Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fZmmFbGJ3p0hBF5CZLUM4oNERlc.roa
File: fZmmFbGJ3p0hBF5CZLUM4oNERlc.roa (raw, json)
Hash identifier: hY7JFLCgaKwN/n6Nf844JMGborRSSyY5238gATlTZrI=
Subject key identifier: 7D:99:A6:15:B1:89:DE:9D:21:04:5E:42:64:B5:0C:E2:83:44:46:57
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01856C53CB5885E62C0166CCEC820D506D7F
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fZmmFbGJ3p0hBF5CZLUM4oNERlc.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 29262
IP address blocks: 185.87.24.0/24 maxlen: 24
185.87.27.0/24 maxlen: 24
185.87.26.0/24 maxlen: 24
185.85.191.0/24 maxlen: 24
185.85.190.0/24 maxlen: 24
185.85.189.0/24 maxlen: 24
185.87.123.0/24 maxlen: 24
185.87.122.0/24 maxlen: 24
185.87.121.0/24 maxlen: 24
185.141.32.0/24 maxlen: 24
185.119.83.0/24 maxlen: 24
185.119.82.0/24 maxlen: 24
185.119.81.0/24 maxlen: 24
185.119.80.0/24 maxlen: 24
185.85.237.0/24 maxlen: 24
185.85.239.0/24 maxlen: 24
185.85.238.0/24 maxlen: 24
185.86.5.0/24 maxlen: 24
185.86.13.0/24 maxlen: 24
185.86.154.0/24 maxlen: 24
185.86.153.0/24 maxlen: 24
185.86.166.0/24 maxlen: 24
185.86.165.0/24 maxlen: 24
185.86.164.0/24 maxlen: 24
185.86.167.0/24 maxlen: 24
185.98.60.0/24 maxlen: 24
2a0c:67c0::/29 maxlen: 29
2a0b:6780::/29 maxlen: 29
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:30:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:cb:58:85:e6:2c:01:66:cc:ec:82:0d:50:6d:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d99a615b189de9d21045e4264b50ce283444657
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a8:d6:88:3b:10:0c:2e:a5:dc:23:9c:8e:c8:
15:3d:7c:be:7f:13:27:22:69:ce:ce:86:91:ff:e0:
d7:05:cc:f7:b5:3b:2a:42:70:1f:f3:4d:e1:39:99:
e4:ac:48:fe:b1:bc:ea:b5:4e:2e:e1:38:7c:94:99:
fa:ad:8d:0a:a4:27:57:8e:49:fa:15:07:1b:06:99:
f1:59:93:35:58:e8:10:59:97:1c:20:30:f9:6e:f2:
93:ea:b8:73:4a:49:97:c2:17:9c:dc:92:cb:74:fe:
90:74:2a:36:40:ad:6a:17:d7:c0:96:89:46:92:a0:
29:c4:33:00:55:cb:97:bc:02:8d:bc:ae:54:9e:c0:
d1:8e:d9:4a:90:06:d9:2c:69:54:ed:c9:ad:ff:7e:
16:58:aa:1d:af:51:fc:b2:94:01:61:2b:40:8a:5f:
43:4a:11:6f:ae:70:31:83:75:fc:c9:c1:89:a1:d8:
1e:d8:4a:16:3f:d0:c7:2f:7d:69:cf:9e:77:9f:0c:
b4:8b:ff:df:31:a3:49:26:09:78:20:aa:4c:c8:7d:
f4:bf:d1:95:2f:4a:ad:46:03:26:e8:ec:14:2f:8f:
a7:c2:54:96:88:8b:65:c6:08:7a:bc:fd:8a:b4:7a:
3e:f2:bf:6e:a6:f9:50:1e:1c:b7:d9:9b:5c:a5:da:
9d:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:99:A6:15:B1:89:DE:9D:21:04:5E:42:64:B5:0C:E2:83:44:46:57
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/fZmmFbGJ3p0hBF5CZLUM4oNERlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.85.189.0-185.85.191.255
185.85.237.0-185.85.239.255
185.86.5.0/24
185.86.13.0/24
185.86.153.0-185.86.154.255
185.86.164.0/22
185.87.24.0/24
185.87.26.0/23
185.87.121.0-185.87.123.255
185.98.60.0/24
185.119.80.0/22
185.141.32.0/24
IPv6:
2a0b:6780::/29
2a0c:67c0::/29
Signature Algorithm: sha256WithRSAEncryption
52:aa:d4:45:d1:44:91:07:9e:27:d8:18:75:09:28:e5:d2:63:
60:92:55:0f:70:a3:f0:fc:aa:99:cf:72:3c:6f:57:a7:9b:fd:
88:2b:fc:90:b7:55:93:c4:50:a6:9f:3f:16:46:a8:9f:5a:40:
0e:61:17:d7:50:6f:4c:d0:13:d7:85:a3:2a:d5:87:ca:f2:7c:
52:43:a9:dc:09:7e:45:af:fa:a5:5b:b5:f8:e2:cb:ee:5b:89:
d5:f3:90:a9:60:a4:17:e4:bd:4d:86:26:e8:e6:ad:a0:7c:d3:
45:e2:0f:3d:c1:27:37:08:56:64:69:f9:a5:25:77:71:eb:ad:
c5:fd:56:59:44:29:cc:fc:1f:e7:fa:4f:2c:2a:cc:c4:7e:1c:
ea:8f:b8:45:02:93:50:4c:98:d3:80:46:31:00:c3:21:14:43:
03:34:2a:d8:b2:f8:dc:85:6b:b8:2e:9c:06:b6:43:be:2b:f3:
cd:bf:e0:c2:98:36:1a:2c:7b:4d:7b:a7:32:82:78:7d:e1:9a:
f2:00:6f:73:eb:95:39:84:b7:c2:db:e4:9e:f6:d6:00:88:55:
12:91:78:7e:3d:b0:b3:93:79:78:8e:6b:44:5e:9a:c5:6d:87:
cf:7c:b9:37:37:7d:8c:eb:e1:ec:81:9e:a3:e3:4f:0d:94:2e:
db:00:4c:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:06:24 2024 by rpki-client on console-ams.rpki-client.org