Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/M2b6jaHZpvOkEFAqgnDlJ9tFIF4.roa
File: M2b6jaHZpvOkEFAqgnDlJ9tFIF4.roa (raw, json)
Hash identifier: U8G4Gsf5TC/E/ZxKQmYOiKjoPK3B7+Pi8a1aqjqMmP4=
Subject key identifier: 33:66:FA:8D:A1:D9:A6:F3:A4:10:50:2A:82:70:E5:27:DB:45:20:5E
Certificate issuer: /CN=4b48cf146b4c73d274096d705708d24b729329f8
Certificate serial: 018CC3B706514AECE962B5FDDC42A4A15F53
Authority key identifier: 4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/M2b6jaHZpvOkEFAqgnDlJ9tFIF4.roa
Signing time: Mon 01 Jan 2024 06:30:01 +0000
ROA not before: Mon 01 Jan 2024 06:30:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12989
IP address blocks: 85.12.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 01 Feb 2024 11:34:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:b7:06:51:4a:ec:e9:62:b5:fd:dc:42:a4:a1:5f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b48cf146b4c73d274096d705708d24b729329f8
Validity
Not Before: Jan 1 06:30:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=3366fa8da1d9a6f3a410502a8270e527db45205e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:9b:30:cd:f3:56:11:63:ef:02:bf:d7:b8:4e:
13:fc:c8:5b:cc:c3:8e:9d:c2:fd:18:a8:94:3b:ef:
7a:c3:9f:51:ba:4f:56:7a:f4:33:90:3a:94:d5:bd:
78:29:14:de:62:7a:9c:d7:f3:f1:48:b8:15:fa:66:
8f:83:38:a4:1c:7a:c0:36:5b:ba:f1:69:33:36:13:
19:c1:a1:ea:1b:0e:61:ac:b4:fb:a5:22:fb:b6:60:
66:74:a9:3d:de:9f:19:45:85:1f:24:6f:9d:db:cd:
a4:70:8a:06:06:fe:fa:88:77:04:ee:73:09:7e:30:
42:88:67:25:52:31:b9:8c:d7:66:da:dc:85:63:2d:
54:81:9a:e5:f4:d0:1d:75:c6:f7:c5:b1:e1:2c:69:
db:a9:30:20:fa:64:90:88:e7:75:ec:8b:a1:85:c3:
4d:a8:3a:4e:5b:29:19:ed:2f:ed:9b:3a:59:6b:4b:
f5:cb:67:51:ca:0f:76:32:0e:43:68:fc:13:c8:91:
9d:d8:7c:aa:09:c4:66:3c:e0:95:ff:2f:f0:b6:6c:
2a:5e:3e:17:aa:53:2c:99:fb:1b:59:56:0e:ce:cf:
33:8c:91:72:f8:1c:90:2c:99:33:00:db:e9:5a:42:
1c:5a:28:4f:2c:62:4b:8e:c9:e2:70:0e:f0:15:ac:
cd:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:66:FA:8D:A1:D9:A6:F3:A4:10:50:2A:82:70:E5:27:DB:45:20:5E
X509v3 Authority Key Identifier:
keyid:4B:48:CF:14:6B:4C:73:D2:74:09:6D:70:57:08:D2:4B:72:93:29:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S0jPFGtMc9J0CW1wVwjSS3KTKfg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/M2b6jaHZpvOkEFAqgnDlJ9tFIF4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/3bbb52-393e-4762-a70c-64a6a05b9905/1/S0jPFGtMc9J0CW1wVwjSS3KTKfg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.12.1.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:82:db:13:a8:59:76:aa:c6:f6:21:c1:86:93:84:0d:86:f8:
de:30:b6:b6:e7:9e:c9:da:9e:c9:98:59:3b:d1:2e:4b:91:c3:
b3:4d:56:96:b7:ad:06:e2:2c:9d:9f:7e:72:84:9f:6a:d0:f1:
9e:1a:eb:e5:17:78:55:a2:39:a1:48:37:6e:64:7e:ea:99:da:
d5:34:95:73:84:1b:90:32:79:dd:24:52:8e:ec:eb:2c:a1:7c:
04:fd:c6:b5:70:90:46:13:dd:58:68:57:7e:6c:f1:b0:e7:68:
c8:0d:64:de:b8:ec:14:8a:b7:c1:36:39:0a:00:ed:63:89:2b:
92:8f:e7:93:d8:fd:83:91:29:5d:01:48:81:1a:1c:03:5a:6e:
31:a0:3d:eb:9c:e3:ee:4a:cb:14:68:56:17:78:0d:bf:be:3b:
7e:75:d2:58:6e:26:55:b5:0e:74:50:6a:94:39:eb:97:e7:4b:
c3:9a:51:a9:fc:96:bb:50:3f:e8:aa:59:b7:af:e8:d4:f1:f4:
c1:6c:39:21:af:1e:2b:63:92:4f:7a:41:a2:5b:c0:5d:aa:26:
de:97:4c:a3:08:2d:e2:cf:02:26:42:be:0d:0c:62:50:20:45:
fd:79:02:7e:4f:54:a1:f4:40:f7:18:1d:0c:a5:f1:25:d8:9b:
2e:02:1e:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:22:48 2024 by rpki-client on console-fra.rpki-client.org