Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/F1V3fnd2T1YTeBPJ7s1VNNkJIpM.roa
File: F1V3fnd2T1YTeBPJ7s1VNNkJIpM.roa (raw, json)
Hash identifier: 9M3WYbjuvkSQ+Ri6gYiXjhIr63gZNiHGtf1lZFnwk0A=
Subject key identifier: 17:55:77:7E:77:76:4F:56:13:78:13:C9:EE:CD:55:34:D9:09:22:93
Certificate issuer: /CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Certificate serial: 01856DE675E5214EB98DA6827F7CA36EF4A6
Authority key identifier: EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/F1V3fnd2T1YTeBPJ7s1VNNkJIpM.roa
Signing time: Sun 01 Jan 2023 15:14:58 +0000
ROA not before: Sun 01 Jan 2023 15:14:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200322
IP address blocks: 185.245.250.0/24 maxlen: 24
185.245.248.0/22 maxlen: 24
2a0d:7080::/29 maxlen: 29
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:e6:75:e5:21:4e:b9:8d:a6:82:7f:7c:a3:6e:f4:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eeb320be89726831f3fd900740f1f906f9b19c6a
Validity
Not Before: Jan 1 15:14:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1755777e77764f56137813c9eecd5534d9092293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:00:15:d0:2b:6c:80:27:3f:9f:3a:73:45:06:
e0:e3:fa:f5:61:a8:08:c6:ca:d0:49:6b:11:cf:10:
b5:4c:1b:46:1c:60:f4:1e:e8:9c:2c:2a:b3:77:84:
f1:3a:8f:ea:f9:00:88:3e:54:e1:8f:e8:98:dc:1c:
c8:ca:88:38:77:54:5a:90:fb:5b:b3:19:32:66:12:
7e:ff:e8:ca:64:47:f4:8d:a3:a0:5e:41:8d:c8:38:
38:30:22:c9:fc:72:36:a7:88:fd:b9:18:ba:16:40:
b7:ed:fa:49:77:35:f3:cc:d6:5a:e9:34:fd:5c:8a:
9f:57:4f:7d:9c:b3:60:8e:77:93:78:74:97:c4:da:
44:20:7e:97:aa:93:4a:1b:81:a0:95:a3:ae:26:ac:
16:02:7b:05:e1:42:76:3b:59:9b:a0:d8:c1:c9:40:
2a:91:ec:db:f3:93:55:d5:c7:88:d5:6a:f2:03:97:
42:1c:ca:90:00:f7:a1:5d:fb:17:85:a2:ac:cd:92:
9a:13:99:d9:3b:0e:09:44:25:46:2a:b6:53:0f:c5:
9e:65:fd:2a:c9:6e:e0:3b:c7:38:85:5d:8b:92:f0:
a9:43:b3:72:24:16:f1:bc:16:3b:54:fd:25:c2:d8:
cb:43:f2:2b:c1:d3:b1:61:be:1e:fe:5e:7c:87:3d:
b1:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:55:77:7E:77:76:4F:56:13:78:13:C9:EE:CD:55:34:D9:09:22:93
X509v3 Authority Key Identifier:
keyid:EE:B3:20:BE:89:72:68:31:F3:FD:90:07:40:F1:F9:06:F9:B1:9C:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rMgvolyaDHz_ZAHQPH5BvmxnGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/F1V3fnd2T1YTeBPJ7s1VNNkJIpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/d90be8-f605-4fc8-8f09-021040aa3c8a/1/7rMgvolyaDHz_ZAHQPH5BvmxnGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.245.248.0/22
IPv6:
2a0d:7080::/29
Signature Algorithm: sha256WithRSAEncryption
56:70:59:e7:a8:62:a1:a8:06:9b:19:8b:94:0e:55:14:c0:a5:
b6:7d:0e:83:a1:4b:51:54:bf:9f:ed:4e:b1:ca:11:06:6f:44:
07:7b:e2:ab:e0:5a:9e:4e:fe:56:5e:0f:f6:fc:e8:23:28:a8:
ca:89:6c:0b:59:c7:12:62:e8:18:2b:8e:96:21:51:e4:a1:bf:
a7:09:d5:98:d4:a8:c6:bf:ae:8c:c9:e3:b0:f9:44:1a:ab:0f:
6b:40:27:f0:4e:fa:8f:80:a0:eb:40:76:11:6d:96:64:b2:39:
15:6c:b8:de:43:61:3c:5d:ae:a1:61:fb:2b:95:05:be:0b:0d:
91:10:7e:cc:2b:58:3d:62:25:2e:45:fc:6f:ba:d3:fa:47:0d:
d2:d5:a8:17:ab:75:96:47:35:40:c9:c7:f4:30:a5:16:db:08:
92:81:1a:a3:2d:99:5e:4f:b0:1b:cd:1b:60:60:40:18:1c:46:
2a:b7:73:be:9d:ba:e0:ac:f4:b5:66:68:b2:3c:5e:78:4d:17:
1b:75:52:38:36:1f:c0:0f:b7:1a:6b:65:de:7b:9c:cc:ad:f1:
e0:ff:e6:ff:0c:94:8c:d9:d5:c4:66:d5:28:ed:7e:65:20:bb:
b4:1c:d2:72:c1:38:59:47:9e:a8:90:ce:7e:1e:e3:8d:c7:ba:
22:4c:81:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:14 2024 by rpki-client on console-fra.rpki-client.org