Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/fa4nnyhjAXIcGzqmhsg4VIbmQL0.roa
File: fa4nnyhjAXIcGzqmhsg4VIbmQL0.roa (raw, json)
Hash identifier: zABgYdC8iLimURvxh0oUL5F2kUzTHX5NsX8Ay6Mrdps=
Subject key identifier: 7D:AE:27:9F:28:63:01:72:1C:1B:3A:A6:86:C8:38:54:86:E6:40:BD
Certificate issuer: /CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Certificate serial: 018CC5DC8B086328323D2C4A4031B2FD6179
Authority key identifier: 29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/fa4nnyhjAXIcGzqmhsg4VIbmQL0.roa
Signing time: Mon 01 Jan 2024 16:30:14 +0000
ROA not before: Mon 01 Jan 2024 16:30:14 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35432
IP address blocks: 185.230.112.0/22 maxlen: 24
2a0c:7300::/32 maxlen: 48
Validation: Failed, certificate revoked on Wed 28 Feb 2024 10:53:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:dc:8b:08:63:28:32:3d:2c:4a:40:31:b2:fd:61:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=293d1044cd48d61716d759e020ddbdaa814d5cd5
Validity
Not Before: Jan 1 16:30:14 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7dae279f286301721c1b3aa686c8385486e640bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:53:10:b9:c7:b5:dc:90:1a:49:24:ef:bb:8b:
e6:b2:f6:e1:3d:88:a0:0f:fd:c7:15:19:b3:6d:fd:
d2:81:a8:1d:6d:eb:22:2d:0d:70:7a:40:31:20:a7:
da:f5:79:09:c0:d8:e9:81:66:ac:88:9d:e5:01:2b:
6a:3f:0f:d4:ae:ef:14:2a:b0:71:8f:5a:a5:38:49:
10:46:3d:d0:d6:af:43:bb:3c:a9:29:8c:1a:62:45:
e5:79:e9:85:06:82:e0:86:85:cb:13:c9:57:8f:88:
2e:f9:7a:45:80:0f:bd:90:03:50:1d:bd:79:aa:20:
db:b0:8f:bd:a1:a8:4f:88:5b:07:df:4a:0e:ba:f6:
fd:0f:b6:e1:e6:b6:66:67:ae:11:e7:03:99:71:1c:
7c:ee:9c:e3:e4:4b:90:91:f8:6f:75:41:59:46:53:
02:1e:58:6f:3e:be:56:82:39:34:94:a6:4e:37:26:
e2:47:59:e2:35:43:50:a0:15:0f:a4:32:0e:72:e1:
58:cb:c1:76:c5:69:aa:8a:35:c4:d9:80:d9:f6:05:
44:3a:bb:f0:d1:d4:eb:1b:62:c0:6f:d9:5f:5b:e7:
db:5d:e6:e7:36:90:3d:a7:04:0d:63:a8:6e:6d:54:
b6:bc:84:70:22:ef:c6:7b:17:b0:cb:9e:4f:71:cb:
66:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:AE:27:9F:28:63:01:72:1C:1B:3A:A6:86:C8:38:54:86:E6:40:BD
X509v3 Authority Key Identifier:
keyid:29:3D:10:44:CD:48:D6:17:16:D7:59:E0:20:DD:BD:AA:81:4D:5C:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KT0QRM1I1hcW11ngIN29qoFNXNU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/fa4nnyhjAXIcGzqmhsg4VIbmQL0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/def095-056b-4dd3-bf1e-e71beda1f299/1/KT0QRM1I1hcW11ngIN29qoFNXNU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.230.112.0/22
IPv6:
2a0c:7300::/32
Signature Algorithm: sha256WithRSAEncryption
23:6b:ce:60:0b:b1:b8:2d:21:f1:81:3d:91:6d:98:95:ec:ea:
4c:42:8a:db:cf:bc:d7:5e:f3:3b:da:23:95:bb:6b:b6:2a:72:
26:ea:1c:f1:9f:4d:ce:a9:c1:8b:4a:0c:04:38:0b:c0:9e:0b:
8d:40:27:b1:9a:90:4b:1b:0a:d0:39:7f:77:e0:c6:29:55:ea:
70:9a:fb:fa:cc:f3:6a:ab:13:e6:2c:87:2e:f4:6e:61:ad:14:
f6:3b:ef:c9:73:0e:01:78:fe:43:8e:50:94:d8:4c:57:60:e2:
71:1c:4b:82:fe:54:05:3e:26:0c:54:0a:0a:bb:7c:cd:4e:8d:
43:b7:87:5a:22:cc:5c:09:72:a6:69:77:36:de:b6:cd:0c:65:
76:00:26:d5:2d:e2:5b:0d:d2:43:9e:7f:54:bc:6b:1c:8f:b2:
f0:79:6b:89:b2:0a:1b:a6:d8:b3:cf:f5:8e:b8:74:9a:67:c1:
6c:71:e6:44:51:07:1a:23:8a:d9:08:4a:20:04:f4:1d:1c:07:
0f:4f:8f:c4:cf:68:46:8c:eb:a0:d5:09:c6:1c:5f:cd:7c:af:
73:bb:3a:ac:aa:e0:b0:26:11:4d:57:9f:28:28:c4:4d:7e:e1:
aa:12:2e:75:d9:88:36:af:9a:b2:90:90:dc:9d:2e:a9:2d:9e:
c4:d7:64:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:28 2024 by rpki-client on console-ams.rpki-client.org