Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/fWT6LaK_XPH8A42WhwHOBnwP4Uk.roa
File: fWT6LaK_XPH8A42WhwHOBnwP4Uk.roa (raw, json)
Hash identifier: rFy3U+UKooENwfWAvrRtDZZm2THXYL3aQ6mv16t7q64=
Subject key identifier: 7D:64:FA:2D:A2:BF:5C:F1:FC:03:8D:96:87:01:CE:06:7C:0F:E1:49
Certificate issuer: /CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Certificate serial: 018BB734426B2CFB26EA397D87634ED9D75D
Authority key identifier: CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/fWT6LaK_XPH8A42WhwHOBnwP4Uk.roa
Signing time: Fri 10 Nov 2023 03:08:57 +0000
ROA not before: Fri 10 Nov 2023 03:08:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61317
IP address blocks: 185.144.12.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:b7:34:42:6b:2c:fb:26:ea:39:7d:87:63:4e:d9:d7:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd4065967dec092b5fc90152e4a95339ba1d2289
Validity
Not Before: Nov 10 03:08:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d64fa2da2bf5cf1fc038d968701ce067c0fe149
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9a:d9:61:0f:48:6d:37:61:15:16:e8:89:b5:
75:72:3c:57:3a:19:72:7d:27:9f:aa:06:e4:33:b6:
1e:29:46:11:79:e7:24:e3:22:39:f0:3b:f3:11:47:
7d:66:3c:11:7d:76:e9:2f:7d:3f:2e:f8:43:92:ae:
2c:b7:92:0d:e1:d9:90:a2:9e:f4:9f:cc:cc:d2:5e:
a8:30:59:ba:10:d3:d0:cc:cb:06:0f:48:78:b8:9c:
78:23:fd:f5:7b:db:18:bb:63:f0:c1:42:36:d6:55:
a4:11:ea:d5:c7:06:b2:f3:3e:8b:0c:30:86:df:cc:
b4:ca:1e:4d:2a:4e:91:68:f0:b6:c9:5c:87:bf:d0:
40:70:85:88:e8:7b:12:0b:3d:38:84:48:5b:c0:77:
dc:a9:a5:a9:90:16:d2:0b:77:7f:dc:f5:2e:2a:86:
28:f5:18:3f:34:78:49:50:f8:3f:b6:22:bc:d6:32:
6c:db:43:db:48:d8:f5:02:7d:31:37:20:f0:aa:d8:
45:7b:7b:bf:0c:80:2f:5a:6d:3b:65:fc:33:55:fb:
c2:bd:3c:e3:50:14:ef:98:c1:43:10:3c:28:1f:4d:
ac:db:12:69:15:56:72:8b:a2:fd:25:ca:a7:22:cb:
39:09:88:37:5f:b9:40:37:67:e8:7a:88:ed:9e:4f:
9b:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:64:FA:2D:A2:BF:5C:F1:FC:03:8D:96:87:01:CE:06:7C:0F:E1:49
X509v3 Authority Key Identifier:
keyid:CD:40:65:96:7D:EC:09:2B:5F:C9:01:52:E4:A9:53:39:BA:1D:22:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zUBlln3sCStfyQFS5KlTObodIok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/fWT6LaK_XPH8A42WhwHOBnwP4Uk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/944f2a-f673-42bf-9e3d-edcef7451ef4/1/zUBlln3sCStfyQFS5KlTObodIok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.144.12.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:df:82:b8:6c:71:0f:3a:72:92:93:93:8c:25:c0:7c:36:b3:
6f:5e:fa:e7:f2:55:39:87:b9:e8:70:c1:f8:34:ea:e4:9a:ba:
69:c9:b6:a3:f2:34:c2:1f:75:3b:1a:98:0c:1f:57:fb:5c:02:
31:f9:6c:4f:a3:bd:85:5f:53:b7:b3:1d:3c:cb:0b:95:a5:5f:
6f:83:1e:1c:c8:78:79:19:33:85:86:51:dc:9d:6d:c8:ea:67:
92:e5:09:9e:75:c4:8d:ab:b0:bf:86:4a:27:71:71:65:6e:a4:
56:e5:41:17:22:3e:67:77:df:86:a8:e7:74:d6:77:f8:5f:6b:
eb:0f:18:28:f4:48:38:e2:93:f2:6b:84:77:7b:eb:bf:df:64:
20:e5:72:11:68:c3:59:02:c8:91:84:7a:dc:1d:23:53:4f:31:
b3:43:53:77:d9:77:9a:20:38:fc:07:bf:53:b1:08:07:9b:1d:
fa:e5:51:bc:69:cf:a0:9d:fe:93:2c:2b:27:cc:c6:f3:6f:f5:
56:e2:22:f2:db:81:cb:99:63:b6:12:b5:fd:fb:aa:1d:1b:82:
ce:57:75:0a:7f:2e:ee:7f:46:45:12:d1:54:d9:50:02:b3:fb:
5b:15:ff:e8:10:f5:da:58:bf:a5:83:c4:66:ba:31:e7:95:24:
b2:af:e3:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org