Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/_cp5g_FZXNyujRMIRnZfolpqBuU.roa
File: _cp5g_FZXNyujRMIRnZfolpqBuU.roa (raw, json)
Hash identifier: JfbmpHK8JtibD0sBWmiLAYw0ImjOMF+SsqrvXq61zPI=
Subject key identifier: FD:CA:79:83:F1:59:5C:DC:AE:8D:13:08:46:76:5F:A2:5A:6A:06:E5
Certificate issuer: /CN=6911245ae2025155c09bec25a8991d567af1841d
Certificate serial: 01856C65EBEC7CF3B7832D00A779C4379C44
Authority key identifier: 69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/_cp5g_FZXNyujRMIRnZfolpqBuU.roa
Signing time: Sun 01 Jan 2023 08:14:56 +0000
ROA not before: Sun 01 Jan 2023 08:14:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203752
IP address blocks: 185.125.60.0/22 maxlen: 22
2a03:94a0::/32 maxlen: 32
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:65:eb:ec:7c:f3:b7:83:2d:00:a7:79:c4:37:9c:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6911245ae2025155c09bec25a8991d567af1841d
Validity
Not Before: Jan 1 08:14:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fdca7983f1595cdcae8d130846765fa25a6a06e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:79:76:97:27:fa:22:23:77:ef:0c:d4:45:d0:
6b:b1:28:cb:5f:b1:ae:35:7d:58:32:dd:37:b1:97:
d1:cc:30:49:1f:a1:0b:82:28:ba:51:5c:b8:b5:e4:
a0:68:39:64:12:f0:2f:ab:38:e6:d2:83:bc:03:79:
60:9e:c2:39:f8:21:5a:8a:97:69:bf:fa:b1:40:86:
3c:ce:5c:7f:09:a7:df:8a:61:d4:14:89:c2:20:c6:
89:98:73:37:b5:b0:bf:77:8d:87:af:27:de:e8:dc:
f7:f8:88:86:33:df:23:3d:00:6c:13:4b:60:b6:c8:
fb:3d:7a:8c:aa:70:d8:ec:b3:b3:e8:9b:2e:42:2d:
ca:99:93:46:8d:9a:4f:c3:2a:77:f1:bc:ab:86:d5:
1e:09:a5:38:0a:af:1c:31:e6:c2:d1:c0:f1:97:ba:
58:6d:f7:c9:19:73:ab:1e:15:2d:0e:b2:19:18:ea:
28:d5:51:1a:bb:a7:4f:21:30:b7:f8:2f:2f:89:75:
6c:9a:66:ce:84:a1:03:5f:d9:45:76:35:5a:8d:1d:
02:12:c0:2e:80:29:e2:6a:2d:d6:c4:90:9d:ea:b8:
e5:8e:0e:e3:4c:e9:0f:59:bb:aa:a4:bc:fe:c6:7a:
a5:d7:34:1c:89:b2:2b:2f:3b:2e:dc:f2:d7:4e:7d:
3b:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CA:79:83:F1:59:5C:DC:AE:8D:13:08:46:76:5F:A2:5A:6A:06:E5
X509v3 Authority Key Identifier:
keyid:69:11:24:5A:E2:02:51:55:C0:9B:EC:25:A8:99:1D:56:7A:F1:84:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aREkWuICUVXAm-wlqJkdVnrxhB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/_cp5g_FZXNyujRMIRnZfolpqBuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0e4dd5-9c8f-4856-90d7-1e1e9cbf47da/1/aREkWuICUVXAm-wlqJkdVnrxhB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.60.0/22
IPv6:
2a03:94a0::/32
Signature Algorithm: sha256WithRSAEncryption
45:a6:b8:f5:68:af:e9:c0:87:df:60:d8:72:81:8f:88:0e:c5:
6e:ac:3e:02:fc:c3:f9:fd:1c:44:ce:2b:05:50:de:49:7b:4b:
f6:ad:82:dd:d3:9d:0b:68:20:e7:49:e8:55:ba:86:be:c2:73:
b4:2e:98:ce:17:1a:27:b6:8c:24:93:8b:5e:16:63:96:f9:29:
bc:4d:44:cb:6c:e5:b7:c2:9e:5b:af:1e:98:b0:f3:9b:76:4e:
be:89:10:8e:28:69:24:2d:b1:a4:80:a1:d8:89:12:8f:27:83:
9a:1e:79:ff:a5:0f:12:45:76:a6:cd:71:d5:e0:73:70:ff:58:
83:92:40:2f:4b:94:4a:6d:00:28:69:f2:52:8f:ae:e3:0c:0a:
b1:c6:2c:8d:ab:b8:22:97:a9:4e:08:ae:34:d7:40:4a:9e:30:
d5:6e:60:58:03:dd:35:f7:96:38:8a:57:17:03:c6:e6:34:90:
e9:aa:d9:2d:4f:09:5f:a9:81:dd:10:ca:e4:52:31:61:1c:b1:
14:65:2a:6f:c5:9e:10:00:34:27:94:dc:8a:80:0b:46:07:d1:
48:d5:00:c4:7b:a2:57:ad:c5:e9:7c:66:5c:68:78:92:04:c8:
08:33:79:9b:d6:9e:f2:3c:45:9a:59:52:0c:1a:e4:59:e7:e8:
7b:7b:90:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:19:57 2024 by rpki-client on console-ams.rpki-client.org