Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/FzSScHLcwpULeAAvUbukPN2ahj0.roa
File: FzSScHLcwpULeAAvUbukPN2ahj0.roa (raw, json)
Hash identifier: MRUCKhyFuKzEDd2zFk9l6EN665OGCbHPqk7qSIxt9Bc=
Subject key identifier: 17:34:92:70:72:DC:C2:95:0B:78:00:2F:51:BB:A4:3C:DD:9A:86:3D
Certificate issuer: /CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Certificate serial: 018D9CC46F9A671256E4FFC49D9F6BE7C712
Authority key identifier: EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/FzSScHLcwpULeAAvUbukPN2ahj0.roa
Signing time: Mon 12 Feb 2024 10:02:15 +0000
ROA not before: Mon 12 Feb 2024 10:02:15 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 206046
IP address blocks: 185.195.76.0/24 maxlen: 24
185.195.77.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 02 Jan 2025 01:48:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9c:c4:6f:9a:67:12:56:e4:ff:c4:9d:9f:6b:e7:c7:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efad344eb5f7eb1dee4b8f8435fb5b9d87663e9d
Validity
Not Before: Feb 12 10:02:15 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1734927072dcc2950b78002f51bba43cdd9a863d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:20:bd:d7:6c:5f:eb:61:61:cd:19:bf:a7:79:
ce:15:7f:51:36:9c:8d:01:59:7a:0d:34:b5:e2:7f:
c2:56:1f:59:b6:75:c2:a9:6f:5b:91:3e:53:e3:91:
9c:4d:b7:fa:16:e2:f5:ad:6d:d6:1e:7c:b3:72:80:
7e:c5:ed:8e:ea:04:4c:39:30:32:b3:21:47:84:97:
49:70:0d:29:f4:fc:eb:c7:e9:82:4b:a7:9b:e2:65:
37:f0:f4:71:de:1f:a8:8f:a4:05:30:79:c1:be:51:
57:2f:08:4c:d1:a0:fa:86:9c:f9:65:d8:8c:8a:af:
0d:96:48:0e:76:25:31:f6:b9:1c:1f:58:52:b0:23:
f5:98:33:dc:fc:81:77:c4:7c:7c:cf:c5:b5:51:ed:
88:fd:85:31:51:a4:37:10:d8:2b:e3:3e:3a:40:19:
13:4a:6e:cd:95:58:60:55:43:67:0d:b8:33:72:23:
56:14:b2:bc:7f:7e:93:00:77:70:2b:6a:50:3e:ab:
ab:8e:3a:59:a4:29:c7:5c:a6:dc:a1:d4:13:01:2f:
b3:32:5a:7d:66:74:1b:d9:f5:81:14:c0:e5:33:40:
a4:3d:85:8b:cc:e6:99:6d:ef:89:95:b2:99:d4:44:
8c:f0:bc:16:f8:bd:bb:24:8d:79:a0:5b:4e:5a:a3:
49:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:34:92:70:72:DC:C2:95:0B:78:00:2F:51:BB:A4:3C:DD:9A:86:3D
X509v3 Authority Key Identifier:
keyid:EF:AD:34:4E:B5:F7:EB:1D:EE:4B:8F:84:35:FB:5B:9D:87:66:3E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7600TrX36x3uS4-ENftbnYdmPp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/FzSScHLcwpULeAAvUbukPN2ahj0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/1a830a-f061-4cdc-bafb-a2fe9f015d71/1/7600TrX36x3uS4-ENftbnYdmPp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.76.0/23
Signature Algorithm: sha256WithRSAEncryption
42:a3:d1:88:6a:4b:df:0b:9e:11:3d:27:4a:bb:44:99:f5:a7:
87:8e:c3:8f:ff:07:01:ba:8a:c3:90:31:14:dd:e6:d7:57:56:
bc:5a:34:e8:b5:bd:48:9d:a6:67:40:11:01:f7:28:3c:69:66:
05:ef:3d:88:28:07:34:64:af:3e:af:1f:23:3b:b4:26:cc:2a:
bb:5f:d1:73:dc:fc:7c:79:48:c0:40:17:15:57:f0:dc:58:ec:
e1:6b:27:66:1c:1c:46:ee:e4:65:2e:51:f1:96:5d:08:7b:17:
29:54:d7:b2:cd:08:a4:5e:94:4b:53:34:de:db:9f:0e:02:32:
28:91:2c:0f:8e:54:ab:79:9c:1f:38:c5:dc:17:f5:ef:a0:3d:
68:e0:67:f9:97:2c:e8:41:7b:45:17:f1:91:7b:6c:e5:04:59:
15:6a:7f:42:12:20:c7:50:8b:61:02:91:09:fa:74:cc:bd:be:
af:c3:fc:e9:16:d8:f6:33:af:8b:08:38:c8:fa:8e:83:18:4f:
1b:af:70:06:92:67:46:ef:ea:43:33:b6:86:b0:c0:2b:2b:6f:
69:4a:cb:b3:57:e0:fe:12:18:dc:3b:82:40:85:0a:ca:4e:ef:
87:e9:b7:fc:54:8d:1d:23:49:84:19:10:56:53:a8:b7:58:70:
66:e9:27:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 00:37:39 2025 by rpki-client