Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/fUshKeemRuY_LfZ1q1ZP_1atMj0.roa
File: fUshKeemRuY_LfZ1q1ZP_1atMj0.roa (raw, json)
Hash identifier: edH1bcj9eN7Itt8e0CQ9Sx28f2GcAvH5FeO3gwAiVQE=
Subject key identifier: 7D:4B:21:29:E7:A6:46:E6:3F:2D:F6:75:AB:56:4F:FF:56:AD:32:3D
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 018B36F917246EC710CC9AB786923039C8E9
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/fUshKeemRuY_LfZ1q1ZP_1atMj0.roa
Signing time: Mon 16 Oct 2023 05:32:55 +0000
ROA not before: Mon 16 Oct 2023 05:32:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48492
IP address blocks: 185.56.192.0/24 maxlen: 24
185.56.192.0/22 maxlen: 22
185.56.193.0/24 maxlen: 24
185.56.194.0/24 maxlen: 24
185.56.195.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:36:f9:17:24:6e:c7:10:cc:9a:b7:86:92:30:39:c8:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Oct 16 05:32:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d4b2129e7a646e63f2df675ab564fff56ad323d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:da:6f:0a:8b:48:1c:9a:73:80:ab:cd:9f:84:
0a:20:43:1c:fd:cd:5b:7c:1b:77:4c:e0:ee:ea:36:
af:b8:6d:13:24:6e:b0:b8:8b:16:a9:db:04:9e:20:
c4:6d:32:ba:3c:8e:bc:81:26:8f:f7:e3:12:99:34:
97:e8:14:de:19:1f:a5:f1:e7:20:5c:c6:55:64:06:
a9:d6:9f:33:71:16:60:ba:09:53:1d:86:21:71:6d:
c6:46:b0:9d:0a:7c:80:e3:f3:f3:66:30:fb:bb:07:
a3:94:fa:9a:39:ff:47:8d:6a:e1:78:1b:da:78:b0:
5e:96:9e:d8:ba:67:aa:4a:f7:90:1a:19:46:70:e8:
bf:cd:88:43:55:76:53:56:cb:73:b0:a8:cd:5d:a4:
ae:9d:99:7f:a4:c0:8b:b4:51:b1:39:bf:e1:51:1f:
1b:87:99:68:aa:ce:8d:0c:eb:e1:8a:4c:85:12:ab:
17:85:f2:73:50:c2:0c:e2:67:23:e8:55:5e:2b:b1:
ca:09:e0:4c:d6:22:8b:1a:b2:f5:19:4c:de:16:a5:
f6:b9:ea:8f:c1:55:40:19:39:c8:a4:30:97:8d:36:
88:ea:81:aa:85:78:ba:98:24:b4:1c:bc:66:33:af:
69:5e:40:13:e9:73:a3:d3:42:cf:63:33:60:ff:07:
c4:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:4B:21:29:E7:A6:46:E6:3F:2D:F6:75:AB:56:4F:FF:56:AD:32:3D
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/fUshKeemRuY_LfZ1q1ZP_1atMj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
80:3f:15:96:df:16:81:8f:d4:a9:f5:df:55:79:e2:7b:89:38:
f4:d8:05:01:5f:ee:43:31:95:55:04:10:cb:58:b0:93:d2:f3:
bb:0f:bc:fa:41:a5:e5:1c:e0:0a:f0:e8:56:ad:bf:d6:0c:1c:
09:9f:d0:8c:85:91:7f:49:d0:85:71:47:3d:ff:31:08:89:f7:
84:d0:87:10:1e:c9:33:77:29:1c:ed:23:14:c5:aa:36:dc:7d:
1f:fc:0a:32:ff:3e:ed:c0:b0:f7:b4:fd:10:f8:c2:93:5e:6b:
99:63:56:bd:ca:e2:d2:0d:1f:e6:ff:6f:bb:1c:12:db:92:d1:
06:a9:9f:3c:35:77:94:f3:bb:c7:6b:6d:68:c1:f6:53:71:db:
7d:ba:bd:6f:db:97:5b:9a:4a:e5:56:12:48:a8:cb:4c:84:0b:
28:42:7e:b0:97:1b:b6:96:41:ce:e4:78:3c:e1:31:96:0b:5c:
33:79:ca:9f:c6:07:fa:5c:ae:ee:16:5c:77:3d:62:d3:0a:4a:
2e:84:21:37:9f:cf:0e:67:a4:0e:87:1e:e8:e0:b5:6d:9c:0e:
82:27:ff:99:e0:a1:d8:51:21:28:8f:e6:2b:b4:d1:92:c4:25:
ef:68:a7:25:e8:5c:5d:05:0e:8a:dc:cf:91:93:87:34:8b:2a:
3e:a8:0b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:51 2024 by rpki-client on console-fra.rpki-client.org