Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/FZn7lMenBikZp8DHoGJyAtNX6XU.roa
File: FZn7lMenBikZp8DHoGJyAtNX6XU.roa (raw, json)
Hash identifier: xddHgsvNM/++X3nwncvcTnHMT1BCRZsBEF8XHbhon7A=
Subject key identifier: 15:99:FB:94:C7:A7:06:29:19:A7:C0:C7:A0:62:72:02:D3:57:E9:75
Certificate issuer: /CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Certificate serial: 018D9E45F8F052DBCD3647DE875CB624C7C1
Authority key identifier: F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/FZn7lMenBikZp8DHoGJyAtNX6XU.roa
Signing time: Mon 12 Feb 2024 17:03:22 +0000
ROA not before: Mon 12 Feb 2024 17:03:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 4224
IP address blocks: 185.220.103.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9e:45:f8:f0:52:db:cd:36:47:de:87:5c:b6:24:c7:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f505578215acee73c17fa30d0295e0d8dd7be89d
Validity
Not Before: Feb 12 17:03:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1599fb94c7a7062919a7c0c7a0627202d357e975
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:22:0f:55:14:de:41:fd:38:5f:97:d6:87:80:
7a:ce:b2:ad:e2:7c:88:39:85:84:4c:ca:fe:82:c1:
bf:12:bf:79:e6:4d:f3:26:46:ac:ef:ae:bd:d3:13:
6e:f2:7a:cf:dd:a9:78:c4:0b:9b:68:33:13:69:47:
6f:c3:cb:4b:f2:a2:69:5c:93:99:27:27:88:41:3d:
83:11:f5:be:66:06:85:ac:9a:cf:9b:1c:3d:c7:2f:
2e:84:24:2a:40:63:a3:af:a9:71:4e:0f:3d:84:80:
77:c8:5c:6e:98:b3:07:5d:3b:33:df:32:4b:ae:24:
df:16:eb:3d:3c:16:a7:66:c4:b6:e1:ba:a8:a0:d9:
4a:39:20:3c:dd:73:a8:fb:91:49:5e:33:a9:c8:03:
43:0b:60:02:e1:95:3e:53:4b:20:35:ed:c7:6a:2c:
02:ea:b1:8b:47:cb:6c:d5:51:b6:37:f3:24:9a:37:
2f:0e:92:67:70:e6:36:17:70:be:f2:90:be:d0:f7:
5b:38:14:45:86:5d:d8:79:11:68:2e:a8:83:7d:ef:
2c:ef:94:22:a1:83:d3:b6:40:69:6b:d2:95:6d:95:
85:77:02:c7:4b:16:90:58:f4:2d:18:59:44:dc:c4:
29:c7:5c:3a:1a:85:4c:56:67:de:a6:bf:fc:b7:2f:
20:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:99:FB:94:C7:A7:06:29:19:A7:C0:C7:A0:62:72:02:D3:57:E9:75
X509v3 Authority Key Identifier:
keyid:F5:05:57:82:15:AC:EE:73:C1:7F:A3:0D:02:95:E0:D8:DD:7B:E8:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QVXghWs7nPBf6MNApXg2N176J0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/FZn7lMenBikZp8DHoGJyAtNX6XU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/49e974-d724-4caf-9a04-f0c9d6417ee7/1/9QVXghWs7nPBf6MNApXg2N176J0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.103.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:36:19:a3:c0:1e:a9:3e:6a:89:4e:4a:bd:17:62:1c:3c:2e:
f8:6e:be:2c:6e:97:52:b5:9a:08:ba:89:bc:fc:60:a8:e6:ab:
59:79:62:6c:af:02:b3:da:cb:12:94:fe:d3:67:8e:32:70:6f:
43:10:4a:34:12:f0:e6:25:8b:49:f2:60:13:e9:10:8c:37:39:
04:68:0f:66:d1:e0:05:56:c5:a6:c1:56:11:a8:3b:c8:71:20:
30:c5:a4:d7:c1:76:22:16:b9:f0:40:84:2b:1e:eb:97:ac:bc:
eb:d6:66:5e:91:1e:24:49:e8:0a:21:c8:41:8f:4b:ac:b5:d2:
34:66:30:8d:2f:5a:38:a2:94:67:3b:fd:02:56:3c:2e:e4:cd:
bc:d5:4f:8a:7d:4e:80:0a:40:1c:cb:8d:d6:40:02:05:1d:ad:
86:d4:c1:d5:78:7c:51:ee:9e:e5:f1:88:b2:b8:b3:92:8e:25:
31:d3:f7:ec:1b:01:3f:bd:3e:d1:1f:3e:e3:52:87:02:4a:0e:
8b:20:95:ec:09:a1:20:99:e3:6a:b2:db:e7:0c:ca:0d:e4:40:
09:16:70:0e:61:93:b4:0a:1d:af:60:19:9a:40:5f:65:13:82:
fd:39:4b:42:50:66:f0:8d:9a:51:5a:3c:cb:78:a6:18:a2:e4:
3c:12:90:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:21 2025 by rpki-client