Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/FR6HDArBQCXwxR3gs2sgQAjfqXY.roa
File: FR6HDArBQCXwxR3gs2sgQAjfqXY.roa (raw, json)
Hash identifier: uX7xW1GCIGNzZ4J4v/E0VbcuZYiJblmAyJDWIddBqdQ=
Subject key identifier: 15:1E:87:0C:0A:C1:40:25:F0:C5:1D:E0:B3:6B:20:40:08:DF:A9:76
Certificate issuer: /CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Certificate serial: 01856DA6350BD64FD953CAC0F3FFD324948E
Authority key identifier: 60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/FR6HDArBQCXwxR3gs2sgQAjfqXY.roa
Signing time: Sun 01 Jan 2023 14:04:46 +0000
ROA not before: Sun 01 Jan 2023 14:04:46 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51337
IP address blocks: 178.212.40.0/21 maxlen: 21
178.215.192.0/20 maxlen: 20
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:a6:35:0b:d6:4f:d9:53:ca:c0:f3:ff:d3:24:94:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60f6bcf6e2b109ba2a14a73b975ad954484b4ba5
Validity
Not Before: Jan 1 14:04:46 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=151e870c0ac14025f0c51de0b36b204008dfa976
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:00:93:67:37:40:0b:22:94:a2:5b:68:57:f0:
80:99:b2:fe:ff:f1:05:6a:f8:6e:18:ab:b6:df:a0:
dc:dc:6d:bd:84:da:d6:e8:9c:29:ee:92:18:65:50:
36:7f:3e:72:9e:b3:fc:a4:df:58:ac:4d:81:d4:33:
f7:55:1e:39:1d:82:d8:0d:86:b9:a5:2c:e0:3d:5f:
53:d8:56:03:40:2a:99:88:65:6c:61:fc:8a:09:93:
2d:4e:34:88:05:f6:98:e0:dd:88:10:1b:b5:f6:56:
2c:ca:c6:91:96:c5:17:b6:3e:f2:56:f6:3d:63:4b:
7e:df:4f:95:ac:08:37:e9:b1:d4:23:78:07:92:ca:
16:40:69:2b:b1:5f:4f:20:23:ad:bd:17:5c:1c:87:
e9:c0:a4:26:80:0d:c0:11:f5:45:ee:c3:6f:45:30:
65:71:9d:c8:38:eb:25:f2:86:65:9d:2c:12:ff:cc:
36:ea:90:38:ae:91:d0:24:f2:00:79:88:54:10:d0:
37:17:fd:40:6a:2e:cd:7a:b2:c9:c2:1a:4d:dc:99:
a5:a9:67:ea:36:40:67:64:24:23:ec:1b:02:45:4d:
4b:d4:4e:c0:92:9f:15:92:10:37:d9:37:00:47:4c:
fc:83:70:20:20:5b:96:ff:e6:36:83:29:00:28:54:
04:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1E:87:0C:0A:C1:40:25:F0:C5:1D:E0:B3:6B:20:40:08:DF:A9:76
X509v3 Authority Key Identifier:
keyid:60:F6:BC:F6:E2:B1:09:BA:2A:14:A7:3B:97:5A:D9:54:48:4B:4B:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YPa89uKxCboqFKc7l1rZVEhLS6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/FR6HDArBQCXwxR3gs2sgQAjfqXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/83adbb-3627-4b87-9f7d-ab40253b5e2b/1/YPa89uKxCboqFKc7l1rZVEhLS6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.212.40.0/21
178.215.192.0/20
Signature Algorithm: sha256WithRSAEncryption
2b:93:5b:5b:6a:85:03:8a:f4:a6:76:0d:fe:68:6e:b2:f2:0d:
c2:60:55:25:d3:a4:df:5e:9c:0f:df:93:37:a9:c7:71:20:e0:
21:55:96:6d:70:bb:06:72:c7:f8:ea:b5:04:95:91:f7:17:1a:
f7:5f:33:5b:31:af:82:17:24:52:ed:ef:a5:eb:fe:29:10:1a:
3b:74:d4:ca:d7:37:ee:08:47:5a:d4:e2:dd:95:2a:cc:a1:08:
6e:4c:be:ce:30:c5:d4:64:75:a9:34:a1:5c:79:ba:37:1b:3a:
73:86:d0:e1:1a:0c:cc:88:3f:25:f0:da:26:d0:29:9f:a0:3b:
f4:1d:ad:ae:6f:ba:ef:fc:4e:45:26:34:39:79:f1:dc:41:16:
0b:d9:3a:8f:6a:08:ab:eb:d2:39:6f:1c:60:42:7f:df:a4:35:
fc:6d:e5:0c:1c:76:05:28:61:9d:7a:82:c2:dc:11:6c:71:7f:
0a:8f:c8:16:96:60:a2:be:bb:e4:ee:9e:e7:34:32:81:7d:13:
29:80:69:e7:ba:9f:c4:7d:48:06:39:ca:0a:24:b0:79:b3:7c:
56:2d:f5:13:c0:19:87:86:9b:3c:2e:06:f3:05:21:c2:b5:f8:
b4:f9:0c:db:3d:ad:53:4a:c9:71:d3:66:02:09:b3:0b:0e:84:
c1:46:4e:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:28:01 2024 by rpki-client on console-fra.rpki-client.org