Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/84z7DXPtrryD7xi7nnx7x1g-y6o.roa
File: 84z7DXPtrryD7xi7nnx7x1g-y6o.roa (raw, json)
Hash identifier: y4hSInu5TqB7PZTbPhhNbu0QULp8ZQtR2OIX5GLKO4M=
Subject key identifier: F3:8C:FB:0D:73:ED:AE:BC:83:EF:18:BB:9E:7C:7B:C7:58:3E:CB:AA
Certificate issuer: /CN=845d042f65e1b1303a44e43e0e02748a75837b44
Certificate serial: 01856E265D4FFAEA580B5B4357335AFBAC80
Authority key identifier: 84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/84z7DXPtrryD7xi7nnx7x1g-y6o.roa
Signing time: Sun 01 Jan 2023 16:24:45 +0000
ROA not before: Sun 01 Jan 2023 16:24:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12459
IP address blocks: 185.241.212.0/24 maxlen: 24
185.119.89.0/24 maxlen: 24
185.119.90.0/24 maxlen: 24
2a0c:bf80:5a::/48 maxlen: 48
Validation: Failed, certificate revoked on Sun 05 Nov 2023 13:26:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:26:5d:4f:fa:ea:58:0b:5b:43:57:33:5a:fb:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845d042f65e1b1303a44e43e0e02748a75837b44
Validity
Not Before: Jan 1 16:24:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f38cfb0d73edaebc83ef18bb9e7c7bc7583ecbaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:3e:ea:e8:1f:f3:87:bd:26:f3:f8:88:a8:
0a:52:b6:bd:1a:2c:e9:d7:24:ad:71:19:7b:7e:72:
ab:6d:1a:3f:38:df:e7:a9:6b:98:89:17:7a:62:d8:
5c:fc:cb:81:49:f6:4f:6e:4a:f9:64:98:1a:c9:e6:
8c:aa:85:d0:3b:8c:94:b9:ee:a7:64:71:6d:db:bf:
92:8c:84:79:e8:b3:4b:88:ed:58:d4:16:36:3b:f1:
b5:d8:c4:28:d5:73:80:30:4d:b7:6b:f0:98:eb:f7:
26:93:16:f1:fe:2c:a4:7c:33:4d:7e:19:7c:26:b3:
67:49:1a:50:0d:96:4c:82:34:4a:f2:c9:e1:e1:24:
e0:e7:09:52:ab:30:cc:72:20:1a:bf:33:54:b8:ba:
7e:3d:52:c3:2d:e4:f9:dc:7f:10:75:b1:c7:fc:47:
10:8d:7d:01:16:0c:d8:55:18:2b:ad:af:f8:4c:1f:
b1:87:62:79:9a:c6:5a:d2:ea:e5:59:98:17:51:75:
67:02:c5:00:44:55:20:72:e6:5e:61:ec:f7:7d:f6:
66:0a:7d:90:07:cf:d7:bd:5b:56:7a:bf:54:8e:5c:
89:0b:a5:96:58:f5:22:a8:0c:5b:a9:42:fa:aa:66:
5d:2e:54:4f:fa:2f:f3:64:aa:3e:7f:c5:d2:f7:18:
05:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:FB:0D:73:ED:AE:BC:83:EF:18:BB:9E:7C:7B:C7:58:3E:CB:AA
X509v3 Authority Key Identifier:
keyid:84:5D:04:2F:65:E1:B1:30:3A:44:E4:3E:0E:02:74:8A:75:83:7B:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/84z7DXPtrryD7xi7nnx7x1g-y6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/96dbcd-6a39-4c20-9128-d8c351d93ec6/1/hF0EL2XhsTA6ROQ-DgJ0inWDe0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.119.89.0-185.119.90.255
185.241.212.0/24
IPv6:
2a0c:bf80:5a::/48
Signature Algorithm: sha256WithRSAEncryption
65:f3:6d:70:b0:e7:29:b3:08:30:83:22:35:b3:0d:7d:ee:ab:
52:cf:56:93:2c:ef:c5:7c:95:9d:9d:fc:28:2c:9d:3f:81:64:
71:59:35:92:6c:07:dd:c7:26:f4:b8:ed:17:7e:0c:a7:93:4b:
68:94:d6:83:2a:3e:a1:ec:71:da:e0:1c:81:1e:71:e7:6c:03:
ca:39:19:a4:5d:a2:52:d6:c6:92:09:6a:cd:d2:80:b6:bb:37:
7b:0a:04:ea:49:c9:85:e9:b4:bf:98:11:e6:97:c0:53:35:cc:
fe:d5:fe:42:0b:e2:f6:8e:7d:48:68:4b:42:36:40:2c:3e:70:
c7:03:d0:b1:5e:4e:ee:73:73:c9:2f:06:89:2c:8f:b9:58:ae:
12:54:8e:59:c7:a4:70:90:ba:29:27:d4:0a:85:8f:44:6a:0a:
c6:35:cd:08:a3:0a:81:63:c1:f9:54:f2:67:8c:15:d3:f5:89:
ff:b2:33:08:69:dc:6e:34:90:b6:72:ab:20:ff:a3:77:08:0b:
51:5e:5b:55:3d:6b:20:e6:71:2a:de:fd:8c:e4:63:91:db:3b:
35:f2:01:f3:16:a6:92:d6:7b:89:af:49:b6:95:f1:ae:aa:4c:
ed:8f:62:e9:6e:68:ab:43:64:24:00:bb:5b:6a:2b:ea:a2:30:
b4:1a:9b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:38:56 2024 by rpki-client on console-fra.rpki-client.org