9:d0:48:c3:9b:
25:37:98:23:d4:c6:e5:a8:f1:d0:2a:66:39:20:bb:
3e:45:3c:c2:d7:93:52:a7:a2:be:64:fc:b5:a4:a0:
0d:7c:96:7d:60:89:39:8b:e9:5c:6a:2a:c1:30:61:
b5:cb:3a:b4:f6:b6:b4:57:bb:32:03:63:20:3e:1a:
de:e9:04:2d:dc:b9:bc:54:3b:94:86:eb:df:35:86:
24:be:89:cf:56:15:89:2b:78:a1:ea:df:d9:d9:3a:
15:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:6C:4D:BD:B2:EF:7A:64:46:34:80:75:3F:E3:93:6D:ED:3E:9C
X509v3 Authority Key Identifier:
keyid:1B:98:28:83:E1:DF:BF:46:33:E0:8C:0B:58:C8:5E:89:FF:C3:21:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G5gog-Hfv0Yz4IwLWMheif_DIQE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/FQpsTb2y73pkRjSAdT_jk23tPpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/57860a-dd5e-46e8-9ecb-d078eec82b2a/1/G5gog-Hfv0Yz4IwLWMheif_DIQE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.251.0/24
Signature Algorithm: sha256WithRSAEncryption
73:36:19:0d:8a:65:80:65:e8:45:1f:ec:ae:c2:e7:57:a8:37:
5c:1f:23:2b:0b:47:69:59:52:7b:ca:8a:d0:35:88:84:00:10:
37:31:fa:c5:a3:f3:49:e2:35:2f:fd:fb:12:74:be:4a:37:a6:
60:08:6c:2b:f7:05:72:f2:51:da:97:ef:79:df:04:ad:54:88:
d3:51:97:8d:f5:49:b2:75:92:1f:04:fc:73:74:1b:d6:ed:fa:
b7:17:12:2f:db:03:38:ef:57:24:76:65:51:a2:af:3b:91:38:
b1:27:77:3c:07:f2:a2:45:1b:35:5f:4e:17:d0:04:d3:3c:ba:
54:0c:2d:c6:65:0a:41:bd:99:0b:e9:cd:8e:ff:cf:a5:fc:98:
32:e3:58:cc:ad:4a:b5:e0:8e:14:f0:17:91:88:68:cc:95:91:
92:07:8b:b9:b6:dd:1f:a3:e0:e8:84:0d:6f:3d:c1:c4:32:f8:
d7:d9:d3:c8:d3:08:95:c8:a1:ff:64:9d:12:2f:6f:59:bf:ab:
e2:86:b9:81:39:07:5d:96:99:01:d2:ea:8b:ac:a2:e6:c8:29:
d4:1f:73:9c:12:8e:bf:6f:66:6c:2f:27:c0:6a:9e:d7:3e:05:
e7:8a:da:1a:1f:09:64:54:b1:d5:85:52:16:05:fd:9e:e0:c8:
48:ae:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:22 2024 by rpki-client on console-ams.rpki-client.org