Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/61ViItja1sejNGrYyb9J41tJjmI.roa
File: 61ViItja1sejNGrYyb9J41tJjmI.roa (raw, json)
Hash identifier: J0urEqFYIPyrI1A2wnX5cdXGFanALL099dJgc5NwSJU=
Subject key identifier: EB:55:62:22:D8:DA:D6:C7:A3:34:6A:D8:C9:BF:49:E3:5B:49:8E:62
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 01856EEFED8FFF0F56A851F40EA4AB8EFB8A
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/61ViItja1sejNGrYyb9J41tJjmI.roa
Signing time: Sun 01 Jan 2023 20:04:55 +0000
ROA not before: Sun 01 Jan 2023 20:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205604
IP address blocks: 185.212.64.0/24 maxlen: 24
185.212.65.0/24 maxlen: 24
185.212.66.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ed:8f:ff:0f:56:a8:51:f4:0e:a4:ab:8e:fb:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 1 20:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=eb556222d8dad6c7a3346ad8c9bf49e35b498e62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:70:aa:4b:0e:17:35:27:6e:94:9a:bd:0a:23:
83:a3:7b:9d:f2:49:91:fd:d8:db:e7:2e:ec:8c:6a:
2a:22:13:8e:54:e0:e9:33:72:2b:a8:40:01:69:48:
d3:b5:47:88:35:1b:91:87:b9:76:6b:9b:34:7d:17:
ec:ec:88:c2:07:bc:b1:70:a1:66:4e:95:63:25:d7:
28:a0:7b:73:31:c4:17:21:62:90:3c:f8:ad:6f:6f:
d3:0e:41:3e:c6:c5:33:b0:15:d4:4b:53:0a:2e:70:
60:d2:7b:42:3c:dd:dc:02:d0:2a:a3:fd:a0:2e:02:
55:f8:67:52:c5:9e:1e:09:08:72:07:5e:9e:c6:a5:
ad:a1:5b:7f:44:3d:6c:db:46:ee:21:08:d6:b9:fa:
9a:30:94:37:fd:fa:66:f0:69:83:85:26:b9:ba:98:
26:e1:65:c7:34:4b:fe:59:6f:5a:ad:5a:f6:6b:0b:
10:be:42:fb:f5:e0:56:f8:0f:07:6d:4b:21:70:f7:
6e:d7:37:77:31:20:98:52:8e:cb:06:f3:6c:60:47:
8e:58:6c:1f:ab:2b:3d:7e:9a:14:a9:69:54:48:0b:
2a:b8:2f:50:96:1c:d0:ce:0b:9b:e4:07:89:4e:db:
c4:3d:b7:f5:dd:d4:ab:cf:e7:75:64:a1:1c:54:6a:
e2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:55:62:22:D8:DA:D6:C7:A3:34:6A:D8:C9:BF:49:E3:5B:49:8E:62
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/61ViItja1sejNGrYyb9J41tJjmI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.64.0-185.212.66.255
Signature Algorithm: sha256WithRSAEncryption
67:cf:57:66:b6:46:77:29:24:21:66:e8:9b:c0:bd:5e:da:08:
fc:37:35:56:51:2b:4e:18:2a:2d:27:f1:70:35:06:d3:2d:9a:
3f:8a:37:c4:55:2e:ce:4f:22:49:1d:a0:d0:98:62:c1:5e:c5:
7d:a5:2d:c6:de:2b:9d:12:aa:9d:da:3b:dc:44:84:fd:c7:86:
12:c1:19:6f:76:f0:8e:33:27:0c:95:1b:51:13:57:f2:bd:70:
3b:d4:7a:aa:30:97:3d:63:62:c6:c0:45:9b:df:82:87:9f:ee:
39:15:5f:c1:b9:c7:2c:fe:50:07:57:fa:5c:92:31:17:ee:ac:
21:26:ee:62:fb:3a:07:95:c6:40:15:e9:93:5b:bf:8f:17:fc:
e4:9d:74:ac:dd:de:cc:72:54:30:8d:8b:7d:27:b2:8d:cf:62:
7b:9a:32:a4:39:d2:c0:7c:f0:57:79:2c:ad:1d:44:29:2f:e7:
e1:02:6a:f8:ba:ca:b5:05:f4:f4:16:32:36:37:2d:a7:c6:f8:
3c:ab:a6:a4:a6:29:b9:38:fe:64:c2:29:db:97:d5:5c:87:b7:
f0:14:95:d2:5e:1b:24:1b:06:8c:16:fb:cd:f4:de:6d:5b:1d:
18:b0:59:45:4b:1d:48:35:a4:e1:33:7d:df:04:d2:84:80:07:
12:66:0d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:36 2024 by rpki-client on console-ams.rpki-client.org