Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-fbhzP1Dg-n_mVjkviN11BP7LFk.roa
File: 1-fbhzP1Dg-n_mVjkviN11BP7LFk.roa (raw, json)
Hash identifier: N5R1Kiwz9a9UPpkMLil+W0ySoDD3o1SHx3lZ/GCJdxo=
Subject key identifier: F9:F6:E1:CC:FD:43:83:E9:FF:99:58:E4:BE:23:75:D4:13:FB:2C:59
Certificate issuer: /CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Certificate serial: 0189071C86CA9F40A811BC281CF7D97F36BC
Authority key identifier: 2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-fbhzP1Dg-n_mVjkviN11BP7LFk.roa
Signing time: Thu 29 Jun 2023 12:24:17 +0000
ROA not before: Thu 29 Jun 2023 12:24:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 31727
IP address blocks: 185.113.188.0/22 maxlen: 22
185.113.188.0/24 maxlen: 24
185.113.191.0/24 maxlen: 24
185.113.190.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Jul 2023 14:10:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:07:1c:86:ca:9f:40:a8:11:bc:28:1c:f7:d9:7f:36:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c8fa8533dcc820ba1ad6fb2b2f0161010531db9
Validity
Not Before: Jun 29 12:24:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9f6e1ccfd4383e9ff9958e4be2375d413fb2c59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:f4:d9:f1:b2:41:1e:d5:c6:b7:54:6f:ae:18:
af:41:a6:06:be:6a:83:58:0f:d2:35:e0:4b:9e:b0:
69:be:87:e7:92:f6:1e:a0:60:36:7c:f2:a9:01:16:
bc:dc:05:d9:70:83:75:e2:79:94:a2:59:eb:68:ab:
69:b0:83:9b:82:62:74:d4:7a:08:07:6f:09:ea:0a:
6e:ed:33:37:9a:77:64:05:d8:19:10:47:ae:5e:8d:
bf:3b:ec:9e:95:c6:01:b2:d7:f0:8b:4c:d6:d3:43:
9d:4c:9a:3b:fd:7c:9c:49:cb:bd:66:c9:bc:2a:58:
1e:5b:3d:9a:27:79:05:fd:75:09:aa:cb:50:2a:d9:
59:b0:f4:89:d5:38:8d:eb:bb:be:5a:58:44:14:ab:
44:b4:5e:e1:d5:b6:c2:6b:0f:97:fd:e4:6c:2f:c0:
e1:e9:8c:54:53:89:54:d5:f4:ce:ff:1d:bf:14:bf:
c1:b8:77:03:62:27:b1:61:c3:26:12:b3:61:4b:b5:
04:91:e1:5f:32:7f:cf:56:d8:f3:c9:32:5b:f6:f6:
11:25:6d:ae:65:41:44:94:dd:2c:00:3d:ea:8e:b6:
ae:4c:5a:e0:0a:5e:35:ef:36:77:56:c1:83:f4:f3:
f0:c2:f7:74:4e:ae:80:ed:07:6e:3d:a0:e5:20:90:
df:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:F6:E1:CC:FD:43:83:E9:FF:99:58:E4:BE:23:75:D4:13:FB:2C:59
X509v3 Authority Key Identifier:
keyid:2C:8F:A8:53:3D:CC:82:0B:A1:AD:6F:B2:B2:F0:16:10:10:53:1D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LI-oUz3MgguhrW-ysvAWEBBTHbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/1-fbhzP1Dg-n_mVjkviN11BP7LFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/e7d3de-1845-41f3-907a-9e96af6d6a8f/1/LI-oUz3MgguhrW-ysvAWEBBTHbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.113.188.0/22
Signature Algorithm: sha256WithRSAEncryption
85:af:e6:08:71:94:22:f2:c5:ff:ad:2b:4f:65:c0:5f:16:f5:
c7:d4:93:f8:e5:32:e7:f2:d6:e7:e0:a1:44:81:9f:83:cd:c3:
e5:26:09:e5:68:72:72:8a:4b:42:ea:8f:a3:6f:0f:95:a8:fa:
04:d1:5b:ac:13:c6:c5:d6:40:d0:56:b5:1d:f7:0b:93:4b:86:
6a:d7:8c:6a:45:9b:ab:78:ad:69:96:d0:8e:73:1b:4b:1b:2f:
8d:38:23:a7:9e:5a:b8:ba:b2:25:55:d0:14:ea:87:bd:bf:33:
61:f9:37:5c:ce:95:00:2d:5c:bf:56:58:c1:5a:a8:2a:e5:bc:
e6:fe:85:24:19:40:ef:34:e6:68:7b:bc:8f:d7:ec:88:82:c0:
8c:c0:ff:32:38:4f:ec:01:b0:ba:02:a7:bb:d2:6d:fa:7b:4f:
62:66:0a:a8:42:a8:ca:54:cc:7a:0c:b4:83:ba:b5:fc:dc:62:
6d:cb:de:8a:04:5d:b0:31:e2:7e:1d:d6:73:78:5b:f9:07:59:
8d:9d:78:d8:ad:20:c6:d6:33:93:1d:60:2b:0c:5b:fc:a3:12:
33:9f:5b:9f:23:8a:19:6c:74:e1:33:1d:e9:43:40:e1:dd:eb:
0d:26:1b:fd:ab:ff:02:eb:a4:7d:a0:f7:50:d2:84:0f:51:36:
64:22:3a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:31:02 2024 by rpki-client on console-fra.rpki-client.org