Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fb8ocTqIGyAxv-XCaiUbuQbHxcE.roa
File: fb8ocTqIGyAxv-XCaiUbuQbHxcE.roa (raw, json)
Hash identifier: NwLq8tLG2wowz/OMqeDUJPoWnv3zmBM2Oe6z3Ljm/AQ=
Subject key identifier: 7D:BF:28:71:3A:88:1B:20:31:BF:E5:C2:6A:25:1B:B9:06:C7:C5:C1
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 018FF14E6F4FF173C7BAA68DB1F5AFDA59AE
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fb8ocTqIGyAxv-XCaiUbuQbHxcE.roa
Signing time: Fri 07 Jun 2024 06:06:40 +0000
ROA not before: Fri 07 Jun 2024 06:06:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 185.131.207.0/24 maxlen: 24
185.148.70.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 11 Jun 2024 07:35:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:f1:4e:6f:4f:f1:73:c7:ba:a6:8d:b1:f5:af:da:59:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Jun 7 06:06:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dbf28713a881b2031bfe5c26a251bb906c7c5c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b4:40:89:01:2e:b3:b6:07:64:80:59:be:a7:
50:80:04:3e:9f:8e:ce:7d:0c:a2:56:cf:85:e0:33:
cf:e2:6b:35:ce:bc:1f:97:59:b4:31:cd:19:1c:80:
9f:61:fa:77:74:cc:3f:80:5f:67:a9:ff:08:bc:ae:
66:97:59:77:5d:b1:3f:ae:3c:07:7d:15:60:6b:d8:
c4:dc:e4:d4:47:10:01:86:4d:be:b7:c4:a4:8f:04:
48:3e:8c:29:a8:06:78:c9:0d:f5:f6:b5:43:1e:16:
07:fe:3d:89:3a:4e:44:4a:ab:3b:98:96:39:a8:2d:
16:f5:b5:d6:3c:6d:ad:2e:b9:b8:57:05:38:0a:86:
81:ed:56:14:7c:43:71:bb:c6:e7:eb:87:3e:44:c9:
5f:db:d2:3e:9b:c3:aa:30:df:6f:df:99:5a:07:7c:
60:ba:97:7e:f8:dc:cf:83:73:5a:8a:62:a3:ee:47:
3f:61:d8:4c:af:aa:3e:7b:3e:9e:9b:06:ce:0d:18:
65:df:51:c7:f8:9f:0d:58:16:f5:4f:f7:94:93:95:
dc:ac:dc:58:0f:d9:33:52:fe:cf:be:46:66:18:2d:
d3:b0:77:3b:7c:5a:07:c1:3a:91:8b:e0:88:6d:74:
9b:5d:ea:bb:3e:49:af:dd:af:c5:f2:7b:bd:56:02:
df:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:BF:28:71:3A:88:1B:20:31:BF:E5:C2:6A:25:1B:B9:06:C7:C5:C1
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/fb8ocTqIGyAxv-XCaiUbuQbHxcE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.131.207.0/24
185.148.70.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:79:52:7a:dd:a5:73:d0:cf:6b:db:3d:13:d3:c4:24:b3:d6:
0a:62:f9:06:f1:e5:d9:cb:c9:b5:36:cb:2e:4a:ad:e6:84:54:
f0:9f:dd:e2:6e:0f:95:94:04:54:cf:83:63:68:8a:e2:7c:da:
da:66:72:b1:5e:95:ef:d9:a6:f8:84:c6:71:50:7c:01:bf:9b:
6a:79:87:a6:71:2f:b4:0d:02:e0:65:14:9e:22:90:3a:e3:d5:
e9:e2:3a:6f:f2:3a:27:b3:ed:b2:81:db:96:e6:90:08:54:34:
fe:32:98:87:bc:78:0f:d1:83:92:7c:0d:a0:98:e4:9b:94:4b:
23:e9:30:59:c9:75:e2:9e:19:71:b9:b7:d4:a7:47:59:08:57:
71:cf:a3:78:30:82:d5:0b:4e:d7:e2:0e:3e:d0:11:e0:9b:8e:
1e:a6:63:8a:36:64:ea:d5:bf:81:bc:65:3c:83:8f:7a:a7:58:
7c:d3:48:93:76:a6:9e:e3:01:40:0f:37:d3:77:82:c3:d5:6c:
a0:23:77:fc:b1:d5:33:0a:4f:9d:8d:9b:3a:f7:c9:3c:b8:62:
66:4f:de:bd:d0:7f:5e:cd:ee:9c:01:56:38:a0:72:76:b4:57:
b6:92:bc:dc:43:81:01:40:69:23:b6:78:b1:17:60:17:00:73:
a7:c7:9f:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 11 10:55:57 2024 by rpki-client on console-fra.rpki-client.org