Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/aeMG6YoiHX2M2_b17J_uza0zfDw.roa
File: aeMG6YoiHX2M2_b17J_uza0zfDw.roa (raw, json)
Hash identifier: zcCAdYK9E47mtb7qFmQSFSFrPD2ZssB/4JTrezDS+CI=
Subject key identifier: 69:E3:06:E9:8A:22:1D:7D:8C:DB:F6:F5:EC:9F:EE:CD:AD:33:7C:3C
Certificate issuer: /CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Certificate serial: 018570399408BA75B0180E25BBF38E7862E1
Authority key identifier: 2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/aeMG6YoiHX2M2_b17J_uza0zfDw.roa
Signing time: Mon 02 Jan 2023 02:04:59 +0000
ROA not before: Mon 02 Jan 2023 02:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207564
IP address blocks: 185.115.247.0/24 maxlen: 24
2001:4da8:c010::/44 maxlen: 48
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:32:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:39:94:08:ba:75:b0:18:0e:25:bb:f3:8e:78:62:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e7d6f55a13b001e7401f40eaaaeb82f67bd422e
Validity
Not Before: Jan 2 02:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=69e306e98a221d7d8cdbf6f5ec9feecdad337c3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:cc:58:8c:68:ea:32:06:68:de:6b:e4:a9:57:
71:b0:b9:fb:11:a7:30:30:3f:1e:6a:38:65:1c:88:
97:54:cd:5a:79:3f:65:79:45:19:a3:ef:73:1e:e7:
22:e1:46:c8:ca:1f:8f:a8:d7:47:c4:4f:86:51:ba:
cb:14:77:88:bb:46:d4:d8:6c:5c:e9:8d:b6:a4:dd:
31:4c:12:f2:a0:c4:69:af:cc:e1:49:2d:13:31:fd:
45:eb:88:eb:ad:51:b6:84:77:ac:d1:89:ed:05:49:
d9:25:e8:71:20:96:5b:88:ec:3c:52:e1:51:ea:2d:
19:cb:d7:34:07:2e:fc:ca:fe:13:17:58:df:9b:9b:
70:3c:5f:59:15:48:81:c0:6d:9b:48:68:23:e2:60:
ab:35:3b:28:1b:46:2d:89:a0:fc:4f:7b:ad:70:41:
19:95:e9:60:c5:77:0b:e8:5a:3e:8a:c0:26:14:63:
ab:2c:51:05:c1:b9:d9:fe:3f:d0:6c:cf:5d:dc:71:
06:50:7c:e8:ae:6d:e8:12:9e:5b:13:fe:bc:cf:9f:
f0:76:82:48:12:b9:b3:57:a2:c4:84:3d:e6:de:7e:
f1:5e:1d:ca:0b:ac:08:79:22:d9:17:3c:72:a0:82:
d1:84:b2:e2:a0:8a:3f:38:44:cb:b7:e7:58:0c:89:
0a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:E3:06:E9:8A:22:1D:7D:8C:DB:F6:F5:EC:9F:EE:CD:AD:33:7C:3C
X509v3 Authority Key Identifier:
keyid:2E:7D:6F:55:A1:3B:00:1E:74:01:F4:0E:AA:AE:B8:2F:67:BD:42:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ln1vVaE7AB50AfQOqq64L2e9Qi4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/aeMG6YoiHX2M2_b17J_uza0zfDw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/fcfd8c-8871-4d6a-b4a5-d65b654c99c5/1/Ln1vVaE7AB50AfQOqq64L2e9Qi4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.115.247.0/24
IPv6:
2001:4da8:c010::/44
Signature Algorithm: sha256WithRSAEncryption
d0:02:58:40:0b:63:6f:df:79:8c:99:73:f8:4a:14:bc:5a:6a:
73:9b:02:0e:28:5b:64:0c:22:07:8e:3d:e4:fd:ba:55:de:7d:
63:a4:15:13:9f:24:fe:5a:74:85:a0:b2:1c:98:5f:70:ff:a4:
67:cc:f0:fc:8b:bc:10:bf:73:b1:af:98:c8:f6:bf:9b:e3:94:
b4:16:ab:4d:ff:86:3b:84:a8:ce:14:5b:fe:77:49:bd:ed:e5:
14:fa:22:03:df:33:90:42:39:19:f3:03:58:c5:1e:95:7d:bb:
ea:00:20:4f:9b:09:33:77:3b:ff:50:f2:fa:fb:55:51:9c:f5:
1a:a9:78:02:ef:ee:80:43:9a:ca:fc:cb:53:b8:47:64:41:0e:
10:ec:c4:ae:4f:00:16:eb:17:7f:1c:ce:30:c5:75:7d:62:ca:
de:5a:d5:f2:05:a2:b4:23:2d:b7:69:fb:8b:73:ea:d9:b7:b3:
dc:26:bc:a2:f7:5b:85:df:66:9e:22:aa:61:10:26:c2:ee:5e:
21:1a:e4:6e:e1:b2:0e:67:02:18:93:c4:fd:8b:3e:6c:31:48:
39:df:3c:10:b7:b9:d9:ae:27:cf:53:70:4d:96:de:15:40:40:
a9:e9:4d:7d:23:d3:8d:16:b7:22:51:41:60:11:eb:42:64:9f:
55:48:47:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:16:40 2024 by rpki-client on console-fra.rpki-client.org