Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/1-Fsh9e7O87kfZYeA1CKIUztUyOA.roa
File: 1-Fsh9e7O87kfZYeA1CKIUztUyOA.roa (raw, json)
Hash identifier: sApFEJpNO5vVs8guGfv8u8NxF9EMiOZCFOKsm3QsYlM=
Subject key identifier: F8:5B:21:F5:EE:CE:F3:B9:1F:65:87:80:D4:22:88:53:3B:54:C8:E0
Certificate issuer: /CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Certificate serial: 01856CC16D905D2A896B60342FC461C232BE
Authority key identifier: B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/1-Fsh9e7O87kfZYeA1CKIUztUyOA.roa
Signing time: Sun 01 Jan 2023 09:54:53 +0000
ROA not before: Sun 01 Jan 2023 09:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 30742
IP address blocks: 185.48.216.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:c1:6d:90:5d:2a:89:6b:60:34:2f:c4:61:c2:32:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b11a1f9770bab077515b7712cb8d49550b3138a1
Validity
Not Before: Jan 1 09:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f85b21f5eecef3b91f658780d42288533b54c8e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:76:89:48:b8:45:38:1b:3e:36:53:4d:9e:45:
66:71:22:50:ef:58:bf:21:6f:e0:aa:4e:ff:67:60:
e1:9e:8a:cd:bc:34:eb:54:05:f2:be:f6:a1:58:63:
67:c2:78:db:43:ee:9f:6e:31:79:65:b7:ae:65:ae:
29:87:e2:15:72:38:61:ba:80:9c:cd:49:87:2c:d3:
d1:bd:9a:37:bf:ba:64:56:fd:36:c7:a4:df:ca:01:
9c:62:b9:89:e6:c9:08:5e:71:fe:45:be:c0:a3:64:
19:43:75:f1:8c:23:4a:78:fa:f0:4b:41:b2:35:bc:
55:32:8f:8e:44:97:86:24:a3:c9:16:40:db:c1:34:
03:a4:9b:28:59:f8:cb:50:5a:06:47:b6:72:48:de:
ab:98:bb:d8:dc:e9:e3:14:da:d4:ec:d6:c6:5f:50:
96:6e:90:d3:3c:38:9d:3c:9e:fe:c5:16:59:9c:4e:
d8:56:b7:34:f5:55:95:39:24:b7:f9:ee:e2:01:5b:
f4:7d:fb:57:58:59:9b:00:11:e5:f4:59:3f:e5:e6:
83:ef:df:b4:85:cf:dc:fb:11:0c:e8:40:85:4d:d5:
db:66:47:da:2e:04:5d:fd:54:b7:87:b7:85:39:f1:
32:25:1f:6f:30:d5:4c:e6:7f:fd:35:fe:ee:4a:b0:
44:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:5B:21:F5:EE:CE:F3:B9:1F:65:87:80:D4:22:88:53:3B:54:C8:E0
X509v3 Authority Key Identifier:
keyid:B1:1A:1F:97:70:BA:B0:77:51:5B:77:12:CB:8D:49:55:0B:31:38:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sRofl3C6sHdRW3cSy41JVQsxOKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/1-Fsh9e7O87kfZYeA1CKIUztUyOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/8d6c33-b2c1-48da-a609-8217a929fd8d/1/sRofl3C6sHdRW3cSy41JVQsxOKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.48.216.0/22
Signature Algorithm: sha256WithRSAEncryption
74:00:1f:0a:be:69:d2:29:01:bb:9e:ac:f6:c4:48:c9:29:21:
8f:00:49:bc:2a:87:c1:4c:9a:e9:72:83:e5:50:ee:6b:c4:5e:
e8:d3:7f:45:45:96:ad:30:0c:be:e2:65:24:e7:c8:49:f0:41:
c7:32:aa:c5:86:b1:7b:0f:6b:2f:ea:cc:37:45:50:51:ff:99:
2b:f2:3b:f7:f9:50:0d:61:a9:82:5c:1e:2d:48:a4:22:4a:bf:
27:21:7e:b9:1c:7d:f1:8c:aa:31:c8:50:34:0e:eb:52:4b:77:
b7:a0:74:d3:80:f1:68:91:ea:a5:4d:7a:4f:f7:69:e2:30:22:
f4:55:ab:c5:cc:7e:c6:d1:f5:b2:e1:e3:79:29:2f:02:66:37:
4f:5b:b6:67:f2:25:5f:d4:f7:9b:d4:2a:d6:07:0c:d7:8f:37:
16:88:67:31:49:e7:ca:63:1f:58:42:b3:55:6d:38:d9:be:ad:
c9:1d:0d:0c:de:ce:f8:e5:ce:08:72:e6:00:c0:94:f3:66:6c:
77:46:8d:bb:b1:10:ee:52:be:02:b3:a4:35:5b:62:eb:13:55:
63:70:0f:ac:77:8d:b7:f3:10:a8:65:60:af:63:11:60:6e:10:
be:ee:4d:29:07:74:ff:da:98:b8:83:45:9a:96:26:5b:a5:c3:
21:c0:f8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:32:25 2024 by rpki-client on console-fra.rpki-client.org