Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/fuh3lTPpYeC3-xfDtBFEKKLs1Hk.roa
File: fuh3lTPpYeC3-xfDtBFEKKLs1Hk.roa (raw, json)
Hash identifier: oR48ExXqMCfqNImShLOTPiSCNvUDRRgHMwieqJYZf6Y=
Subject key identifier: 7E:E8:77:95:33:E9:61:E0:B7:FB:17:C3:B4:11:44:28:A2:EC:D4:79
Certificate issuer: /CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Certificate serial: 01856CAEF895BE452DD9C6FC008FBBBEED71
Authority key identifier: 9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/fuh3lTPpYeC3-xfDtBFEKKLs1Hk.roa
Signing time: Sun 01 Jan 2023 09:34:44 +0000
ROA not before: Sun 01 Jan 2023 09:34:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201942
IP address blocks: 217.67.164.0/22 maxlen: 22
217.67.172.0/22 maxlen: 24
217.67.168.0/21 maxlen: 21
185.159.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:29:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:ae:f8:95:be:45:2d:d9:c6:fc:00:8f:bb:be:ed:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cce3b1197d0cf9511540572a58fd372dcc07489
Validity
Not Before: Jan 1 09:34:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ee8779533e961e0b7fb17c3b4114428a2ecd479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:1f:77:a1:d8:57:54:f7:c7:0a:24:b3:f3:f8:
c7:74:1a:47:30:5f:58:93:7b:b0:9b:67:66:fe:4b:
54:40:d3:ed:17:8b:65:d5:43:6b:79:ef:fe:94:fc:
37:38:89:d0:b4:bc:39:f3:94:31:cd:1b:ab:c8:28:
08:9c:ad:d5:bf:6a:8c:2f:05:55:6c:a7:31:de:cb:
ac:8c:fc:1a:86:6e:22:7a:aa:a0:17:e2:41:67:ea:
70:54:56:fa:ec:77:9a:7a:6f:57:03:d5:a5:fe:12:
8a:73:1f:0a:07:00:2c:a1:b2:3c:40:f8:7f:27:ad:
cf:0b:54:34:b2:81:af:a6:82:a5:98:e8:59:86:b0:
63:a4:c4:ea:20:c5:a2:5c:06:f8:3a:74:3f:9d:82:
71:a3:9b:41:d3:6e:a3:ed:92:d9:22:83:45:92:a9:
e7:ca:38:b1:a7:6e:ce:e6:c5:f8:00:00:8a:07:80:
3b:de:6b:b8:d3:ec:93:6b:2d:e1:62:d0:a1:9b:ce:
7e:66:5f:29:78:ce:f6:e5:86:f0:32:03:f5:7c:48:
72:e5:56:0d:3e:61:54:a7:39:8a:62:ab:9b:9c:99:
39:ae:3d:2a:0f:15:65:dc:c2:c3:f0:d7:09:6b:6a:
96:b2:1d:44:d7:ab:8d:37:13:ce:65:e3:1b:a6:1d:
64:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:E8:77:95:33:E9:61:E0:B7:FB:17:C3:B4:11:44:28:A2:EC:D4:79
X509v3 Authority Key Identifier:
keyid:9C:CE:3B:11:97:D0:CF:95:11:54:05:72:A5:8F:D3:72:DC:C0:74:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nM47EZfQz5URVAVypY_TctzAdIk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/fuh3lTPpYeC3-xfDtBFEKKLs1Hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/4f2367-73f3-4816-bea8-a045ff8e2ac0/1/nM47EZfQz5URVAVypY_TctzAdIk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.159.40.0/22
217.67.164.0-217.67.175.255
Signature Algorithm: sha256WithRSAEncryption
94:7b:d2:25:b0:93:48:b6:d0:18:ca:5d:f5:42:9f:b1:72:1e:
4a:60:0a:91:41:3c:75:38:73:bc:4a:24:d2:62:44:1d:f7:11:
bc:b4:49:57:23:f1:31:a3:f8:df:e4:00:f2:56:df:5d:80:66:
cd:86:10:1b:86:f4:3a:a5:0c:cc:c2:d3:18:ff:ce:e8:27:9a:
3e:4d:97:6d:fb:06:98:55:d9:2c:24:71:7d:07:31:c4:fc:3c:
65:4c:fd:fe:c6:54:a1:a9:9e:26:e8:cc:dd:2d:62:bb:fe:9f:
5a:a0:5c:da:99:77:e8:55:44:b0:6c:3b:67:4b:94:ac:b0:4f:
a5:49:19:44:22:08:e9:01:23:38:ff:c2:77:ee:5d:ee:24:d1:
cf:ae:2a:b9:43:bc:c0:cc:b8:f8:83:5e:40:a1:0c:29:b8:15:
42:64:24:2a:01:68:de:21:de:5a:4f:df:df:bd:09:5f:aa:52:
e6:ec:e8:6e:69:d0:74:2f:c0:1b:66:1e:98:f8:c4:4d:c2:a9:
ab:a6:43:0a:76:de:dc:e5:23:18:24:15:a5:39:d9:9b:14:41:
4a:f8:5a:d1:b4:73:52:2d:c5:cb:e3:d6:9d:c6:3e:74:b5:21:
01:78:94:ff:dc:fc:42:ff:89:8f:82:4c:6a:50:33:f7:e6:e3:
de:08:63:c2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:18:04 2024 by rpki-client on console-ams.rpki-client.org