Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/fIbxIrz9hgmHzZwtE683p80G0FQ.roa
File: fIbxIrz9hgmHzZwtE683p80G0FQ.roa (raw, json)
Hash identifier: f+817FW37k6cipzlndQdDVPfnTtP32ocnKgzQtTeu+Y=
Subject key identifier: 7C:86:F1:22:BC:FD:86:09:87:CD:9C:2D:13:AF:37:A7:CD:06:D0:54
Certificate issuer: /CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Certificate serial: 018CC2DAE1D6E9BD6F6ACDD701CBB8A5895C
Authority key identifier: A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/fIbxIrz9hgmHzZwtE683p80G0FQ.roa
Signing time: Mon 01 Jan 2024 02:29:33 +0000
ROA not before: Mon 01 Jan 2024 02:29:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 210498
IP address blocks: 185.140.239.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 Apr 2024 12:15:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c2:da:e1:d6:e9:bd:6f:6a:cd:d7:01:cb:b8:a5:89:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a98cfb9b5f445fd2f6ccfa179c37c53449b2af06
Validity
Not Before: Jan 1 02:29:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c86f122bcfd860987cd9c2d13af37a7cd06d054
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:7c:84:31:24:0c:82:82:8c:ac:f8:6a:c2:49:
cc:4a:c2:fc:26:53:2d:c3:d0:f9:c7:3f:ae:d1:81:
7a:52:2e:16:43:50:28:fe:de:e6:73:a5:99:55:8b:
4c:4c:2f:84:81:d2:8e:84:c6:7e:a4:00:06:15:3a:
8f:1b:9c:0e:5e:ea:7d:10:e0:5c:ab:40:98:dd:54:
55:ae:dc:ed:63:b0:52:94:96:ce:14:7d:92:35:5e:
6d:2a:4f:3a:ea:57:01:a1:a1:ad:1f:6d:d5:64:d3:
b6:64:dc:07:fe:27:a0:47:97:75:8f:6a:9e:5d:43:
2e:8a:ad:35:68:8d:d0:7d:7d:6b:37:ae:4e:8a:ef:
39:fa:25:ba:5d:9f:9c:28:89:4f:f3:87:3b:8b:76:
fd:3f:b5:be:72:2a:51:dc:01:c4:6d:d1:04:73:fc:
c4:66:dd:2d:7e:69:d4:1d:59:d4:49:29:67:86:9a:
81:d6:ec:39:87:ac:ae:cc:1b:3a:5b:cd:b7:6e:e2:
c5:08:6f:bf:05:77:2d:53:e8:b5:87:1e:56:ea:d5:
58:bf:a9:41:63:da:84:22:45:bb:ad:69:98:3e:67:
20:fc:54:7e:ae:c3:43:fb:65:77:1f:42:bc:92:8b:
52:86:21:cc:c0:0a:b4:de:0f:68:0a:e2:fe:8a:92:
5a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:86:F1:22:BC:FD:86:09:87:CD:9C:2D:13:AF:37:A7:CD:06:D0:54
X509v3 Authority Key Identifier:
keyid:A9:8C:FB:9B:5F:44:5F:D2:F6:CC:FA:17:9C:37:C5:34:49:B2:AF:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qYz7m19EX9L2zPoXnDfFNEmyrwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/fIbxIrz9hgmHzZwtE683p80G0FQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/df8551-3f9f-44b2-b7e4-886593f7dce0/1/qYz7m19EX9L2zPoXnDfFNEmyrwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.140.239.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:0a:52:43:ae:a6:2d:d8:9e:42:cb:08:13:99:d1:71:2d:7f:
85:fb:19:aa:f9:a8:24:2c:7f:37:91:a1:e8:64:00:d6:77:e1:
4f:c5:d9:c8:35:36:f4:43:e3:09:67:3c:69:e2:d5:a7:f8:da:
7b:4c:45:21:97:5e:29:77:17:15:65:d6:ba:0a:3b:42:2e:6a:
a1:f8:70:d2:b6:40:7b:7b:5d:83:b8:2e:72:5a:10:bc:b4:23:
f0:94:db:44:bf:fe:9f:58:97:6a:61:d2:9f:55:9c:4f:b9:4b:
c9:03:6c:7a:e8:60:d0:26:7a:bf:37:d6:0c:a3:49:a8:29:ee:
bc:1f:f1:ec:a5:59:40:bb:e4:f9:cd:25:7f:c1:33:ee:8d:d8:
5e:85:33:bd:21:2e:4b:04:97:ce:2d:e1:93:a9:9f:1b:61:66:
bf:9c:44:e5:44:7d:69:ae:20:e5:23:29:ff:5f:70:40:3c:c7:
0f:bc:16:2c:48:bf:15:e5:a2:b1:7d:21:ee:d4:e0:ef:13:db:
a4:8c:95:8a:e9:ab:c2:b8:b6:8e:45:dd:07:7c:7f:2d:17:b6:
9b:94:63:4a:2f:a9:ce:71:70:60:77:4d:24:71:6b:43:71:8a:
67:29:6e:cc:82:e1:bf:90:08:1f:34:91:69:eb:5e:41:ae:1e:
7f:c8:2a:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 8 16:48:51 2024 by rpki-client on console-ams.rpki-client.org