Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_AImdVRN8e9mYbDkkGfTwakPZWY.roa
File: _AImdVRN8e9mYbDkkGfTwakPZWY.roa (raw, json)
Hash identifier: WBAvoobDS2zhtega0pgfxwu+2zNEodrnUjWJnp7HiZk=
Subject key identifier: FC:02:26:75:54:4D:F1:EF:66:61:B0:E4:90:67:D3:C1:A9:0F:65:66
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019233748C3579DFF6B448CBBCAFC14121E0
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_AImdVRN8e9mYbDkkGfTwakPZWY.roa
Signing time: Fri 27 Sep 2024 12:28:49 +0000
ROA not before: Fri 27 Sep 2024 12:28:49 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200239
IP address blocks: 185.141.216.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Nov 2024 09:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:33:74:8c:35:79:df:f6:b4:48:cb:bc:af:c1:41:21:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Sep 27 12:28:49 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc022675544df1ef6661b0e49067d3c1a90f6566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:86:24:dc:b5:cc:1b:02:3d:65:88:32:a2:2f:
3f:17:34:bb:26:de:dd:e0:e8:fd:90:36:32:6e:a1:
2d:f4:05:1b:c9:39:bd:6a:b4:f8:19:08:2d:a3:2b:
0d:d1:31:b1:8a:2f:9c:37:aa:79:23:c5:15:ff:7f:
92:b3:23:e2:1f:5d:8e:b0:30:0a:ba:7e:36:4a:c4:
6c:01:6d:33:9e:60:c0:40:a5:4a:51:2d:93:27:a1:
4e:22:52:37:99:02:a3:cb:fa:a4:c0:4a:cd:d0:a8:
4e:bc:22:2d:58:1a:d7:b4:54:a8:b5:f9:94:d5:ba:
09:0a:11:09:a9:76:1b:ed:a3:1a:6e:04:20:65:1a:
15:62:4b:4d:ef:5f:d3:c1:83:c0:e1:c4:b5:7b:45:
c4:9f:de:6c:28:19:7a:d3:89:f6:f5:89:e9:0a:b0:
c5:fd:7b:4c:68:39:53:46:27:a6:75:6d:e8:32:fe:
13:4e:3b:0b:1d:fd:ce:e7:df:df:f3:56:41:28:78:
fe:f0:57:cc:97:6d:b0:6b:2d:45:7d:d3:01:9f:44:
06:07:e4:14:35:79:86:80:ae:df:69:6d:4f:65:fe:
f1:04:2e:79:be:4e:82:43:65:e2:69:c9:1b:8c:d3:
3c:92:3d:80:83:98:d7:e6:7a:17:f5:79:67:4e:33:
91:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:02:26:75:54:4D:F1:EF:66:61:B0:E4:90:67:D3:C1:A9:0F:65:66
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/_AImdVRN8e9mYbDkkGfTwakPZWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.216.0/24
Signature Algorithm: sha256WithRSAEncryption
19:62:c9:61:cd:c2:a3:96:b8:1f:61:a4:69:ca:56:19:d7:e3:
18:0f:3f:91:d2:9d:2d:6c:01:68:72:bf:5f:30:ed:a6:87:5a:
fa:a3:d9:43:49:bf:98:a1:c4:c2:78:7f:96:05:4c:3e:7c:d1:
3b:40:da:94:47:22:dc:5a:05:fe:3c:cb:ea:29:d6:30:46:65:
54:67:c6:3c:73:79:0a:5d:b2:47:5c:af:c6:2c:65:08:ec:a5:
ac:33:22:22:df:53:12:d5:8a:56:d0:dc:d9:c4:f1:f0:b5:1c:
58:41:6a:d4:ab:99:a4:49:92:fc:25:ce:1c:65:88:d4:7e:c4:
86:fa:3a:df:8e:04:3a:ee:96:13:20:39:7d:0a:69:0a:40:a8:
0f:62:ef:e0:59:7a:aa:47:6b:ed:d8:96:ba:88:d7:26:e6:0e:
39:4a:46:63:bd:b0:49:96:24:23:4c:f7:42:fc:4f:f9:64:ce:
12:9e:7f:47:c5:96:87:80:5d:0f:9f:86:4a:70:25:0e:eb:0f:
db:9c:ea:37:6d:99:ae:75:51:19:1e:e5:10:4f:2b:a4:11:d6:
1d:69:9a:7e:52:e3:12:e8:23:6e:13:4e:84:06:83:87:d0:1a:
35:b2:33:13:9c:48:09:9c:01:95:b3:7f:04:6b:11:a1:11:2d:
6d:6b:b3:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 13:09:04 2024 by rpki-client on console-fra.rpki-client.org