Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/Fi8Y6SAhuvzucqLzuMinf2gLHGY.roa
File: Fi8Y6SAhuvzucqLzuMinf2gLHGY.roa (raw, json)
Hash identifier: FUn1uh0ASoW7D0zHR2MRucxGH2MWGrzl2gPlWpVFodU=
Subject key identifier: 16:2F:18:E9:20:21:BA:FC:EE:72:A2:F3:B8:C8:A7:7F:68:0B:1C:66
Certificate issuer: /CN=621310302018a387c692146a35efd33a6ed6b1ef
Certificate serial: 0189D89DAB695ABCC98BA582AC5B3C551094
Authority key identifier: 62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/Fi8Y6SAhuvzucqLzuMinf2gLHGY.roa
Signing time: Wed 09 Aug 2023 04:45:58 +0000
ROA not before: Wed 09 Aug 2023 04:45:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 185.179.91.0/24 maxlen: 24
185.99.20.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 09 Aug 2023 08:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d8:9d:ab:69:5a:bc:c9:8b:a5:82:ac:5b:3c:55:10:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=621310302018a387c692146a35efd33a6ed6b1ef
Validity
Not Before: Aug 9 04:45:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=162f18e92021bafcee72a2f3b8c8a77f680b1c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3f:b8:01:d8:a3:e4:7d:59:9d:dc:11:78:d9:
b2:e2:74:8c:a8:49:cb:a2:cd:1e:67:03:bc:fd:11:
d6:b4:95:ae:93:70:0d:3d:2a:15:a7:a3:73:00:66:
93:22:04:9d:60:ca:20:16:53:f0:22:f9:90:d1:de:
01:02:b9:9f:83:3f:b0:70:3a:79:bc:c9:5d:ad:6e:
d3:78:8a:a2:65:6d:f7:c9:82:dd:88:17:37:20:3a:
03:a5:ef:bb:f0:f2:81:05:60:a4:59:6a:07:89:13:
20:b6:d9:3b:3b:de:b1:6b:6c:4b:e2:3b:23:5e:aa:
c5:0f:23:1a:26:32:6b:89:4e:07:59:8e:2f:6a:0c:
5a:fe:12:59:8b:23:29:07:f7:ca:24:2c:30:99:65:
25:36:f4:ee:19:85:4d:91:48:62:1c:1b:e7:4d:02:
21:85:7a:a9:db:2e:5e:aa:70:91:19:a2:15:86:b6:
21:c9:7e:96:c5:1e:fd:d1:a0:3c:b8:50:bd:94:09:
19:05:89:f7:0e:e6:e2:d7:d4:77:5c:85:01:a7:99:
d8:34:4b:e4:4a:60:ae:91:d1:09:80:72:b9:6d:46:
a8:67:75:d1:18:9d:1a:6a:3d:46:f7:83:bc:06:7c:
14:1e:b4:07:25:a7:66:38:d7:7e:51:f1:fa:ac:15:
a1:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:2F:18:E9:20:21:BA:FC:EE:72:A2:F3:B8:C8:A7:7F:68:0B:1C:66
X509v3 Authority Key Identifier:
keyid:62:13:10:30:20:18:A3:87:C6:92:14:6A:35:EF:D3:3A:6E:D6:B1:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YhMQMCAYo4fGkhRqNe_TOm7Wse8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/Fi8Y6SAhuvzucqLzuMinf2gLHGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/f58ac8-53e9-4ca6-acb2-be57d7dfa0de/1/YhMQMCAYo4fGkhRqNe_TOm7Wse8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.20.0/24
185.179.91.0/24
Signature Algorithm: sha256WithRSAEncryption
48:47:d1:be:ab:14:7e:b7:ae:67:85:9b:3d:b4:f4:59:59:b5:
8b:fc:bd:c1:55:3c:e2:05:35:a6:d0:43:e2:71:f6:84:de:c9:
7a:10:22:b9:c7:07:8e:04:62:6f:47:f1:00:5a:4b:ac:5f:16:
7e:55:f0:4a:76:8a:2c:4b:d6:2c:23:14:f5:7e:cd:bd:ed:5a:
36:f4:a4:8e:cb:34:6b:c2:c5:c3:43:b8:86:cf:71:08:bd:75:
32:e3:b3:56:a1:1f:41:01:e1:79:08:80:b9:8e:91:aa:64:b5:
09:15:9c:44:49:8c:ff:3b:fe:71:22:78:d4:09:8a:74:74:9e:
dc:81:33:ae:cb:57:92:3e:00:6f:6e:2a:dc:ab:83:48:53:88:
fb:e7:e6:b9:10:75:c0:42:fa:2a:a6:eb:98:24:88:ab:b2:2b:
82:ed:e3:50:a0:86:7b:8d:11:ca:aa:bf:45:92:9d:a8:11:70:
19:07:df:74:b1:17:7a:f0:e1:57:b5:1c:fc:9b:87:8e:a9:62:
6d:2e:d2:95:17:1e:a9:95:5a:ad:c2:16:ae:0f:a8:30:c5:1f:
63:da:bc:d8:5f:52:18:15:a7:f2:97:b8:92:b5:3d:fc:a0:f8:
0c:1c:9c:0b:2a:8f:ce:ca:d9:54:48:24:ef:ed:25:ea:88:13:
dd:79:49:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:45 2024 by rpki-client on console-fra.rpki-client.org