Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/8JDhPoO0kGSCs_RLgYaF14LZy_k.roa
File: 8JDhPoO0kGSCs_RLgYaF14LZy_k.roa (raw, json)
Hash identifier: /g3Hw+ZCFj6TRSJcG+5teBbGYp8riZz/tq5zMN+q74I=
Subject key identifier: F0:90:E1:3E:83:B4:90:64:82:B3:F4:4B:81:86:85:D7:82:D9:CB:F9
Certificate issuer: /CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Certificate serial: 01856F26CC0D07F6713EA2AF2F90F6FF98A2
Authority key identifier: FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/8JDhPoO0kGSCs_RLgYaF14LZy_k.roa
Signing time: Sun 01 Jan 2023 21:04:51 +0000
ROA not before: Sun 01 Jan 2023 21:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197740
IP address blocks: 185.246.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 06:30:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:26:cc:0d:07:f6:71:3e:a2:af:2f:90:f6:ff:98:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcb6b17bd2e5f14bd375a0c0e69dfc77d9702f4a
Validity
Not Before: Jan 1 21:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f090e13e83b4906482b3f44b818685d782d9cbf9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:8c:b0:fb:74:fd:2a:c8:22:e9:2e:4e:4b:55:
32:34:09:ea:e8:e5:61:1c:8e:c2:7f:ce:c9:58:9c:
f9:c3:66:94:46:30:07:1d:9e:61:f0:1a:43:aa:61:
a5:53:e0:af:78:8c:03:29:a4:87:a4:d3:df:37:42:
db:21:62:1c:4c:55:62:95:d4:95:0f:4e:b9:e2:80:
37:65:5c:b2:fd:6c:a5:4f:54:3e:7e:49:c5:59:fa:
0a:ae:0a:4a:aa:4c:43:44:c5:4a:6c:0e:7d:73:af:
3b:7f:8f:1d:e9:f1:7a:c3:5c:74:0e:fb:5d:e5:95:
02:9d:e0:b3:8d:c1:7e:83:67:81:99:32:e6:3f:3a:
35:16:69:57:69:ad:64:f3:ef:06:4c:fd:b3:41:22:
ff:b4:ff:44:71:4d:f0:16:bb:77:11:47:13:d4:3e:
9e:61:e5:d7:dd:76:47:8b:70:cc:41:38:17:1b:84:
84:59:fc:06:fb:38:92:b8:ff:14:d4:45:b8:1d:64:
b8:94:2c:c2:5c:21:2c:4b:09:2b:7e:aa:a3:d7:2c:
5a:85:af:a3:8c:db:48:d2:05:8f:d9:c2:e1:02:fa:
9d:a5:88:93:0a:d4:c5:5d:39:93:a7:40:d9:50:6b:
ae:c8:23:af:b5:68:1a:d6:8c:86:2e:98:08:98:9c:
6f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:90:E1:3E:83:B4:90:64:82:B3:F4:4B:81:86:85:D7:82:D9:CB:F9
X509v3 Authority Key Identifier:
keyid:FC:B6:B1:7B:D2:E5:F1:4B:D3:75:A0:C0:E6:9D:FC:77:D9:70:2F:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Laxe9Ll8UvTdaDA5p38d9lwL0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/8JDhPoO0kGSCs_RLgYaF14LZy_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/01a421-bdbf-43e0-8aeb-2c48cb298646/1/_Laxe9Ll8UvTdaDA5p38d9lwL0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.246.199.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:04:73:6b:f1:a3:1b:8e:a3:c7:7f:58:a6:60:03:39:4d:bf:
f0:de:de:fc:23:47:e6:c2:ab:be:b5:56:f6:e0:6e:a4:38:ea:
00:2a:16:f5:ad:31:4c:49:9d:a9:3c:01:dd:02:c8:79:0c:ed:
86:48:cb:b0:bc:14:fb:3a:8b:ef:3d:3d:92:ce:61:7a:08:67:
ea:26:2d:2b:b5:f5:b8:f7:50:36:6e:27:74:65:2d:33:43:6c:
45:49:c7:65:8b:02:20:e4:b9:84:05:51:45:5d:29:5f:d0:82:
1b:64:d8:17:d8:77:2f:c0:35:e1:7f:50:fe:0d:50:15:f3:91:
2a:8c:d1:a6:e7:bc:fd:08:2a:7b:f4:ff:38:df:27:c3:ce:fb:
49:14:a6:3a:cb:75:8f:eb:c6:17:c6:51:f1:9c:bd:3d:b4:44:
d3:14:c4:32:b2:72:d0:fb:42:84:23:51:46:cb:d6:38:23:2f:
7c:bc:e1:a8:e4:11:64:2c:e0:e0:bd:e2:2c:aa:57:ff:86:4d:
38:31:bf:01:f1:fd:8a:3f:42:fe:84:18:7a:ec:b9:71:69:1f:
35:dc:a0:03:3d:a8:ba:5a:43:c9:c5:81:ad:04:63:1a:a6:b6:
dd:f5:68:bc:5f:5b:6d:f7:48:f7:fa:94:be:61:ca:bf:5e:90:
bc:a4:c7:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:09 2024 by rpki-client on console-fra.rpki-client.org