Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RlmfS4_7CUOnCX2ZH2SfuwGk7yA.roa
File: RlmfS4_7CUOnCX2ZH2SfuwGk7yA.roa (raw, json)
Hash identifier: 6X+OH0h2IQdCRVryPm7GvO/Ke/gLiYRjSBuN3kyskCg=
Subject key identifier: 46:59:9F:4B:8F:FB:09:43:A7:09:7D:99:1F:64:9F:BB:01:A4:EF:20
Certificate issuer: /CN=fb987244611b5230536744b6a89f044f32f462ea
Certificate serial: 018570E74EF9C0E92FEF8892F68563F0F987
Authority key identifier: FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RlmfS4_7CUOnCX2ZH2SfuwGk7yA.roa
Signing time: Mon 02 Jan 2023 05:14:45 +0000
ROA not before: Mon 02 Jan 2023 05:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24984
IP address blocks: 194.176.60.0/24 maxlen: 24
195.12.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:e7:4e:f9:c0:e9:2f:ef:88:92:f6:85:63:f0:f9:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb987244611b5230536744b6a89f044f32f462ea
Validity
Not Before: Jan 2 05:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46599f4b8ffb0943a7097d991f649fbb01a4ef20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:61:6a:fa:57:8f:a2:c5:fd:91:55:18:67:56:
de:e1:f6:d8:3d:10:e7:59:f4:c1:a3:44:42:9e:3c:
56:7e:08:2f:92:13:12:53:1a:a8:f1:5f:ca:eb:e9:
a7:a2:c4:e9:2d:d9:cb:8f:34:99:26:0a:29:7f:39:
ff:ef:77:6e:89:99:8f:f3:46:0e:11:91:db:ec:cc:
8c:58:c8:18:96:d0:ad:fd:97:2a:8d:1e:75:8c:a9:
fc:19:a8:b0:9c:e1:82:54:e9:d3:45:6f:76:f2:71:
22:c1:aa:ec:28:aa:57:bf:cf:32:c7:2d:6b:60:ab:
32:9e:92:a3:a3:cc:93:d1:8e:c9:1e:22:44:3d:31:
16:c2:84:29:3c:1a:63:a8:d6:5f:0f:29:3f:74:cc:
f7:a6:09:33:5d:36:f6:83:b3:99:46:30:7e:1d:1d:
46:9d:8f:a4:fb:de:a0:f9:c8:d2:10:99:0c:2e:0c:
04:cc:5d:89:27:aa:c4:b0:ed:f8:32:ed:32:47:72:
c6:a6:04:fc:7d:e5:0e:44:b6:e7:48:84:1d:35:e4:
0c:2b:2e:5f:4e:40:23:4f:c5:c0:65:0e:1a:5b:2d:
54:d2:13:cb:7c:02:dd:46:0e:0e:bf:04:ae:2a:ea:
d6:b0:45:4d:6d:58:fd:6b:7d:80:59:43:d4:4a:80:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:59:9F:4B:8F:FB:09:43:A7:09:7D:99:1F:64:9F:BB:01:A4:EF:20
X509v3 Authority Key Identifier:
keyid:FB:98:72:44:61:1B:52:30:53:67:44:B6:A8:9F:04:4F:32:F4:62:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/RlmfS4_7CUOnCX2ZH2SfuwGk7yA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/319d7c-7e76-4308-bc00-be5832d5f7aa/1/1-5hyRGEbUjBTZ0S2qJ8ETzL0Yuo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.176.60.0/24
195.12.178.0/24
Signature Algorithm: sha256WithRSAEncryption
10:56:02:2e:20:00:82:9c:a5:81:84:92:ec:52:18:c5:75:bf:
ea:0b:70:27:c2:b7:89:8f:01:f4:52:81:d7:01:9a:38:ed:54:
a7:ff:a2:b6:c0:99:e8:ca:6c:80:44:1d:4e:8b:25:c7:26:16:
fd:bc:91:ca:fe:4b:95:55:fe:30:1d:58:3c:a1:59:bb:d4:bd:
c1:31:38:65:a2:7e:7f:b9:3a:7e:04:24:6f:70:11:06:aa:28:
91:a7:aa:e3:ce:8a:62:9b:d8:14:d8:3f:b8:ee:23:21:47:5e:
22:26:22:b4:aa:bf:a9:52:ec:e1:24:99:3c:cd:75:e9:df:8a:
d3:ce:0e:47:31:1f:82:9a:6c:b8:49:3c:f1:ba:b6:7b:ed:94:
f8:66:b0:fd:13:70:de:11:28:17:13:d5:03:55:40:f2:51:a7:
b9:90:72:08:31:32:d9:cd:8d:46:33:f8:3a:e7:92:3c:2c:df:
3e:37:3e:4f:68:8a:d6:21:8c:3b:1a:1b:eb:30:6e:21:dc:15:
9f:64:7d:ca:3d:cf:48:ea:60:b2:09:d1:32:52:d8:ca:1f:98:
77:db:46:cb:47:88:8a:c2:2e:7b:90:42:8b:b6:5a:c7:a5:69:
1d:99:e8:be:b0:7d:86:3e:a2:b0:8b:d4:57:ae:a4:05:69:0f:
e0:46:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:18 2024 by rpki-client on console-fra.rpki-client.org