Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/fDnbfvY-haG8vqIZitc5yLfjz5s.roa
File: fDnbfvY-haG8vqIZitc5yLfjz5s.roa (raw, json)
Hash identifier: rLj1ff0QLz+EbnxJ5QqCXtMlsC4xhIZOz9K/PnAtXcs=
Subject key identifier: 7C:39:DB:7E:F6:3E:85:A1:BC:BE:A2:19:8A:D7:39:C8:B7:E3:CF:9B
Certificate issuer: /CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Certificate serial: 018CF98A50F45BA22A21716ECF041655B619
Authority key identifier: 9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/fDnbfvY-haG8vqIZitc5yLfjz5s.roa
Signing time: Thu 11 Jan 2024 17:20:40 +0000
ROA not before: Thu 11 Jan 2024 17:20:40 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204409
IP address blocks: 185.249.112.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Jan 2024 17:12:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:f9:8a:50:f4:5b:a2:2a:21:71:6e:cf:04:16:55:b6:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9be60d4ae70f6f559984c76b521ce377cc1ee721
Validity
Not Before: Jan 11 17:20:40 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7c39db7ef63e85a1bcbea2198ad739c8b7e3cf9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b6:7c:4f:96:a2:96:46:22:76:fb:6d:a7:cc:
de:fa:a4:0f:0c:5a:60:d9:f9:e5:45:9a:0b:9c:ac:
25:f5:c0:50:71:82:25:cd:55:9e:22:2e:03:e2:c8:
af:b9:49:52:ed:21:32:14:8a:9a:76:9a:07:3f:d6:
cc:b0:26:4b:d2:98:a8:4c:fe:cb:b2:70:ab:1d:71:
bd:f3:38:59:ee:74:5d:25:ce:87:ce:9f:29:79:ce:
33:c2:9a:6e:d9:5a:02:3d:70:e9:f6:a6:77:a1:54:
b7:bb:e4:e1:d8:e2:d7:8a:2e:56:66:0f:34:1c:f5:
c6:3e:47:65:4b:be:72:d8:3b:1c:93:c9:94:e3:19:
eb:83:b0:e0:4e:13:87:62:40:84:ef:a2:4d:32:8c:
2c:d1:aa:28:06:e6:cc:86:9f:18:df:b9:47:26:3c:
8a:64:3d:82:e7:5c:30:26:cf:27:a0:b7:18:fc:40:
95:b8:5f:f6:0b:5f:8a:57:53:d3:67:79:34:9c:5b:
fe:b8:98:41:13:53:5e:6c:22:60:70:4a:71:b3:a3:
1d:f0:97:a5:27:48:34:f3:d4:05:30:f2:48:60:ee:
94:33:1b:fb:7e:30:1d:28:c1:9d:41:e3:84:d3:ab:
be:be:50:4d:68:af:ae:e2:10:f3:94:6d:b9:0d:e4:
c0:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:39:DB:7E:F6:3E:85:A1:BC:BE:A2:19:8A:D7:39:C8:B7:E3:CF:9B
X509v3 Authority Key Identifier:
keyid:9B:E6:0D:4A:E7:0F:6F:55:99:84:C7:6B:52:1C:E3:77:CC:1E:E7:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m-YNSucPb1WZhMdrUhzjd8we5yE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/fDnbfvY-haG8vqIZitc5yLfjz5s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/c02820-fb66-4792-9d8d-cc885857faf2/1/m-YNSucPb1WZhMdrUhzjd8we5yE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.249.112.0/22
Signature Algorithm: sha256WithRSAEncryption
70:13:56:51:d2:30:15:d5:3a:5e:cb:f2:c5:1a:da:a2:1d:93:
f0:26:90:bf:f8:f1:a0:ff:f8:d3:0f:35:a4:f6:b9:13:60:4f:
4c:60:aa:a1:46:dc:9a:fe:17:3c:94:15:fd:6a:3b:76:b4:c7:
29:98:44:f2:71:65:4f:66:0c:00:af:62:03:fd:ef:f4:46:53:
8d:f1:cf:dc:ba:09:00:69:71:36:6e:2d:6a:b8:b0:f0:17:37:
23:64:1c:94:f5:09:6f:c5:ff:3e:9f:1b:a2:42:76:24:bf:89:
44:1e:98:9b:35:e6:13:b9:0a:e9:29:35:f2:c7:28:26:79:db:
0c:e0:8a:ff:a5:b8:74:ad:18:5a:a3:71:95:77:48:47:7b:53:
b4:1c:4d:d7:af:a3:dc:2d:9f:37:38:2d:1c:ec:af:ef:8d:52:
6c:d1:6a:be:70:c4:a1:3a:f2:1c:09:17:45:5d:71:f2:94:8d:
d4:63:20:56:80:0d:bd:c9:54:03:4e:7b:e9:96:e4:aa:53:49:
69:ca:ae:81:d4:0d:32:57:b6:1a:51:61:e1:fa:60:c5:d8:3c:
8c:22:7f:1f:8c:31:f1:81:b6:6f:4b:3f:ff:b2:a7:9f:42:1d:
18:75:47:6c:11:c5:05:e1:6c:d1:5b:f6:33:93:d5:5d:4a:b5:
fe:b6:a9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:36:12 2024 by rpki-client on console-ams.rpki-client.org