Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/fnKF7HcKbvG4Kucpmz0Ms_nHOX4.roa
File: fnKF7HcKbvG4Kucpmz0Ms_nHOX4.roa (raw, json)
Hash identifier: xx2Ib7D41zg9FQguPeOZN1vln8GpsSZa7oaHbNupWJ8=
Subject key identifier: 7E:72:85:EC:77:0A:6E:F1:B8:2A:E7:29:9B:3D:0C:B3:F9:C7:39:7E
Certificate issuer: /CN=ff6b3361a1a2a00dbce319019827febb715bd044
Certificate serial: 0185730CBB616E3EC47DA0B5BB7BC4E0A63C
Authority key identifier: FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/fnKF7HcKbvG4Kucpmz0Ms_nHOX4.roa
Signing time: Mon 02 Jan 2023 15:14:52 +0000
ROA not before: Mon 02 Jan 2023 15:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206663
IP address blocks: 185.167.180.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:73:0c:bb:61:6e:3e:c4:7d:a0:b5:bb:7b:c4:e0:a6:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ff6b3361a1a2a00dbce319019827febb715bd044
Validity
Not Before: Jan 2 15:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e7285ec770a6ef1b82ae7299b3d0cb3f9c7397e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:22:7e:0e:f4:48:68:8b:80:92:d7:92:5b:3a:
b5:3a:9b:e1:4e:51:15:cf:d0:fc:ad:fb:c9:63:18:
9a:68:45:60:0b:b6:a8:7a:27:6e:bc:30:8a:69:42:
1b:01:57:02:57:4c:91:47:ae:df:e2:3a:83:cb:5e:
31:50:7c:eb:9c:1d:58:44:10:60:9a:37:80:c2:37:
97:59:0c:12:35:cd:88:4f:6a:e1:63:26:6b:87:90:
6d:14:89:22:b0:16:c3:13:29:7e:7d:58:f7:19:5b:
fd:56:02:1d:89:4d:02:22:e4:58:1a:ab:31:5e:23:
41:6a:06:15:0e:2f:0c:3c:35:39:b2:6e:4f:6a:f3:
07:08:57:b9:fa:3d:5d:a3:f3:9c:95:8b:af:83:7b:
e1:69:9c:4d:a2:9d:4d:ea:1d:81:e2:c2:c7:40:78:
54:f4:dd:2f:74:16:cd:a2:db:51:68:1d:fd:3a:66:
9f:e0:ed:9a:cf:cf:1a:72:16:db:55:83:ec:d1:70:
86:7e:15:8c:24:67:b0:03:d5:6c:67:c0:7b:a2:22:
6c:54:e9:0e:7b:b6:f8:cf:88:70:10:3b:32:77:5a:
c4:3c:22:a3:18:4f:70:9a:e9:4d:fb:5e:d3:8f:37:
73:78:f1:13:a1:a5:a3:0a:5c:02:52:3c:8a:9c:fe:
5c:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:72:85:EC:77:0A:6E:F1:B8:2A:E7:29:9B:3D:0C:B3:F9:C7:39:7E
X509v3 Authority Key Identifier:
keyid:FF:6B:33:61:A1:A2:A0:0D:BC:E3:19:01:98:27:FE:BB:71:5B:D0:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_2szYaGioA284xkBmCf-u3Fb0EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/fnKF7HcKbvG4Kucpmz0Ms_nHOX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/96f9a0-8746-4b32-83ee-f62320951a36/1/_2szYaGioA284xkBmCf-u3Fb0EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.167.180.0/24
Signature Algorithm: sha256WithRSAEncryption
11:9e:97:19:40:13:4e:df:1f:ff:01:15:69:08:e8:bd:f8:d8:
13:73:26:6d:c8:84:f3:ca:7e:db:46:8a:bf:10:32:38:89:a0:
0c:49:11:3b:23:70:8e:3c:99:c2:66:1a:f6:10:8a:62:71:5a:
a3:e4:1b:50:16:f0:15:1a:6e:0e:9c:d1:05:c7:05:9e:6a:50:
ab:b6:87:e7:6d:d2:e3:4e:c8:83:5a:30:6f:c5:53:b4:ca:43:
b9:e8:8b:b7:9d:8a:91:69:d3:af:7b:a6:8c:e3:19:0e:b3:3b:
45:9e:a2:eb:f1:81:de:c4:4f:bf:2d:a9:be:0b:9a:49:6c:81:
ad:90:0f:0f:db:75:c8:d7:ff:7a:a5:c4:79:72:ea:f4:e1:b1:
a0:05:69:05:f6:33:9b:87:1a:7a:c4:86:64:59:83:73:67:2c:
b9:4e:51:0f:3c:33:c2:ca:cc:80:fe:29:50:70:af:12:58:32:
54:28:01:6d:a5:27:90:55:ba:22:f8:54:67:81:3b:2a:15:1b:
f7:6b:cb:50:fb:2c:c4:c6:e7:b4:15:d5:c4:a8:fe:0d:00:f1:
2c:f5:5c:7b:77:08:14:87:06:30:40:33:84:d2:d0:d8:1e:e5:
aa:07:31:89:84:28:50:54:60:7b:31:fd:7a:4b:1e:b1:60:f2:
98:52:fc:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:25:46 2024 by rpki-client on console-fra.rpki-client.org