Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/FRsxLZ2_hEiXqkANEN7EZNc5YzA.roa
File: FRsxLZ2_hEiXqkANEN7EZNc5YzA.roa (raw, json)
Hash identifier: N3ZM2x8INlxH97bwW7UOABRA3YCV+4KeRS4Ja6rWFI8=
Subject key identifier: 15:1B:31:2D:9D:BF:84:48:97:AA:40:0D:10:DE:C4:64:D7:39:63:30
Certificate issuer: /CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Certificate serial: 01907B0190B00092129BE85575937C6DAC3E
Authority key identifier: 95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/FRsxLZ2_hEiXqkANEN7EZNc5YzA.roa
Signing time: Wed 03 Jul 2024 23:50:18 +0000
ROA not before: Wed 03 Jul 2024 23:50:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 54203
IP address blocks: 185.147.212.0/24 maxlen: 24
185.147.213.0/24 maxlen: 24
185.147.215.0/24 maxlen: 24
2a03:efc0:200::/40 maxlen: 40
2a03:efc0:500::/40 maxlen: 40
2a03:efc0:700::/40 maxlen: 40
2a03:efc0:1100::/40 maxlen: 40
2a03:efc0:1300::/40 maxlen: 40
2a03:efc0:1500::/40 maxlen: 40
2a03:efc0:1900::/40 maxlen: 40
Validation: Failed, certificate revoked on Fri 05 Jul 2024 12:33:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:7b:01:90:b0:00:92:12:9b:e8:55:75:93:7c:6d:ac:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9502d8b8269c6b07f814acf0c7ed729b3f4b5984
Validity
Not Before: Jul 3 23:50:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=151b312d9dbf844897aa400d10dec464d7396330
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1e:42:3d:59:02:e2:a7:de:f4:8a:84:c9:4a:
81:a2:4b:c9:2f:d6:b7:50:27:67:a8:3c:5d:3c:69:
58:68:e9:5b:f2:c7:9b:c1:af:6f:1f:25:40:68:79:
cc:69:bb:2f:74:41:fa:c7:d3:eb:cc:f1:08:26:c4:
2a:7d:48:62:dd:b4:0d:7a:5b:a5:6f:ce:df:11:68:
d2:fb:ea:8e:47:5d:30:84:78:6e:71:dc:c6:68:1a:
93:61:02:6e:a3:97:f3:d8:85:66:b6:61:d9:d4:f0:
0b:f2:9b:3d:30:0e:84:2a:bc:be:46:16:84:2f:44:
3b:fe:df:7c:89:be:f2:b1:10:07:e5:1b:8e:bb:c2:
b6:07:99:61:1a:52:60:7b:01:dd:06:37:e3:11:ef:
00:86:2f:81:d9:66:62:58:ec:81:65:ab:23:5c:b0:
d7:6a:0e:fb:90:c0:e5:16:77:44:4b:3d:5c:32:92:
13:49:68:c5:aa:a3:86:ec:89:85:e5:05:f6:44:4d:
ca:e5:25:ec:46:fa:b2:d5:47:84:17:d4:ee:00:50:
8c:dd:a2:65:4b:9d:b7:b8:48:60:8a:9d:be:24:0a:
20:28:95:c4:3e:f4:9f:ed:e9:41:14:e3:b4:f6:cc:
73:fc:bd:97:80:a4:0c:68:79:b6:37:be:34:84:8a:
8c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1B:31:2D:9D:BF:84:48:97:AA:40:0D:10:DE:C4:64:D7:39:63:30
X509v3 Authority Key Identifier:
keyid:95:02:D8:B8:26:9C:6B:07:F8:14:AC:F0:C7:ED:72:9B:3F:4B:59:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lQLYuCacawf4FKzwx-1ymz9LWYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/FRsxLZ2_hEiXqkANEN7EZNc5YzA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/9decaf-47eb-4349-9e86-01b8bb6ad90a/1/lQLYuCacawf4FKzwx-1ymz9LWYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.147.212.0/23
185.147.215.0/24
IPv6:
2a03:efc0:200::/40
2a03:efc0:500::/40
2a03:efc0:700::/40
2a03:efc0:1100::/40
2a03:efc0:1300::/40
2a03:efc0:1500::/40
2a03:efc0:1900::/40
Signature Algorithm: sha256WithRSAEncryption
15:11:e2:bc:49:20:97:37:03:ce:1c:ec:c8:02:dc:47:62:0f:
95:5f:4d:b2:70:7f:56:90:7a:ba:7f:06:23:ac:17:58:ce:d8:
9f:12:f4:94:ab:91:e8:4d:ab:09:bd:c5:ad:f2:31:ed:cb:7d:
db:8a:27:a9:d1:af:75:e6:04:6a:0d:1e:45:1c:73:8a:0c:11:
a5:90:7b:4f:0e:3f:08:49:82:de:26:b3:b9:81:21:9a:ef:2d:
ae:d4:70:3c:31:ba:60:6d:e4:11:64:74:e7:57:a9:dd:9c:f5:
9d:b6:45:06:80:d8:d6:fc:09:c3:fd:13:76:f3:08:83:e3:1a:
e4:ad:20:e5:da:56:fe:14:70:07:54:bb:69:a9:18:ba:95:13:
66:b3:c5:74:51:75:d0:de:70:47:6c:ec:46:01:2a:3c:78:08:
9d:5f:7d:d7:b3:1f:88:a8:be:70:96:ef:9d:32:86:1e:1d:ab:
57:81:f3:f9:03:3c:84:88:e5:dd:fc:60:49:36:f9:bc:82:75:
93:11:61:2d:8d:65:60:e6:d7:c0:6c:16:db:c2:ca:8e:85:68:
25:d0:5c:f7:93:22:30:11:28:f3:7a:33:40:69:c7:14:f7:6d:
0f:8b:a2:88:8e:a0:92:0d:fd:78:a1:bc:2c:11:ef:bf:5b:c2:
27:8b:87:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 5 14:45:58 2024 by rpki-client on console-fra.rpki-client.org