Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/FM3hKunpLUj53f1XMc94Or3KgRU.roa
File: FM3hKunpLUj53f1XMc94Or3KgRU.roa (raw, json)
Hash identifier: Y2SYyTZuSY5d2pUaqAUMvpcTe0IfXobZA7WZ2iRxaog=
Subject key identifier: 14:CD:E1:2A:E9:E9:2D:48:F9:DD:FD:57:31:CF:78:3A:BD:CA:81:15
Certificate issuer: /CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Certificate serial: 018EF146B259216C8C32E37B0B77F923D67F
Authority key identifier: 8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/FM3hKunpLUj53f1XMc94Or3KgRU.roa
Signing time: Thu 18 Apr 2024 12:55:25 +0000
ROA not before: Thu 18 Apr 2024 12:55:25 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 5482
IP address blocks: 51.179.192.0/18 maxlen: 18
217.142.64.0/18 maxlen: 18
Validation: Failed, certificate revoked on Thu 18 Apr 2024 14:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:f1:46:b2:59:21:6c:8c:32:e3:7b:0b:77:f9:23:d6:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c186a56ea84c13c62768a9d17bae133cedf1045
Validity
Not Before: Apr 18 12:55:25 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14cde12ae9e92d48f9ddfd5731cf783abdca8115
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:97:0f:ae:7c:ce:c9:d9:60:ae:3a:03:1d:5c:
6f:eb:b6:40:f9:b6:ff:d7:aa:04:9b:2a:36:46:2e:
f8:ea:b5:41:ba:23:fe:16:6c:1a:46:c3:0d:7a:77:
0a:18:d9:93:30:41:75:16:c9:90:61:da:79:23:2f:
90:94:4c:b1:16:fb:72:9c:a3:4b:a5:2f:cb:ea:dc:
ec:77:23:9d:61:11:2f:ce:67:23:20:92:90:4a:4d:
b1:0f:a0:fa:4f:5c:c9:fd:d2:5c:ac:8e:eb:c7:4f:
85:16:eb:be:7f:e8:e9:d1:87:1d:4c:7c:b3:e7:30:
53:c8:a4:e3:15:33:c8:5e:f4:14:95:dd:63:6a:ca:
f1:55:23:1e:f9:7d:5e:1b:f3:ce:31:cc:cb:55:74:
ec:8f:90:90:b4:e5:cc:e8:8e:41:b4:21:bf:ce:b6:
24:6b:d9:40:ef:bb:14:85:de:77:3c:a0:78:25:bf:
c7:af:e5:d3:56:eb:e0:3e:84:db:9f:db:7b:72:35:
23:45:ba:ea:f1:17:d5:86:af:f9:86:08:f5:ac:cb:
f3:71:ad:ff:25:87:c9:e1:d4:14:b2:49:2a:b3:a0:
8f:67:a0:d6:90:fb:74:e3:8a:da:7a:72:39:0e:ad:
b5:15:8e:17:96:9d:d3:46:07:08:c6:c2:dd:59:14:
9f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:CD:E1:2A:E9:E9:2D:48:F9:DD:FD:57:31:CF:78:3A:BD:CA:81:15
X509v3 Authority Key Identifier:
keyid:8C:18:6A:56:EA:84:C1:3C:62:76:8A:9D:17:BA:E1:33:CE:DF:10:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBhqVuqEwTxidoqdF7rhM87fEEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/FM3hKunpLUj53f1XMc94Or3KgRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/c8ec95-b5f5-44fb-b93d-2092af647070/1/jBhqVuqEwTxidoqdF7rhM87fEEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
51.179.192.0/18
217.142.64.0/18
Signature Algorithm: sha256WithRSAEncryption
be:41:a0:8b:03:f9:17:75:c4:31:bc:7b:eb:47:66:c1:59:91:
6b:fc:62:95:28:a7:0e:a5:f8:59:07:33:21:f4:30:3f:70:de:
44:f4:af:1d:13:8f:4c:7e:bb:6a:b1:7f:5c:86:3f:e2:8f:da:
35:dd:34:87:b8:21:7f:af:dd:84:68:75:56:3f:7b:b7:85:bd:
58:ab:d3:7c:22:b0:00:de:07:71:09:5b:c3:72:4b:73:d9:40:
f1:77:d4:1d:02:b1:4d:57:b0:ce:bd:ff:66:46:cf:7b:55:87:
e4:ac:5b:b5:5f:b9:44:47:45:43:4b:b0:e8:c6:a3:a4:4c:eb:
94:d9:32:55:eb:a7:b6:ce:88:43:6c:cd:f2:7a:e4:be:22:c7:
86:77:b3:61:37:fe:70:48:4e:3c:28:9a:89:e2:78:40:82:f6:
f6:aa:4f:aa:f6:03:8e:c7:cd:4d:61:df:37:e4:50:0c:59:75:
a2:13:cd:2b:e5:48:7e:ae:29:9f:c4:6d:13:81:8e:11:78:90:
c5:44:11:04:e4:26:fe:db:08:6d:9c:ac:50:93:52:f0:a6:0e:
2b:9c:0d:f9:c8:8a:0a:3f:9c:5d:31:3d:5a:74:f0:cb:f1:8c:
1e:6e:8b:43:42:3e:d0:35:cd:ee:20:55:1d:62:87:fe:24:29:
21:f8:62:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:55 2024 by rpki-client on console-fra.rpki-client.org