Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/Ffjq7QDE2MgC_il5hS29ON2_XF4.roa
File: Ffjq7QDE2MgC_il5hS29ON2_XF4.roa (raw, json)
Hash identifier: dpDKHEFua6iESTYZUGEBQKZdoLl8RA4hvlfZthoswdE=
Subject key identifier: 15:F8:EA:ED:00:C4:D8:C8:02:FE:29:79:85:2D:BD:38:DD:BF:5C:5E
Certificate issuer: /CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Certificate serial: 01856E1D4001ED0DADD159CBAACA985B1FEB
Authority key identifier: 98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/Ffjq7QDE2MgC_il5hS29ON2_XF4.roa
Signing time: Sun 01 Jan 2023 16:14:48 +0000
ROA not before: Sun 01 Jan 2023 16:14:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60576
IP address blocks: 185.74.12.0/22 maxlen: 24
2a05:4840::/29 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:1d:40:01:ed:0d:ad:d1:59:cb:aa:ca:98:5b:1f:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98690af062ea9b3ae5f64cf9a9fea56324c6bd97
Validity
Not Before: Jan 1 16:14:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f8eaed00c4d8c802fe2979852dbd38ddbf5c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c3:a2:35:73:aa:53:9d:9b:da:55:24:08:5a:
d1:ca:53:1a:b6:19:9f:0f:5c:c5:62:ae:31:b9:ec:
36:94:11:0d:ac:f1:e8:4c:b3:89:06:90:59:d6:57:
1f:3c:87:9d:ea:eb:f2:a6:ab:46:3c:14:0a:70:70:
c5:92:71:2f:98:43:da:83:3b:52:d1:d4:91:6d:e4:
dd:95:f2:d4:b4:1b:d3:9e:2b:68:5d:e7:cc:93:dd:
07:b8:aa:79:a1:29:8f:00:f1:50:9f:6c:6d:d5:e6:
3b:a9:e4:22:c3:cd:a0:81:df:0b:98:7e:95:4a:09:
d9:00:1c:35:86:ea:b9:f0:a1:ea:ff:48:4a:8a:fb:
2a:f6:15:b9:82:d2:72:af:33:93:10:ef:16:c4:b1:
cc:43:ef:76:f7:3e:54:b2:36:67:b9:05:6a:c5:23:
cf:45:10:a8:d4:7d:17:b5:e0:f9:cc:1e:ac:75:f3:
ad:43:86:69:5d:34:9f:12:1b:25:c8:c3:56:d4:34:
da:67:f8:95:b2:33:a5:ed:67:12:90:c5:2e:cf:67:
6f:3e:e3:bd:ce:b0:69:ea:0d:7c:dd:fb:ce:ec:41:
35:74:6b:41:e3:f0:6a:15:b4:ea:37:69:ce:4c:3d:
ca:55:9f:37:a1:a3:fa:69:48:76:f6:bd:2a:32:0f:
57:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F8:EA:ED:00:C4:D8:C8:02:FE:29:79:85:2D:BD:38:DD:BF:5C:5E
X509v3 Authority Key Identifier:
keyid:98:69:0A:F0:62:EA:9B:3A:E5:F6:4C:F9:A9:FE:A5:63:24:C6:BD:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mGkK8GLqmzrl9kz5qf6lYyTGvZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/Ffjq7QDE2MgC_il5hS29ON2_XF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/512313-afcd-4e9a-bb70-71005f7f02a8/1/mGkK8GLqmzrl9kz5qf6lYyTGvZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.12.0/22
IPv6:
2a05:4840::/29
Signature Algorithm: sha256WithRSAEncryption
9c:15:6c:de:86:ec:67:e8:9e:97:f3:1c:68:e4:b7:da:8a:5e:
a2:a4:a2:fc:3a:94:93:94:e7:25:27:f9:d6:bd:e3:e2:52:42:
6e:46:ba:a6:58:24:1a:8b:52:77:ac:38:32:a6:69:98:3e:7e:
07:c6:d2:a5:a5:ff:cb:35:a4:a3:2c:f6:46:ec:46:82:0c:b3:
95:f7:89:9f:4b:ff:98:d2:79:00:8f:cd:72:39:ff:04:de:fc:
67:37:a0:32:79:40:23:76:e5:fd:5d:ef:4c:6b:cf:71:2e:06:
d3:02:50:d9:38:e7:18:9f:24:e1:c6:6a:df:f3:bb:0d:01:73:
e3:23:90:cc:e5:8d:c4:36:50:75:77:3b:db:b6:c2:59:01:28:
59:ee:4f:b6:47:65:dc:11:5a:fb:43:ef:aa:41:5c:5d:7f:97:
f0:2d:52:ea:d7:76:d9:38:97:f3:0b:4f:09:9a:e0:8a:91:d4:
db:cd:bf:79:10:d1:fb:96:05:2d:42:89:c2:67:f8:59:88:13:
dd:07:ce:de:fd:8b:8c:78:31:3a:09:b5:84:cc:2b:66:31:b0:
b3:e3:15:73:d1:ba:c5:5d:04:e9:0c:35:25:77:4e:b3:4a:7f:
ac:22:43:b0:d6:d4:7d:09:70:22:7f:12:62:96:e2:a9:a0:23:
dd:7f:e7:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:39 2024 by rpki-client on console-fra.rpki-client.org