Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/8mynZJhf4XtKeSTNSbHzXwyPIpE.roa
File: 8mynZJhf4XtKeSTNSbHzXwyPIpE.roa (raw, json)
Hash identifier: l+TBIOQuJdyzmfAkMKp+cVDIbZov+00RJlH67o7K+H8=
Subject key identifier: F2:6C:A7:64:98:5F:E1:7B:4A:79:24:CD:49:B1:F3:5F:0C:8F:22:91
Certificate issuer: /CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Certificate serial: 01877FCA0F98DC5F9CDD7188E1C219F778C7
Authority key identifier: FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/8mynZJhf4XtKeSTNSbHzXwyPIpE.roa
Signing time: Fri 14 Apr 2023 12:42:41 +0000
ROA not before: Fri 14 Apr 2023 12:42:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210671
IP address blocks: 85.92.119.0/24 maxlen: 24
194.48.211.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 09:20:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:7f:ca:0f:98:dc:5f:9c:dd:71:88:e1:c2:19:f7:78:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fef7fd5710ae5a473e158dc3fd6c8f17efa3e55b
Validity
Not Before: Apr 14 12:42:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f26ca764985fe17b4a7924cd49b1f35f0c8f2291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:b0:fa:4d:38:43:fe:c3:6b:6d:9e:90:a2:a1:
ec:97:fa:8c:50:c7:70:cb:b1:ea:0c:62:e9:1f:5b:
a5:8f:7c:21:ed:f3:8a:60:bc:d8:63:47:6c:fb:28:
40:68:a4:44:ac:5b:84:ca:7b:0d:ec:f8:53:66:55:
d1:be:57:bc:3d:b5:dc:1c:12:5a:73:cf:19:81:eb:
01:ba:42:73:3a:fe:3a:05:16:75:2c:1a:e7:cf:33:
1f:11:fa:5b:f9:25:ce:43:cf:4c:c8:f3:04:58:02:
b7:36:d7:30:06:d9:6e:f9:75:bc:56:46:92:3a:db:
1f:f4:7d:0a:b9:40:4f:82:09:b8:48:58:14:e9:7c:
a4:db:0e:33:3f:4b:48:f2:20:4e:cd:f5:9a:ea:2b:
b1:1d:ba:64:78:5b:bb:74:50:25:1f:58:24:6a:1d:
82:77:11:7b:42:a4:06:e5:28:f5:9f:ad:93:9a:e4:
29:89:44:1b:d3:2e:0e:f2:c1:ea:72:c6:96:f8:09:
2b:46:ba:b6:01:9a:06:bd:8b:02:ad:a8:1a:f6:1e:
4a:85:f4:ad:25:40:35:c9:b4:93:cf:29:bd:c5:ca:
82:00:59:d4:c8:a6:0f:21:e6:3c:e2:dd:d1:e2:52:
e0:5a:78:29:75:04:4e:c6:6c:6b:25:6f:13:4b:a7:
e2:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:6C:A7:64:98:5F:E1:7B:4A:79:24:CD:49:B1:F3:5F:0C:8F:22:91
X509v3 Authority Key Identifier:
keyid:FE:F7:FD:57:10:AE:5A:47:3E:15:8D:C3:FD:6C:8F:17:EF:A3:E5:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vf9VxCuWkc-FY3D_WyPF--j5Vs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/8mynZJhf4XtKeSTNSbHzXwyPIpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/ac51b2-ad16-4529-8f82-453d37b4921c/1/_vf9VxCuWkc-FY3D_WyPF--j5Vs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.92.119.0/24
194.48.211.0/24
Signature Algorithm: sha256WithRSAEncryption
77:1a:20:ff:a0:e2:50:9b:a2:da:12:38:05:6d:e0:67:de:6c:
70:d7:a4:d3:2e:cd:e6:b8:0e:ea:b0:9e:aa:5e:40:f9:bc:ac:
ef:b3:e3:b1:4e:f4:6f:02:ac:ce:51:b6:3f:f1:51:da:40:d3:
1e:f3:12:c3:93:8b:2f:3f:32:b6:ea:5c:5c:63:6b:4c:87:b9:
bc:af:fa:0b:32:44:7f:f1:2d:26:3c:c3:c3:5d:3f:37:b4:5f:
b3:92:b1:6a:67:9a:4e:a6:4b:d3:d6:70:12:85:5d:b5:5d:48:
87:3a:76:77:df:4d:de:0b:a2:2d:0f:3a:03:d4:1b:35:90:cf:
be:65:8d:80:a7:71:24:7c:50:57:ae:d2:8d:28:3c:78:29:fc:
95:51:9d:39:82:32:e8:a1:fb:12:4f:e6:ef:19:4b:e2:c2:25:
96:4a:ab:bd:c6:3f:d4:e9:38:6d:7e:76:1c:74:f0:67:3f:27:
78:9b:6c:e8:63:82:a8:a5:23:14:fe:b9:57:d5:04:8c:c4:d1:
86:4d:72:98:c0:87:5e:a7:6c:c6:24:54:57:27:05:51:bc:cc:
b6:63:50:78:5a:e7:bb:36:11:46:17:b1:5a:57:55:0a:06:00:
c2:25:76:ac:d6:6c:78:bd:d3:cf:8e:13:f1:b6:ea:af:b6:a1:
18:56:2b:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:52:29 2024 by rpki-client on console-fra.rpki-client.org