Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/FRaCZlMIKtulP9YO1mJBFH4YoBE.roa
File: FRaCZlMIKtulP9YO1mJBFH4YoBE.roa (raw, json)
Hash identifier: eVSmnFxTUR4BUWg6tFKvCVeAQ/3lfjgf8CKKVIlf+Y4=
Subject key identifier: 15:16:82:66:53:08:2A:DB:A5:3F:D6:0E:D6:62:41:14:7E:18:A0:11
Certificate issuer: /CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Certificate serial: 01857102C8E1DED15F597B0CA1614F2DA1B4
Authority key identifier: 6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/FRaCZlMIKtulP9YO1mJBFH4YoBE.roa
Signing time: Mon 02 Jan 2023 05:44:45 +0000
ROA not before: Mon 02 Jan 2023 05:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57119
IP address blocks: 185.212.22.0/24 maxlen: 24
185.212.21.0/24 maxlen: 24
185.212.20.0/22 maxlen: 22
185.212.20.0/24 maxlen: 24
185.212.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:02:c8:e1:de:d1:5f:59:7b:0c:a1:61:4f:2d:a1:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6dea9f0ff7696e097367465de34b4ebd01b5d72a
Validity
Not Before: Jan 2 05:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1516826653082adba53fd60ed66241147e18a011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:c3:4b:ae:fe:d5:e4:c3:bd:24:97:f5:8e:9f:
b2:2b:17:68:7b:37:02:2a:84:1c:e7:e2:6e:68:91:
2a:bf:2f:a8:1a:33:8b:ed:c3:4c:ae:cb:3d:47:ad:
f5:28:b9:85:b8:bd:46:e9:de:f0:c4:02:d5:77:d3:
1d:e4:63:21:5e:1a:b6:3c:48:fb:03:b4:4b:b1:af:
c4:d5:9f:71:93:19:10:13:08:67:fe:c2:96:49:40:
66:1d:5d:9d:36:0a:f1:65:f6:22:ee:f5:00:80:26:
77:52:2d:75:31:55:f7:c9:6e:70:24:52:6d:73:65:
32:44:ae:f1:ca:02:c0:cb:a8:e2:fd:8c:46:e5:b7:
e7:c0:d9:ac:a9:dd:98:71:6b:28:e8:0f:45:f8:ed:
ff:73:63:fc:be:45:3e:87:5e:0b:91:9c:c0:65:61:
d4:40:c2:fd:87:55:e6:d0:e8:02:47:55:d1:ec:fe:
72:43:89:cf:8d:78:01:57:21:ea:36:52:d3:44:85:
6e:67:d5:7f:ce:db:50:01:17:16:44:69:09:20:80:
26:50:14:44:27:c9:a7:63:d5:0f:0b:b6:57:82:58:
ce:d8:a9:c1:0f:b0:b3:62:9d:57:4d:6e:3c:a5:49:
09:6d:62:b4:ba:f4:6d:83:05:95:99:59:f7:55:58:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:16:82:66:53:08:2A:DB:A5:3F:D6:0E:D6:62:41:14:7E:18:A0:11
X509v3 Authority Key Identifier:
keyid:6D:EA:9F:0F:F7:69:6E:09:73:67:46:5D:E3:4B:4E:BD:01:B5:D7:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/beqfD_dpbglzZ0Zd40tOvQG11yo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/FRaCZlMIKtulP9YO1mJBFH4YoBE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/6fe1eb-3a1b-44ee-b8e2-1a9abab24dc9/1/beqfD_dpbglzZ0Zd40tOvQG11yo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.20.0/22
Signature Algorithm: sha256WithRSAEncryption
a1:04:74:ad:ce:71:73:ef:d9:6d:50:01:5f:1c:b9:33:bc:2e:
b7:a6:ae:06:f5:ad:f1:6d:93:fc:db:72:f2:15:cf:4c:10:af:
55:ac:05:27:39:2a:e5:59:8d:5e:6f:96:fe:84:93:b4:9c:69:
53:cb:07:ed:e1:9e:63:e4:25:c7:d2:a3:09:ee:c0:bf:45:06:
1e:6d:36:97:f7:68:ee:c7:aa:71:1f:ba:eb:06:6f:b6:10:55:
0b:40:60:66:44:8f:38:29:b5:01:2c:12:ce:fa:0e:6c:5f:91:
6c:d8:4b:19:3f:c2:92:66:fb:85:71:4d:dc:f3:2f:7e:1d:30:
ee:13:a3:d1:39:64:e4:fb:f8:b4:38:92:54:9b:25:12:64:c7:
6f:e1:de:82:8b:51:d8:10:73:5f:75:a1:08:00:df:2c:5d:5c:
d3:a9:52:df:7d:a8:9c:78:75:ff:d3:df:61:c6:c3:81:df:29:
47:2b:c7:60:b3:bf:35:f7:ec:7c:07:db:e0:d6:8c:81:c7:6e:
83:09:09:55:0e:a4:44:2d:07:50:98:90:30:e1:aa:96:55:9e:
53:d5:38:0b:1a:24:ed:1a:ff:68:77:3b:e0:fe:97:de:16:e9:
19:22:ce:24:fb:ab:4f:05:46:ed:21:96:b8:f6:87:1a:10:9c:
8e:3e:d8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:27 2024 by rpki-client on console-fra.rpki-client.org