Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/FATNiSj0PQAJnHAr12pZDJwK4Zg.roa
File: FATNiSj0PQAJnHAr12pZDJwK4Zg.roa (raw, json)
Hash identifier: 9XtFUWdZhJBtEx9E1zhgB7RtE0l0YyptNXPRTT+6+fA=
Subject key identifier: 14:04:CD:89:28:F4:3D:00:09:9C:70:2B:D7:6A:59:0C:9C:0A:E1:98
Certificate issuer: /CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Certificate serial: 018C579FD1CDCC7B54D6329C9BEF650BF567
Authority key identifier: 89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/FATNiSj0PQAJnHAr12pZDJwK4Zg.roa
Signing time: Mon 11 Dec 2023 06:45:40 +0000
ROA not before: Mon 11 Dec 2023 06:45:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60051
IP address blocks: 185.141.8.0/24 maxlen: 24
185.141.9.0/24 maxlen: 24
185.141.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:9f:d1:cd:cc:7b:54:d6:32:9c:9b:ef:65:0b:f5:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=896ed6e4b5c7c19db98c57432af4dcf630bf60ae
Validity
Not Before: Dec 11 06:45:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1404cd8928f43d00099c702bd76a590c9c0ae198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:81:64:fa:47:4b:70:9a:2b:0f:25:b2:f8:d2:
48:1e:ae:fa:c1:d5:c3:ec:98:93:16:bd:24:14:e2:
d9:f3:87:71:10:58:7f:93:8f:e4:70:92:f0:a5:4e:
e8:f4:fc:34:63:33:98:5c:e5:fc:37:a5:b2:dc:9c:
c6:21:eb:d7:08:e0:0f:e7:92:d8:b5:c8:c4:b5:b8:
08:7c:11:4a:c1:e1:0d:f1:d1:d3:77:33:70:5e:68:
2b:4e:57:b3:ef:86:8f:b5:80:75:e3:77:49:cd:ab:
2a:e1:43:11:65:db:f5:49:d1:54:8b:76:eb:48:33:
0c:ef:9e:08:5f:ce:e5:03:99:ba:3d:b7:17:1f:ad:
43:ec:e1:c3:4c:90:b6:e7:da:f6:7c:f4:5f:53:34:
5f:c0:07:75:fb:75:74:3e:58:26:55:98:da:ea:50:
55:01:ae:7d:f1:f8:c2:1e:c4:5c:85:d1:55:01:5b:
cd:e0:d0:e6:de:b5:b4:a8:bb:df:31:f3:90:c8:4f:
dd:3b:ca:92:d8:da:c7:2d:67:e5:79:c1:b1:13:5e:
b2:b9:72:5c:3c:ef:60:00:fc:3b:51:c5:c0:71:a6:
6e:ce:af:f6:52:12:ec:30:4c:02:26:70:e5:b1:0f:
4d:c0:03:9e:db:30:03:12:ad:9d:6d:7e:50:84:cf:
f4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:04:CD:89:28:F4:3D:00:09:9C:70:2B:D7:6A:59:0C:9C:0A:E1:98
X509v3 Authority Key Identifier:
keyid:89:6E:D6:E4:B5:C7:C1:9D:B9:8C:57:43:2A:F4:DC:F6:30:BF:60:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iW7W5LXHwZ25jFdDKvTc9jC_YK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/FATNiSj0PQAJnHAr12pZDJwK4Zg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/900444-dd40-4a04-a616-dc1ff6746d2e/1/iW7W5LXHwZ25jFdDKvTc9jC_YK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.8.0-185.141.10.255
Signature Algorithm: sha256WithRSAEncryption
84:66:46:e0:f4:28:08:ee:c6:1a:b0:90:38:16:14:8d:ae:bc:
5c:a7:75:e6:cb:2e:86:9f:e9:28:dd:b9:c9:56:ee:87:7c:5a:
92:c1:84:54:dd:09:d2:84:8d:28:1a:62:e8:3c:2b:0f:f4:cb:
64:21:41:7e:0b:3a:ca:6e:f0:aa:01:5c:00:f5:2f:a2:98:85:
25:03:3b:61:bd:24:72:9b:0b:43:d8:cb:0a:38:c1:54:f8:70:
35:4d:98:4d:df:4d:ae:0a:a4:f1:c7:72:6d:91:bb:e2:60:8e:
79:08:d3:d1:3e:58:59:63:fa:7f:c3:c1:09:69:df:bc:82:27:
e5:50:a7:93:c2:23:68:25:7c:b4:91:06:97:07:d9:c8:98:35:
a1:84:ca:e1:de:04:99:3c:5c:37:a7:f2:2a:d6:46:b9:fc:85:
a7:cf:4c:91:10:c0:29:a4:99:57:ba:38:9a:92:d5:f7:90:26:
ba:6d:e2:16:49:2c:e3:78:69:52:b2:27:a3:f2:53:9e:ee:71:
61:37:c7:f8:10:7f:6d:49:81:40:82:f6:aa:2b:f7:be:29:b8:
45:54:63:c7:a4:90:38:7d:48:f2:db:25:85:e5:8b:1d:f9:69:
3f:50:a0:11:0d:aa:aa:da:ef:bc:f9:7c:63:16:5c:45:5c:e7:
36:e2:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:25:07 2024 by rpki-client on console-ams.rpki-client.org