Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/fOi8C6JSaqc_yik0KKLNfHMDFA8.roa
File: fOi8C6JSaqc_yik0KKLNfHMDFA8.roa (raw, json)
Hash identifier: Psn29LeRZjO6AHlRrrMLh0CwT+fHgaWqAcn/xtgKncE=
Subject key identifier: 7C:E8:BC:0B:A2:52:6A:A7:3F:CA:29:34:28:A2:CD:7C:73:03:14:0F
Certificate issuer: /CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Certificate serial: 01856C6F180B610D5B54C622A24A85918DC1
Authority key identifier: F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/fOi8C6JSaqc_yik0KKLNfHMDFA8.roa
Signing time: Sun 01 Jan 2023 08:24:57 +0000
ROA not before: Sun 01 Jan 2023 08:24:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 20495
IP address blocks: 185.52.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:6f:18:0b:61:0d:5b:54:c6:22:a2:4a:85:91:8d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0c49c2178e82fdc1f419f5a7c51721df53d7a48
Validity
Not Before: Jan 1 08:24:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ce8bc0ba2526aa73fca293428a2cd7c7303140f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:1c:79:ba:22:84:ca:a8:e9:aa:22:f0:92:b9:
05:57:02:61:c2:ef:ef:10:64:4f:12:19:2f:61:95:
62:c8:7b:88:9d:b3:12:2b:fa:df:23:b1:94:ed:eb:
c1:a1:70:27:5e:70:1b:26:4d:8f:5f:33:63:d7:80:
05:d9:ae:38:84:57:97:1d:81:02:e9:d0:ef:06:b6:
c5:e1:f2:65:24:05:0a:81:b4:aa:93:96:c6:4f:89:
af:b4:44:02:03:e7:bb:84:79:33:8c:82:f9:4a:03:
67:d6:d6:48:1d:5b:56:17:8b:84:2d:a1:96:e7:7c:
27:56:ad:d6:57:13:34:fc:e6:87:83:d1:ed:b7:98:
c2:d9:33:19:58:01:67:03:7c:4d:a0:fc:d6:27:89:
28:f7:bc:c3:5f:59:49:8b:55:2c:d3:59:f3:8d:96:
12:fc:b1:1c:20:0b:a4:64:64:ff:32:c2:d2:10:5f:
7e:20:4b:82:d4:81:3d:dd:fd:38:fe:ef:db:46:46:
a7:88:f8:96:34:b3:e2:7b:82:f7:26:89:a1:fd:98:
66:0c:93:43:23:7e:01:ef:ed:f9:b2:b1:d5:7a:59:
d8:5e:b0:1f:07:73:83:83:65:61:e8:d6:13:3a:5b:
57:bc:a2:80:9d:ed:59:85:3a:c9:c3:b8:55:1e:d5:
b3:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:E8:BC:0B:A2:52:6A:A7:3F:CA:29:34:28:A2:CD:7C:73:03:14:0F
X509v3 Authority Key Identifier:
keyid:F0:C4:9C:21:78:E8:2F:DC:1F:41:9F:5A:7C:51:72:1D:F5:3D:7A:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8MScIXjoL9wfQZ9afFFyHfU9ekg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/fOi8C6JSaqc_yik0KKLNfHMDFA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/e22fea-84d0-406a-8a6f-46f5fa2c9303/1/8MScIXjoL9wfQZ9afFFyHfU9ekg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.52.60.0/22
Signature Algorithm: sha256WithRSAEncryption
16:c2:90:3d:bc:ec:31:29:8f:40:8a:36:de:38:c3:1a:ed:c8:
c1:3c:c9:d3:03:75:65:72:49:8d:45:db:0a:ee:20:ea:8c:48:
76:6e:8d:8c:b9:df:8c:75:16:db:3d:95:9c:09:d4:65:5f:e0:
f8:32:d0:89:4b:ac:bc:25:3f:9a:f5:0f:78:d4:1c:30:74:53:
7d:8c:25:e3:14:3a:77:cb:73:b2:be:16:b0:02:bf:79:ce:f6:
1c:bd:c6:f4:5c:a5:39:57:fe:a0:1f:0b:3b:24:97:44:16:f5:
ce:c2:8d:0d:79:41:2d:74:72:79:3e:27:fd:9c:25:2d:4b:56:
1c:40:51:71:b0:07:07:ef:5e:ac:4e:26:b8:52:86:34:a3:77:
f2:64:c4:19:c7:a8:17:68:19:14:bb:93:93:1d:56:f1:b2:b8:
9c:b1:18:72:28:3e:d7:db:19:5b:dd:06:cd:c2:07:54:d4:a6:
98:a4:11:f1:5b:5e:dc:68:5b:a4:59:20:49:66:8a:f7:01:1a:
23:b0:3e:80:c5:37:66:1c:11:42:4b:38:6a:b2:35:41:66:12:
5e:76:3a:df:b7:8a:36:98:a6:b6:24:8d:7c:08:5c:f7:3b:9d:
d2:3d:3d:20:41:3a:fb:1c:81:b8:56:86:f0:be:90:28:a4:14:
55:e9:7d:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:51 2024 by rpki-client on console-ams.rpki-client.org