Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/f6e1Yt8Sdz8_DBa3G2hJkpjJu_w.roa
File: f6e1Yt8Sdz8_DBa3G2hJkpjJu_w.roa (raw, json)
Hash identifier: szeoATq3/kAmEJ6dIZrNiWz/jUS7xHriTx01+1DFnZc=
Subject key identifier: 7F:A7:B5:62:DF:12:77:3F:3F:0C:16:B7:1B:68:49:92:98:C9:BB:FC
Certificate issuer: /CN=2989647851efcd198972ed3d149ccbbde9c55c00
Certificate serial: 0186DA4AB1C251834DC4CAAA0FC7B1511695
Authority key identifier: 29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/f6e1Yt8Sdz8_DBa3G2hJkpjJu_w.roa
Signing time: Mon 13 Mar 2023 09:26:13 +0000
ROA not before: Mon 13 Mar 2023 09:26:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41993
IP address blocks: 185.82.144.0/22 maxlen: 22
2a05:9101::/32 maxlen: 32
2a05:9100::/29 maxlen: 29
Validation: Failed, certificate revoked on Wed 17 May 2023 12:41:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:da:4a:b1:c2:51:83:4d:c4:ca:aa:0f:c7:b1:51:16:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2989647851efcd198972ed3d149ccbbde9c55c00
Validity
Not Before: Mar 13 09:26:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fa7b562df12773f3f0c16b71b68499298c9bbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fc:a1:22:b2:0c:db:19:dc:8a:ce:66:49:6c:
68:93:d3:46:de:08:f4:40:20:8b:c1:df:f5:3b:4c:
c0:20:50:07:da:67:30:4d:c1:b1:2a:01:8f:6a:0e:
7d:a3:bf:d2:ba:67:c9:3d:27:cb:91:2f:18:8e:0b:
69:6f:35:6e:81:71:ed:0a:a7:5b:1a:fc:1e:90:68:
d4:ed:78:bb:ad:7e:69:db:bb:8a:f8:98:7c:a4:8c:
2d:b1:29:a7:83:e7:64:49:c4:08:9a:f9:29:fd:b5:
ae:6b:02:14:87:ef:d6:08:eb:73:ee:fb:2a:4c:31:
b2:36:ab:c5:42:66:9a:38:e9:a5:fd:49:67:32:42:
7e:ba:81:9e:79:35:33:e7:a3:17:c9:8e:dc:87:de:
8b:95:f3:3f:c0:c6:1a:24:ad:73:1f:01:19:34:ad:
1f:5e:ee:05:e6:08:3d:2d:6f:2a:65:63:59:2b:26:
cb:64:4e:fb:e3:24:73:4e:84:d6:40:dc:f4:ee:6d:
61:b9:86:18:f9:37:3d:97:2c:a4:f7:fc:e7:0a:ae:
f3:de:c8:75:f7:f1:2c:7f:0f:ad:a7:4f:3b:6a:e5:
e2:d3:89:94:3e:16:19:b7:f9:a2:2e:b1:b7:02:a9:
71:e2:a7:36:51:9c:70:6c:e7:76:98:c5:07:67:40:
0f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A7:B5:62:DF:12:77:3F:3F:0C:16:B7:1B:68:49:92:98:C9:BB:FC
X509v3 Authority Key Identifier:
keyid:29:89:64:78:51:EF:CD:19:89:72:ED:3D:14:9C:CB:BD:E9:C5:5C:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KYlkeFHvzRmJcu09FJzLvenFXAA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/f6e1Yt8Sdz8_DBa3G2hJkpjJu_w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/ab5e88-d2f9-487b-bb92-a4cb1cfd00b8/1/KYlkeFHvzRmJcu09FJzLvenFXAA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.82.144.0/22
IPv6:
2a05:9100::/29
Signature Algorithm: sha256WithRSAEncryption
11:df:6b:3c:3e:1d:6b:c0:6b:b6:61:c4:f0:c8:5c:08:f4:c0:
b5:0b:6b:17:7f:50:18:27:91:1e:12:1f:76:5e:6c:9f:e1:0e:
ad:81:c2:46:62:4c:86:de:3a:21:4a:f0:42:80:d7:2d:bf:c4:
d8:d5:5e:3a:76:cb:32:16:67:d2:c1:a7:63:95:97:38:b6:66:
b5:4a:33:6f:64:35:a5:61:74:6c:4a:3e:90:3c:d7:db:ec:25:
d9:b6:d6:1c:0c:34:f3:30:e8:81:76:38:e4:b9:b0:b7:b7:d4:
13:d6:db:4b:be:6d:aa:a7:a4:e4:11:e3:f9:81:66:fb:f6:86:
9b:12:f4:db:1a:2c:1e:a1:a2:5b:ae:5f:3c:ed:68:65:a9:41:
33:7e:62:78:0e:0d:a4:a9:0c:d4:bc:b3:86:cf:87:03:4a:f1:
86:f6:db:25:45:ff:6c:a1:31:a6:0d:96:c1:c7:10:62:2f:76:
b0:d3:e6:21:70:33:d9:59:5d:cd:9d:2f:35:8b:ff:c8:c6:e3:
3b:c9:77:71:12:a1:81:58:c6:f6:61:1f:64:7e:0d:79:80:59:
98:57:7c:40:a7:51:3c:f3:12:fa:9b:34:8c:8e:b2:de:ee:02:
d7:66:83:df:fb:7a:4a:79:70:8f:dd:04:ac:dc:b2:2b:1f:1d:
bb:95:5f:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:40 2024 by rpki-client on console-fra.rpki-client.org