Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/FBMSmmZuJhntJWku9zUfNXbH_QQ.roa
File: FBMSmmZuJhntJWku9zUfNXbH_QQ.roa (raw, json)
Hash identifier: YmGhugrNHNibjEE36h22nkqyjAYCnlv25x5eH7dR6lw=
Subject key identifier: 14:13:12:9A:66:6E:26:19:ED:25:69:2E:F7:35:1F:35:76:C7:FD:04
Certificate issuer: /CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Certificate serial: 01856F94A62E3F41FD6793B7A9364F51969D
Authority key identifier: DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/FBMSmmZuJhntJWku9zUfNXbH_QQ.roa
Signing time: Sun 01 Jan 2023 23:04:50 +0000
ROA not before: Sun 01 Jan 2023 23:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204429
IP address blocks: 185.217.84.0/24 maxlen: 24
185.217.84.0/22 maxlen: 22
185.217.85.0/24 maxlen: 24
185.217.87.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:94:a6:2e:3f:41:fd:67:93:b7:a9:36:4f:51:96:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de8b8549e8cf71e91faa63b40791e6bfbbfdac04
Validity
Not Before: Jan 1 23:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1413129a666e2619ed25692ef7351f3576c7fd04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:56:1e:27:4d:f7:d3:dd:c9:a5:8a:24:97:2f:
6e:13:32:13:51:26:5c:7b:c1:19:64:ca:64:9d:ea:
38:7c:62:8a:60:bc:f2:69:50:f3:28:1e:56:ab:52:
40:ad:6b:dc:4b:0c:24:5e:f6:66:24:16:01:31:9a:
76:cc:d9:60:1e:62:d9:a1:e7:8c:dd:25:c0:5b:12:
76:a8:30:56:20:fc:c3:d7:32:18:1b:b2:4c:16:29:
58:f1:a4:ff:7f:0f:bf:85:72:f0:e6:d3:15:85:cb:
56:41:dd:71:26:75:b8:f6:3d:6f:7d:89:11:6d:2a:
e2:31:14:6d:5b:56:dd:e7:cf:72:37:a3:cb:71:c9:
ff:67:64:57:b7:2a:94:92:88:53:5f:3d:36:ae:dd:
9a:fb:b2:7d:ed:9c:b1:e4:b5:f7:ba:0d:bc:4f:85:
28:2a:0c:1a:b2:7b:89:74:5a:b9:fd:9f:c3:40:19:
45:ec:60:af:62:02:59:22:04:14:43:84:48:80:da:
d4:54:88:5e:04:c5:ef:43:a3:71:8b:21:f9:65:77:
db:7e:1d:7a:72:9c:17:3c:a9:32:ff:2f:60:5c:64:
cc:0d:22:fa:78:3c:9d:92:92:cf:ab:50:78:23:fa:
57:eb:6f:21:51:d4:54:3d:a6:71:5e:3a:73:2d:78:
89:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:13:12:9A:66:6E:26:19:ED:25:69:2E:F7:35:1F:35:76:C7:FD:04
X509v3 Authority Key Identifier:
keyid:DE:8B:85:49:E8:CF:71:E9:1F:AA:63:B4:07:91:E6:BF:BB:FD:AC:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3ouFSejPcekfqmO0B5Hmv7v9rAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/FBMSmmZuJhntJWku9zUfNXbH_QQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/36253f-cd8e-4fd0-ae37-e937099733c3/1/3ouFSejPcekfqmO0B5Hmv7v9rAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.217.84.0/22
Signature Algorithm: sha256WithRSAEncryption
79:74:09:4a:a6:af:86:51:42:5d:3a:4e:7b:b3:18:91:2c:98:
3d:8f:52:42:a5:5a:a8:53:92:4e:2c:fb:a2:84:ed:17:ed:04:
5c:b5:da:53:c5:76:1c:3d:c1:14:24:bc:50:b3:b7:90:12:58:
70:11:26:d3:df:0a:d7:f3:37:83:34:bf:fd:f5:0a:36:ec:a4:
6e:77:45:1d:8d:01:c6:34:b6:e0:71:71:67:6a:08:db:44:dd:
71:54:ca:da:76:48:d1:6c:1d:f2:47:10:1c:cd:1f:2c:64:b9:
97:bc:f7:23:c8:5b:e2:e0:c7:87:e3:56:3d:7d:62:e9:03:81:
b4:09:88:64:55:e8:54:ee:7a:84:d6:28:1c:a0:c5:d6:b1:28:
37:5c:3f:f1:50:03:f1:4e:13:ca:92:5e:e7:f9:ca:88:74:7b:
43:78:55:52:56:0b:7f:a2:7a:10:33:14:6b:f7:21:a9:63:dc:
0f:64:3d:cd:d5:6e:64:6e:6a:a7:fa:a7:94:20:e8:71:07:6d:
6b:bd:2d:e3:b7:3c:5d:5f:e4:2b:16:3b:90:c0:45:c8:60:e0:
32:55:a5:1f:cd:61:75:e5:6c:20:35:77:0d:9b:f4:ba:8e:ff:
4f:b1:0f:f7:12:18:db:80:fb:b0:2d:df:1f:a5:d2:87:56:14:
f1:34:c3:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 09:20:02 2024 by rpki-client on console-fra.rpki-client.org