Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/FRUIiCTGcSaY9JFdT89BUWhI9rE.roa
File: FRUIiCTGcSaY9JFdT89BUWhI9rE.roa (raw, json)
Hash identifier: JTe33u0m4nJEPfgcoARXb09UMHAykxZESNUbiqThHtM=
Subject key identifier: 15:15:08:88:24:C6:71:26:98:F4:91:5D:4F:CF:41:51:68:48:F6:B1
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 0185725598BDB475A8B1969D1F46F33B6AF0
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/FRUIiCTGcSaY9JFdT89BUWhI9rE.roa
Signing time: Mon 02 Jan 2023 11:54:50 +0000
ROA not before: Mon 02 Jan 2023 11:54:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29802
IP address blocks: 185.242.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 12:34:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:55:98:bd:b4:75:a8:b1:96:9d:1f:46:f3:3b:6a:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jan 2 11:54:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1515088824c6712698f4915d4fcf41516848f6b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:3b:a6:6d:dc:46:3f:1b:cb:29:ee:81:18:c9:
44:cb:e1:54:cf:2a:eb:2b:6a:d0:9e:66:4d:16:59:
50:5b:93:a2:ef:47:d9:f3:0c:2c:b1:4a:84:95:49:
0d:1b:ba:dd:cd:1d:c3:98:c1:49:9c:91:82:54:11:
15:53:af:fa:64:53:7b:b7:45:4a:a7:b6:4b:6d:ae:
ad:99:8f:09:6a:99:91:08:9c:84:c2:1a:98:60:ee:
83:d2:99:06:3c:3e:73:08:de:36:9b:77:58:01:16:
6a:ba:7e:13:fb:72:24:10:b0:27:ac:ae:35:3d:b4:
2f:aa:b0:12:b0:7f:e6:a1:12:25:43:13:17:19:89:
7f:d8:1f:cb:ab:db:53:5f:55:d2:72:2f:3e:70:bc:
b3:48:aa:fd:93:a2:ce:9c:b3:20:1b:0c:9a:ea:4c:
47:ce:be:57:6d:a4:3a:6c:48:53:fb:58:c4:23:91:
b7:46:67:ea:eb:7a:9d:c9:4c:54:11:4a:54:6b:0d:
39:91:93:d7:89:f4:c1:99:72:c0:57:93:6d:f2:ed:
3a:96:ab:7b:7f:b1:2d:96:7b:61:2d:6c:50:0f:60:
c1:6f:94:2c:55:de:44:fc:24:9a:e7:0d:ed:4e:04:
9e:c9:40:10:a4:04:35:2a:b0:e4:f8:c7:96:52:10:
5f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:15:08:88:24:C6:71:26:98:F4:91:5D:4F:CF:41:51:68:48:F6:B1
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/FRUIiCTGcSaY9JFdT89BUWhI9rE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.242.80.0/22
Signature Algorithm: sha256WithRSAEncryption
17:db:07:a6:fa:37:da:fc:68:81:0d:31:ea:38:64:ae:98:50:
7b:9e:ee:99:85:54:c9:66:1d:04:ad:71:c5:f0:f4:f3:b7:8c:
66:5a:fd:dc:74:28:67:9d:0c:dd:ad:1c:2b:e8:a2:20:7a:15:
83:2c:79:98:b5:3c:96:c7:ec:4d:52:3f:dd:60:06:20:9c:57:
b2:43:7a:9c:8b:a1:f8:d9:3a:5b:36:1e:ba:3e:e8:85:1a:4b:
3c:6b:e4:d4:1a:8e:be:c8:92:91:dc:65:87:db:a9:64:96:52:
ce:84:c0:2b:7a:13:41:26:8e:05:bd:a1:d0:71:49:50:ee:ba:
4d:a1:f3:75:ce:29:88:c1:5e:b2:ca:43:40:58:9c:16:39:6a:
c3:1e:80:d2:20:d1:ef:55:1c:c3:f3:fc:90:f6:bf:d6:ac:bb:
cb:12:1a:dd:66:c6:89:d1:7e:b7:1e:df:87:d4:3d:f2:47:ae:
b9:e9:cb:be:c6:85:7e:88:bb:22:bc:ba:36:a8:54:b2:91:b2:
ca:8e:2f:ee:58:b7:d0:a2:43:8d:9f:70:ac:e4:98:81:19:55:
03:79:5e:c6:75:96:9d:ec:25:f5:ea:08:35:8d:d8:67:c3:25:
c8:69:93:c7:12:8d:cc:de:f1:c2:1f:9a:3d:d6:a6:76:0e:fa:
5c:b1:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:54:42 2024 by rpki-client on console-ams.rpki-client.org