Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fe6Cb97g0hL9qrwuTFVxXFkpHyY.roa
File: fe6Cb97g0hL9qrwuTFVxXFkpHyY.roa (raw, json)
Hash identifier: gbMbKET9bqDE0b5BfBz6qgHmoxhdmSMdvXXrIRQg1BI=
Subject key identifier: 7D:EE:82:6F:DE:E0:D2:12:FD:AA:BC:2E:4C:55:71:5C:59:29:1F:26
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019118CB55D97615747DC0458357E537CAD4
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fe6Cb97g0hL9qrwuTFVxXFkpHyY.roa
Signing time: Sat 03 Aug 2024 15:11:04 +0000
ROA not before: Sat 03 Aug 2024 15:11:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39650
IP address blocks: 185.239.1.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 14 Oct 2024 05:36:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:18:cb:55:d9:76:15:74:7d:c0:45:83:57:e5:37:ca:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Aug 3 15:11:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dee826fdee0d212fdaabc2e4c55715c59291f26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:12:d1:13:d3:9d:2f:55:26:97:47:08:5d:c9:
fc:19:66:40:23:13:ab:a7:28:e7:de:d1:4e:32:b8:
8b:73:47:35:54:ce:a0:b4:04:75:de:3d:46:c8:ba:
20:c2:19:87:76:b9:09:a1:ca:11:5e:ea:e7:90:45:
48:b7:f5:5b:4e:c4:8a:2e:57:fc:0a:07:b4:3b:95:
30:4a:07:95:7d:74:a7:56:63:0c:f0:59:d5:ef:89:
a1:01:2d:e1:37:d5:b8:8c:9f:75:e9:92:99:c1:4a:
59:58:5b:e7:be:59:e0:88:e0:36:d4:d9:d0:dd:3f:
e2:36:2f:52:84:11:f6:8c:81:72:b9:d7:26:5e:b5:
03:3c:f3:e0:bd:cb:68:f8:11:3c:b5:09:6e:d0:ec:
67:57:ab:1d:3a:f0:01:55:2b:a6:5c:fc:5a:91:dd:
ba:d6:a8:3e:43:23:66:0b:34:79:b5:d8:a0:7b:28:
5c:10:e5:f5:c8:e9:5d:d8:5f:86:b6:cb:77:f9:3c:
86:e2:03:41:f4:76:93:8f:58:22:2b:12:4e:a9:e5:
f3:ad:3b:b5:0e:b3:18:a5:31:50:4b:fe:c0:52:e5:
92:cd:cc:1c:53:f5:20:9d:d1:4a:5c:fd:af:4e:7d:
b0:7a:81:66:b8:35:7e:ed:f3:8a:4d:be:c0:c4:c6:
ab:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:EE:82:6F:DE:E0:D2:12:FD:AA:BC:2E:4C:55:71:5C:59:29:1F:26
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/fe6Cb97g0hL9qrwuTFVxXFkpHyY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.1.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:2b:b9:4b:f2:28:b2:33:cb:0d:2c:6d:d0:8c:e0:f4:d7:eb:
94:24:31:92:b8:50:8b:65:56:c7:29:97:85:12:04:51:f2:8e:
17:35:36:b4:b0:e8:84:a8:32:ac:c5:5c:96:60:3e:49:fb:15:
e5:3d:90:90:10:9f:f4:16:93:63:57:54:1c:c8:5b:6f:f9:fa:
06:41:c9:76:c6:fd:21:2c:ad:ce:8d:9f:d6:b6:a7:a7:cd:99:
f0:cc:f6:82:8d:07:8c:b7:14:60:d2:35:48:6c:43:7c:b3:a2:
44:05:4a:04:f0:65:94:1e:41:81:b0:b3:c4:9d:ce:f0:46:44:
b6:80:56:d9:5c:12:c9:d2:20:0f:a3:16:48:05:6f:dd:56:96:
c5:b8:9f:67:4c:43:e0:6b:4f:b5:b4:0e:ee:f1:b1:41:4c:ea:
b8:94:6e:b6:87:40:91:9f:14:31:a5:e5:e4:71:ee:8c:ef:27:
52:20:5c:b0:35:66:4b:8f:20:42:2b:ef:3a:2b:fd:60:6c:c2:
23:62:87:1a:6f:88:d1:03:2c:13:f6:53:db:15:7a:42:1b:dc:
2a:e8:db:87:ac:6f:0d:73:34:27:4c:24:f0:bc:34:79:6e:28:
8b:05:d0:c2:b2:60:63:67:de:ba:43:fb:5e:31:c1:35:aa:d1:
c8:8a:70:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 14 06:42:04 2024 by rpki-client on console-fra.rpki-client.org