Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h2FF-XI34JgTIIMT9z4KJJHk2AA.roa
File: h2FF-XI34JgTIIMT9z4KJJHk2AA.roa (raw, json)
Hash identifier: uLF1uNjCN9Fw+lQeszK1BEo1pA+vneBCOnhozqDFMGc=
Subject key identifier: 87:61:45:F9:72:37:E0:98:13:20:83:13:F7:3E:0A:24:91:E4:D8:00
Certificate issuer: /CN=15f19074548d2a294e4385d95cd6752490ee46d7
Certificate serial: 01856F4B80890D9FAC714938A0E28AD525F1
Authority key identifier: 15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h2FF-XI34JgTIIMT9z4KJJHk2AA.roa
Signing time: Sun 01 Jan 2023 21:44:57 +0000
ROA not before: Sun 01 Jan 2023 21:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 50670
IP address blocks: 109.237.192.0/20 maxlen: 24
176.241.64.0/21 maxlen: 24
185.51.212.0/22 maxlen: 24
178.20.184.0/21 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jul 2023 12:31:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:4b:80:89:0d:9f:ac:71:49:38:a0:e2:8a:d5:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15f19074548d2a294e4385d95cd6752490ee46d7
Validity
Not Before: Jan 1 21:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=876145f97237e09813208313f73e0a2491e4d800
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:64:0b:62:9a:eb:3a:3a:47:81:f9:31:a3:62:
73:72:bb:b4:7b:0a:3a:63:c2:fa:52:83:1a:9d:cb:
7d:05:66:18:27:cb:0e:b0:58:43:5f:7a:8a:ee:c3:
fa:3f:c5:ad:8e:a2:d4:bc:34:3f:d0:43:8a:0e:dc:
b2:2f:2b:23:d7:68:01:f2:5a:cb:4e:b9:dc:c6:6f:
9f:22:4e:59:15:a1:b8:37:19:53:20:3e:5b:62:ae:
f8:45:74:e4:43:27:cd:4a:af:a8:b2:41:6d:c9:c4:
30:71:d6:b4:43:0d:21:72:13:fb:ae:a9:43:86:a2:
21:e8:58:57:31:79:0e:be:79:36:71:b3:e6:d6:70:
3a:31:c9:22:ab:72:4a:35:46:0c:d5:b9:ae:72:f5:
e2:4d:b4:d0:78:9d:7f:66:18:0c:46:e9:30:d8:5f:
87:3a:05:cc:16:44:22:26:21:fe:73:38:94:15:75:
f3:4a:8b:a8:f3:d0:89:29:46:03:36:d6:0c:80:c5:
58:06:7f:1c:e3:e3:a1:e9:55:04:73:9f:64:c3:be:
f9:ac:e7:57:28:04:a4:44:46:56:ee:fb:16:34:b2:
75:dc:47:ff:e1:0d:82:d1:e7:01:a6:63:20:ee:b9:
7a:56:77:7c:f7:5f:d2:f5:9b:3f:05:42:9a:d4:74:
18:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:61:45:F9:72:37:E0:98:13:20:83:13:F7:3E:0A:24:91:E4:D8:00
X509v3 Authority Key Identifier:
keyid:15:F1:90:74:54:8D:2A:29:4E:43:85:D9:5C:D6:75:24:90:EE:46:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/h2FF-XI34JgTIIMT9z4KJJHk2AA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/006241-808d-4a49-b0cd-56244f430dcc/1/FfGQdFSNKilOQ4XZXNZ1JJDuRtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.237.192.0/20
176.241.64.0/21
178.20.184.0/21
185.51.212.0/22
Signature Algorithm: sha256WithRSAEncryption
38:cb:2b:a3:74:0d:1a:d0:e7:13:90:71:d1:9f:96:40:3b:ab:
8f:4d:71:d8:87:17:87:03:36:25:e8:e1:e0:a5:8a:e2:95:3b:
fa:20:69:1b:8b:38:6e:28:ad:d5:bb:28:6e:85:c4:03:62:22:
59:26:0f:0e:ea:eb:85:f0:6a:50:84:ce:1a:02:c1:98:b0:e7:
86:c4:06:ce:d8:ad:44:47:83:4b:eb:94:3d:dc:6f:39:87:9f:
14:55:1e:6c:58:00:69:97:e2:85:1d:b8:1b:fe:71:44:91:09:
14:61:59:6d:4c:7f:fc:93:37:8a:e6:82:26:4e:e4:ce:9f:22:
4f:47:3d:7d:eb:21:b6:bc:fc:1b:7a:70:fd:4a:b8:2c:ec:62:
45:57:be:20:62:bd:32:b2:ea:b1:e4:55:19:a8:9d:cd:ae:3b:
c7:1a:27:09:d4:00:77:26:61:0b:e4:c1:25:f2:d1:0e:d4:fe:
56:4a:50:f0:b4:dd:9a:9e:77:d5:73:ee:32:59:dd:3d:47:7f:
6e:62:be:69:4c:84:b8:79:e1:65:3d:b0:42:35:65:bf:a4:78:
01:64:d3:a7:2d:14:19:f5:1d:fb:1a:a3:62:d7:d5:88:a1:d9:
6a:74:24:11:91:8d:23:d1:04:74:05:cd:f4:08:26:88:ec:2b:
8c:f2:3d:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:14:56 2024 by rpki-client on console-ams.rpki-client.org