Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8hmJC_4qanDIAbcBh5UFR9tV5Y.roa
File: f8hmJC_4qanDIAbcBh5UFR9tV5Y.roa (raw, json)
Hash identifier: zAodYr5i12nhMRSQP4oigegr2nsUASwDvZPZCKc+iaw=
Subject key identifier: 7F:C8:66:24:2F:F8:A9:A9:C3:20:06:DC:06:1E:54:15:1F:6D:57:96
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 0185BFC6DFD3331922ED6C395CFF222A0FA3
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8hmJC_4qanDIAbcBh5UFR9tV5Y.roa
Signing time: Tue 17 Jan 2023 12:49:19 +0000
ROA not before: Tue 17 Jan 2023 12:49:19 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39368
IP address blocks: 185.218.139.0/24 maxlen: 24
87.121.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 20 Feb 2023 14:52:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:bf:c6:df:d3:33:19:22:ed:6c:39:5c:ff:22:2a:0f:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 17 12:49:19 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7fc866242ff8a9a9c32006dc061e54151f6d5796
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:30:93:75:a7:6f:06:26:3e:f3:43:dd:45:41:
93:24:90:da:da:f3:75:36:60:e5:7c:1e:56:78:cb:
36:9d:69:8b:aa:2e:d3:60:c7:71:e0:a1:cc:b0:c4:
c9:75:1d:1d:5a:85:c0:e4:e3:47:a3:6a:81:e1:96:
cd:1c:2a:64:96:02:b6:73:9a:71:c0:60:61:db:4f:
d0:b3:ad:f0:37:73:99:80:96:0e:63:46:18:9d:49:
f9:82:2f:c0:2a:64:49:9d:75:36:e1:8c:56:42:13:
07:dd:4a:3c:a0:97:4f:b9:d0:e6:6f:c5:ab:87:77:
41:80:f6:73:5e:df:e3:e5:c9:e6:d4:60:ea:04:29:
5c:58:10:43:9c:ca:f4:b6:ac:26:a5:15:12:93:1b:
19:18:d5:e8:e3:f5:32:53:d8:04:97:2e:be:fa:ee:
2c:a0:bc:65:1d:b9:59:a9:7f:d2:5c:2c:af:96:00:
6b:03:23:ec:2f:a1:45:77:1b:71:fc:78:23:d1:79:
55:71:d4:2c:6c:af:10:47:24:ee:3e:73:5a:8c:a3:
22:8a:34:3b:61:c2:40:8c:3f:e5:8a:60:b0:fe:3d:
81:9b:93:15:46:c6:cb:7a:4d:bc:6b:45:9d:5d:1b:
54:08:76:bd:11:c1:93:f1:87:61:40:ab:25:3e:0a:
f6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C8:66:24:2F:F8:A9:A9:C3:20:06:DC:06:1E:54:15:1F:6D:57:96
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/f8hmJC_4qanDIAbcBh5UFR9tV5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.221.0/24
185.218.139.0/24
Signature Algorithm: sha256WithRSAEncryption
81:33:fd:36:0a:1a:d1:9c:90:a5:fd:31:20:80:99:3e:cd:fd:
5b:ab:45:98:8f:b1:ee:a0:f2:ce:70:0d:ad:e6:1b:b1:2d:7a:
12:c6:31:44:7b:d5:b4:e7:02:ce:f2:9d:4e:8a:34:46:ae:4d:
9f:94:cc:5a:83:3a:69:2e:05:5f:cb:d7:c8:09:db:a2:b6:fb:
23:bd:d3:b4:56:52:7a:c4:1e:f4:c2:ba:a0:6f:26:16:24:f9:
cf:de:eb:69:de:c3:e0:a1:aa:92:2d:29:22:4f:12:61:2d:c1:
96:1e:fb:3c:bf:5e:89:ab:07:06:b6:45:24:a5:d9:19:a6:73:
c4:ba:c5:6e:ef:7d:21:f7:7c:8c:42:36:2c:62:6d:9a:8f:34:
13:c8:c7:1b:2b:bb:db:ea:a1:ba:46:8d:d8:56:b1:57:e0:f9:
3c:71:18:c5:57:04:12:1b:1d:84:d9:b9:93:3a:22:f7:32:4f:
9a:74:2b:19:1a:da:49:ca:ad:16:15:6d:1b:7a:9e:79:a3:f8:
de:d3:5d:1d:a8:19:33:aa:ef:21:ec:ff:3d:df:05:54:4a:6a:
6e:49:71:ed:33:1b:92:55:10:75:c6:05:01:9d:6a:ee:97:1d:
d0:06:91:9d:d2:4e:2a:36:da:ca:ab:04:bc:e4:25:d7:38:6b:
a2:f6:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:50:39 2024 by rpki-client on console-ams.rpki-client.org