Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/tjmABJI95FjCQ7zOQxgaRQHNv0w.roa
File: tjmABJI95FjCQ7zOQxgaRQHNv0w.roa (raw, json)
Hash identifier: VD0F+XsiQo3fPoE/wqJsz/nvgJA1ayuXWZvQ26Kro4E=
Subject key identifier: B6:39:80:04:92:3D:E4:58:C2:43:BC:CE:43:18:1A:45:01:CD:BF:4C
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 01856EEFEE41C79103025BBE62E574F77F23
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/tjmABJI95FjCQ7zOQxgaRQHNv0w.roa
Signing time: Sun 01 Jan 2023 20:04:55 +0000
ROA not before: Sun 01 Jan 2023 20:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210191
IP address blocks: 185.212.67.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:30:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:ef:ee:41:c7:91:03:02:5b:be:62:e5:74:f7:7f:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jan 1 20:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b6398004923de458c243bcce43181a4501cdbf4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:fb:e6:e3:ec:e3:e4:fd:80:5b:34:d2:42:08:
eb:0c:a3:c2:93:e7:d5:d4:fe:a8:cb:16:ce:f6:a3:
c2:76:b6:37:15:d7:7c:02:c4:6a:7c:7b:c0:f6:46:
a7:7f:88:da:f7:e7:ea:0e:ad:d5:ab:fd:7c:6b:df:
95:ac:a0:f4:71:c2:e7:2f:08:64:01:c5:85:b5:ab:
6a:55:7f:6d:72:5a:28:19:21:2b:ff:28:99:4a:65:
62:da:e2:da:ab:9d:fb:47:a3:af:41:4f:02:e1:46:
d4:17:05:75:14:21:8a:9a:42:68:87:5e:da:65:b2:
50:c3:70:0e:b1:80:53:66:45:82:b9:9c:41:01:3c:
2e:5e:41:99:e0:16:38:fb:67:da:a2:ea:77:c4:b1:
be:7e:1f:07:96:90:ae:b2:60:06:f7:d1:14:20:cd:
75:95:54:b4:b2:d1:83:ce:94:db:30:0a:52:47:d6:
95:00:8e:da:0a:fc:fe:2f:95:38:b0:49:e3:0a:64:
61:b8:0a:fd:1b:aa:f8:f5:c5:6f:b4:8c:c7:a5:ab:
b4:e9:97:17:17:98:b4:82:53:ed:4a:1f:98:3a:a1:
66:5d:58:3c:01:b1:c0:cc:9b:5d:19:a4:af:4f:a4:
75:00:3e:24:2f:37:df:b8:82:ba:64:3b:30:cd:aa:
4d:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:39:80:04:92:3D:E4:58:C2:43:BC:CE:43:18:1A:45:01:CD:BF:4C
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/tjmABJI95FjCQ7zOQxgaRQHNv0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.67.0/24
Signature Algorithm: sha256WithRSAEncryption
08:2a:2d:aa:2a:cf:01:1a:34:3b:7f:22:9d:0d:88:a8:46:77:
4e:a2:c1:c8:a8:6b:d8:18:a1:59:be:80:48:a0:3b:06:21:ab:
97:38:77:2b:86:f6:b0:b9:99:05:fb:fc:80:39:5e:2f:89:c3:
a3:bc:dc:bd:1f:5d:c1:31:5f:da:a3:b5:63:04:67:34:a7:7b:
91:3f:d0:f3:49:0d:a9:65:03:fa:2c:91:2a:37:96:28:dd:08:
5e:b2:dd:5d:de:80:7c:ed:70:1f:e2:77:64:36:b5:7e:e1:2e:
f3:85:b9:59:2b:60:51:13:6f:5d:b7:71:bd:2d:81:2e:3c:93:
6a:63:37:c4:14:ba:6d:e8:ca:96:47:69:f4:7c:7a:61:04:f6:
cb:53:f8:1d:69:2c:96:ad:ff:80:0a:18:e0:7f:97:ae:b7:12:
c9:c8:f7:79:80:3b:6c:d7:d9:7a:3f:bf:a5:b0:d6:83:a9:45:
75:26:95:5e:91:f8:c8:d1:50:bd:7f:b0:7e:d5:2a:bd:c9:de:
d7:da:c8:bd:aa:ae:ba:20:1a:40:61:87:07:94:9f:e7:2f:8f:
01:60:8f:e8:bc:69:a0:d9:68:a2:5a:ff:70:6d:6c:26:83:1f:
d4:72:50:1f:0d:48:b3:b9:96:af:17:4a:69:5f:ec:2d:7c:4f:
3a:f9:ad:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:21 2024 by rpki-client on console-fra.rpki-client.org