Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/FpJQT9rO5LR5Bv05duwZP9PXq6Y.roa
File: FpJQT9rO5LR5Bv05duwZP9PXq6Y.roa (raw, json)
Hash identifier: af1Wn44M6wii8mJMnsPckB/xA8X6vnA7h06nJnQxsGM=
Subject key identifier: 16:92:50:4F:DA:CE:E4:B4:79:06:FD:39:76:EC:19:3F:D3:D7:AB:A6
Certificate issuer: /CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Certificate serial: 01856D4AB16E17F880FF5DBD2434041FAAFC
Authority key identifier: D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/FpJQT9rO5LR5Bv05duwZP9PXq6Y.roa
Signing time: Sun 01 Jan 2023 12:24:49 +0000
ROA not before: Sun 01 Jan 2023 12:24:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50779
IP address blocks: 185.106.12.0/22 maxlen: 24
2a0c:db80::/29 maxlen: 29
2001:67c:2698::/48 maxlen: 48
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:b1:6e:17:f8:80:ff:5d:bd:24:34:04:1f:aa:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f0f4bac5f9a5022fc2dcbc4a3db4cc6b116644
Validity
Not Before: Jan 1 12:24:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1692504fdacee4b47906fd3976ec193fd3d7aba6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:4f:bd:b6:f1:82:c6:5f:ae:f2:f1:52:6b:43:
15:bd:33:0c:3b:58:e2:40:04:08:3e:23:6c:cd:2f:
b1:23:92:e9:fb:d9:4f:68:2e:9d:5b:3f:f1:62:20:
25:3a:cc:2a:6b:23:3a:33:3c:00:b0:50:93:10:9d:
05:ae:3c:66:73:f6:9a:ab:9b:94:6a:a7:a3:26:fc:
fb:d8:61:4e:ec:f1:98:08:98:ff:70:ad:a3:d6:54:
c3:22:3d:d2:c8:91:d3:2a:c2:1b:93:9e:1e:eb:f3:
90:4f:27:f3:c6:59:4d:ec:dc:f1:23:58:2a:59:ae:
f4:c4:3e:0b:eb:6b:4e:d2:70:f7:03:a9:d9:56:98:
75:0e:20:60:f5:96:01:11:59:e5:99:e8:38:21:41:
cf:bf:96:75:2b:4c:6b:2a:57:5b:f5:f8:8e:5a:7a:
06:dd:5f:a0:23:bf:b5:d0:de:99:79:9e:de:e4:b0:
e9:88:b4:10:1c:42:81:7d:d8:12:6d:5f:e7:97:15:
c5:96:49:fc:37:af:90:ff:1f:00:f2:da:d7:05:44:
4e:91:0f:60:20:eb:22:be:23:eb:c7:3e:d7:b5:76:
ff:a7:ab:60:0a:65:f1:e9:dd:4e:d3:b0:65:e0:d3:
ac:5a:6d:ee:96:ac:d3:50:38:b3:51:fe:b1:36:5c:
60:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:92:50:4F:DA:CE:E4:B4:79:06:FD:39:76:EC:19:3F:D3:D7:AB:A6
X509v3 Authority Key Identifier:
keyid:D5:F0:F4:BA:C5:F9:A5:02:2F:C2:DC:BC:4A:3D:B4:CC:6B:11:66:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fD0usX5pQIvwty8Sj20zGsRZkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/FpJQT9rO5LR5Bv05duwZP9PXq6Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/a6d572-3043-4d19-9140-992541fdebea/1/1fD0usX5pQIvwty8Sj20zGsRZkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.12.0/22
IPv6:
2001:67c:2698::/48
2a0c:db80::/29
Signature Algorithm: sha256WithRSAEncryption
26:67:d8:16:64:ef:b4:af:8e:84:f2:4c:21:1d:25:54:de:08:
4d:c8:c8:19:c5:7c:34:9c:b0:97:92:a2:63:42:2e:31:27:c6:
69:b1:cd:a2:4e:d0:ab:de:6b:bc:be:ce:84:35:15:87:15:b5:
ae:22:52:78:cf:08:e2:24:cd:8c:4b:ed:9f:f7:43:fe:9e:2d:
9f:e3:0c:f5:57:d1:20:d6:32:13:d2:a5:9f:a0:e5:bc:05:95:
b2:e8:3b:b3:c8:2c:59:9f:0b:1f:b2:eb:46:8b:cc:84:7a:f4:
03:e6:e4:db:a7:c8:54:3a:35:b8:03:a7:b1:c7:1e:98:62:0c:
6f:79:e1:ba:f9:0d:a0:b5:5c:5d:ec:79:57:6a:03:a5:1b:b4:
70:5a:cf:0c:21:09:1d:a3:d3:d3:ec:dd:33:97:ec:e8:46:fe:
64:ac:88:4a:72:c2:fb:73:4d:bf:ba:1f:ef:8b:22:f6:49:02:
c9:c8:53:63:e4:3c:f0:15:e3:87:ae:15:98:c1:aa:ed:46:ef:
3b:0b:89:7c:ee:cc:7f:47:44:94:69:25:d2:43:00:6e:33:49:
ef:19:ba:99:48:c2:6b:bd:ee:39:fb:9f:d2:89:2d:6e:0a:fa:
ec:e3:54:d4:b6:ec:db:65:3e:36:8f:16:5e:74:9a:6b:90:d1:
3d:d0:cd:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:51 2024 by rpki-client on console-fra.rpki-client.org