Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FOYF6kjv9omXMT_W0Bn3s0Mvp2c.roa
File: FOYF6kjv9omXMT_W0Bn3s0Mvp2c.roa (raw, json)
Hash identifier: MR6IjbMp10L6IM35mBtb/33CfOdF5EKQyqvBoTxRGjE=
Subject key identifier: 14:E6:05:EA:48:EF:F6:89:97:31:3F:D6:D0:19:F7:B3:43:2F:A7:67
Certificate issuer: /CN=18101772248996b87d90840c2d27d62549458173
Certificate serial: 018CE2C0B0A7683BCD139D74D01DAEB5F824
Authority key identifier: 18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FOYF6kjv9omXMT_W0Bn3s0Mvp2c.roa
Signing time: Sun 07 Jan 2024 07:08:48 +0000
ROA not before: Sun 07 Jan 2024 07:08:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 152179
IP address blocks: 188.64.104.0/22 maxlen: 24
185.179.218.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 07:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:e2:c0:b0:a7:68:3b:cd:13:9d:74:d0:1d:ae:b5:f8:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18101772248996b87d90840c2d27d62549458173
Validity
Not Before: Jan 7 07:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=14e605ea48eff68997313fd6d019f7b3432fa767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:c0:3f:be:9d:3c:a6:e0:7f:71:e3:09:85:c8:
6b:12:0d:80:4f:fb:9a:6f:48:8b:ca:27:07:32:ef:
8f:83:b9:80:42:dd:25:42:5a:d2:df:01:4e:ae:6f:
f2:b8:3f:0c:ce:4e:c8:65:21:ec:a1:27:42:b3:10:
43:76:3a:23:9b:b4:ac:fb:23:e7:1e:10:9e:a1:c9:
35:70:f5:f2:60:99:0e:24:14:7f:ce:50:d5:0a:1f:
79:66:3e:ed:bc:07:4b:f4:e1:ec:40:97:9c:1f:60:
ad:0b:93:4f:fb:dc:51:0c:13:81:19:bb:a9:bb:4a:
13:34:0d:d2:fd:3a:9b:e9:4e:86:7d:a2:76:b0:ad:
3b:d4:13:0b:04:8d:62:7e:15:18:4e:c9:25:0a:42:
a1:50:22:42:6f:47:61:86:fb:94:cf:ad:2b:65:34:
07:99:07:86:92:a9:9d:40:82:b3:df:1d:ea:d5:b6:
73:c2:98:3d:b4:c1:ea:67:3c:d5:06:07:9c:28:a5:
9b:e2:14:5d:59:84:f4:23:4b:d8:12:dc:6e:39:11:
c6:ed:e6:80:da:48:48:ce:25:4d:42:64:62:f1:f1:
07:9e:b9:f6:ca:97:5d:57:6d:d1:69:30:b5:d9:24:
11:ad:28:45:ac:6a:e4:ec:dd:54:58:fd:83:3e:56:
85:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E6:05:EA:48:EF:F6:89:97:31:3F:D6:D0:19:F7:B3:43:2F:A7:67
X509v3 Authority Key Identifier:
keyid:18:10:17:72:24:89:96:B8:7D:90:84:0C:2D:27:D6:25:49:45:81:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GBAXciSJlrh9kIQMLSfWJUlFgXM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/FOYF6kjv9omXMT_W0Bn3s0Mvp2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/81/20a5a5-0ba2-4052-beb4-3cc85ad3c190/1/GBAXciSJlrh9kIQMLSfWJUlFgXM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.179.218.0/23
188.64.104.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:49:35:23:ad:97:c6:2e:9c:dc:a5:8c:c6:5a:59:c0:94:66:
de:8b:8c:ca:f7:26:84:fd:67:39:38:2f:6c:e4:6f:0e:f8:b8:
7e:ca:39:17:85:45:94:6a:c5:0d:b4:ba:3a:ef:29:89:2a:72:
2d:8c:44:f3:c1:6a:9e:ea:5e:bd:17:2b:24:9f:5b:81:fb:04:
9c:e0:b7:97:6e:f4:61:86:8d:d0:ab:24:11:c5:4a:64:c4:36:
44:c5:be:fd:3a:02:68:d6:9f:b6:97:a0:57:d9:f5:af:ea:dd:
5b:7f:b1:fe:6b:98:32:e2:43:f2:97:4c:d2:20:c8:a0:ae:3b:
ca:a1:a1:4e:bc:2a:31:20:ef:c7:b0:6f:6f:5d:5e:ba:6f:d6:
d9:c8:8b:22:07:bd:e9:26:3a:40:0d:c5:10:1e:ed:bd:8c:61:
74:21:f9:bc:84:e3:89:77:39:29:00:af:71:8f:c6:36:06:75:
7e:e0:f6:71:d1:04:6a:68:f6:e7:ed:a1:ae:51:3b:5a:08:e5:
a1:e0:b0:eb:4a:66:8c:be:20:73:1c:8b:a1:81:b7:7d:d3:9e:
73:c2:3c:25:0c:4f:80:a3:e4:cf:2f:33:a3:98:fa:c2:59:07:
b4:8b:68:f0:f8:28:98:d1:2c:42:9c:5a:73:46:6f:f8:78:ee:
47:0c:f4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:20:38 2024 by rpki-client on console-ams.rpki-client.org