Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/FJ8pXEXllrygzX9iAFRq7ZQbyXI.roa
File: FJ8pXEXllrygzX9iAFRq7ZQbyXI.roa (raw, json)
Hash identifier: +6So6slwfrSMHasCXhlRn+jweLgzBj6MMGDey14HUPs=
Subject key identifier: 14:9F:29:5C:45:E5:96:BC:A0:CD:7F:62:00:54:6A:ED:94:1B:C9:72
Certificate issuer: /CN=b79e5d4f835ea88d76b60256e0037547cd968279
Certificate serial: 018E1476000D4C4319CD15F0E190E91B9E20
Authority key identifier: B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/FJ8pXEXllrygzX9iAFRq7ZQbyXI.roa
Signing time: Wed 06 Mar 2024 15:51:01 +0000
ROA not before: Wed 06 Mar 2024 15:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 43350
IP address blocks: 185.56.20.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 11:49:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:14:76:00:0d:4c:43:19:cd:15:f0:e1:90:e9:1b:9e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b79e5d4f835ea88d76b60256e0037547cd968279
Validity
Not Before: Mar 6 15:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=149f295c45e596bca0cd7f6200546aed941bc972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5e:d0:dd:74:57:54:16:0c:2f:ca:56:8d:ef:
d3:6f:77:cf:cb:4b:6d:2c:52:22:76:c0:3f:d8:4c:
5d:dd:14:4e:52:ea:70:4d:57:84:41:72:11:5f:e0:
bb:2b:3e:ff:41:fe:d0:5e:f3:e7:67:87:c7:2b:3f:
01:42:6e:e0:d1:f5:d0:5a:3f:20:02:e7:f9:62:36:
fa:0b:c9:01:97:e5:82:89:06:40:32:9e:95:55:e4:
45:a0:b2:0d:d5:bd:05:6d:dc:2e:22:08:65:d1:59:
d2:35:99:25:bd:66:05:74:cf:7e:2e:58:7a:24:14:
ac:2a:84:3d:ed:74:04:6d:64:a8:d3:10:a9:38:78:
ce:d4:9b:b3:09:59:ad:c7:11:78:98:19:cf:cc:be:
73:7f:ce:e4:af:9d:9f:9d:11:1b:13:89:70:da:f8:
a0:bf:41:ec:53:3d:85:a5:54:f7:f4:9c:d0:84:c0:
62:53:d7:05:61:fd:f9:86:71:f5:5c:f4:09:7f:88:
40:a0:4b:4e:55:bf:14:ae:4b:bb:10:a9:9e:4b:a4:
76:67:67:46:d1:3c:cf:8d:b6:c1:c3:7d:31:5d:bb:
15:34:19:95:1d:83:7b:ac:0d:6d:6f:3d:1d:3d:49:
03:40:a5:22:23:1b:17:b7:b9:e5:ce:0b:d8:9a:26:
33:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:9F:29:5C:45:E5:96:BC:A0:CD:7F:62:00:54:6A:ED:94:1B:C9:72
X509v3 Authority Key Identifier:
keyid:B7:9E:5D:4F:83:5E:A8:8D:76:B6:02:56:E0:03:75:47:CD:96:82:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t55dT4NeqI12tgJW4AN1R82Wgnk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/FJ8pXEXllrygzX9iAFRq7ZQbyXI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/e3694b-77f9-42b0-b5a3-9b7d49adedb3/1/t55dT4NeqI12tgJW4AN1R82Wgnk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.20.0/22
Signature Algorithm: sha256WithRSAEncryption
67:0d:1d:6f:8d:97:6e:0e:c8:b9:b9:46:0b:0b:d4:58:ca:b2:
01:d4:7a:d5:bf:6b:35:94:2a:56:f2:21:89:03:58:cd:32:75:
71:bd:b3:aa:0a:c8:c8:18:4f:22:0c:3f:9a:9d:b7:de:2e:ea:
b5:33:8b:9f:df:d7:fb:a2:d4:d1:cc:9b:b0:c8:48:6d:ff:89:
7c:b1:33:11:b7:e6:1a:63:64:de:24:4b:80:3f:6a:43:88:cc:
09:f6:6f:5d:99:99:11:79:57:ce:5b:ea:42:6a:ee:a8:bd:79:
06:eb:e4:75:12:87:21:c2:0a:7d:ce:4b:89:de:74:fe:cb:3a:
36:ca:92:91:b0:3c:3b:8d:a7:0d:b8:d4:79:97:22:ab:c7:c7:
49:5b:eb:10:c3:51:e9:3d:5e:c8:da:2d:ba:11:1f:d0:df:33:
c5:f3:2c:62:98:70:8d:a4:34:70:5f:50:d9:4b:aa:d4:bc:7d:
8e:5b:da:d7:a8:1c:e9:ba:44:a3:2c:5a:cb:f1:cc:ac:bf:3b:
98:8a:18:06:ea:ce:62:d0:9d:26:9c:95:18:f4:cc:b6:16:5d:
72:fd:12:56:95:13:04:96:1f:d4:2f:48:7f:1a:01:5d:23:e3:
05:15:d4:40:e0:31:81:85:7c:15:2b:f2:2f:22:11:97:2a:79:
bb:6b:c3:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:27:14 2025 by rpki-client