Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FxJQPtn0jJk_r7rGBr-Hq2lxUXY.roa
File: FxJQPtn0jJk_r7rGBr-Hq2lxUXY.roa (raw, json)
Hash identifier: 37V4wzPU6JBTyq/GtySyt9Y0VhInrhac5e0gh5l1lGk=
Subject key identifier: 17:12:50:3E:D9:F4:8C:99:3F:AF:BA:C6:06:BF:87:AB:69:71:51:76
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 018C4F024FD1EB45E8C19E958A926D09D828
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FxJQPtn0jJk_r7rGBr-Hq2lxUXY.roa
Signing time: Sat 09 Dec 2023 14:36:40 +0000
ROA not before: Sat 09 Dec 2023 14:36:40 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 16276
IP address blocks: 185.101.104.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:4f:02:4f:d1:eb:45:e8:c1:9e:95:8a:92:6d:09:d8:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Dec 9 14:36:40 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1712503ed9f48c993fafbac606bf87ab69715176
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:30:f0:04:04:ae:3a:c9:bc:f1:d7:35:c5:eb:
42:ee:37:2c:5d:65:bc:8f:42:bd:f1:82:39:96:1b:
23:a9:94:17:0a:50:80:b8:91:aa:6b:3f:b3:21:61:
22:73:a5:36:9e:78:cb:8d:0a:51:18:02:f6:d7:c2:
38:34:a1:ea:b3:8e:13:d1:3a:f6:95:93:e1:cd:00:
26:a8:4f:24:f2:68:fe:2a:70:de:fe:05:bb:b4:35:
50:3f:91:ea:1d:f5:0a:6f:dd:f8:dc:5e:30:21:fe:
09:68:6c:69:ef:c3:56:cd:c6:33:c9:cb:24:7c:39:
62:6f:9e:25:3d:43:c1:81:60:09:a5:d6:8d:fe:23:
e5:60:57:ee:33:dc:72:62:d1:c7:0b:a5:38:2c:88:
b6:39:1a:2e:bf:47:0e:24:9e:18:b0:1c:78:e5:db:
87:70:42:b4:a9:ab:c5:31:f4:72:1b:32:93:83:70:
88:c9:d3:1a:1c:b1:9d:71:b5:23:59:6c:54:53:1f:
b9:c4:79:ad:c3:33:bf:1f:39:c6:27:69:1e:e9:1c:
9c:eb:d5:0b:34:ff:e2:67:39:60:ef:40:c7:ac:fe:
31:56:ed:f8:84:3c:98:8f:e8:03:f7:f5:70:fa:dc:
9c:1f:da:56:d0:59:ee:63:54:d5:0a:b5:32:92:a7:
0b:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:12:50:3E:D9:F4:8C:99:3F:AF:BA:C6:06:BF:87:AB:69:71:51:76
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/FxJQPtn0jJk_r7rGBr-Hq2lxUXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.101.104.0/24
Signature Algorithm: sha256WithRSAEncryption
81:af:b9:dc:4c:e8:98:83:ce:45:74:ba:27:ac:6d:0c:bc:cf:
c9:13:6a:3e:04:bf:92:73:26:7c:35:70:4c:b2:4c:c9:db:c6:
2f:ea:77:83:41:84:70:d2:fb:b3:f4:a2:30:c7:66:41:ba:34:
30:67:69:ae:b5:61:5d:12:8a:ee:a6:79:34:5e:dc:13:e7:ad:
f4:b9:6b:ae:32:b8:4c:18:94:37:30:78:6d:06:5e:c3:45:a8:
55:68:25:ea:6e:b7:21:d1:7d:6b:e0:6e:52:a6:4c:96:73:e9:
28:5b:0a:61:1a:de:60:8d:fa:7e:e5:20:dc:55:8b:b4:fb:b2:
6f:b3:a3:d1:91:32:a3:cf:ec:75:ae:ca:cc:c9:26:08:2e:f0:
d2:3c:e3:78:73:fc:fa:be:f1:f5:2e:0c:e2:0b:2e:f0:21:bd:
f4:b1:d4:2f:b0:f0:43:72:c6:59:0c:79:f1:3b:25:52:62:4c:
9c:e8:5f:4e:7b:ba:3b:77:4b:3e:f3:75:ae:e0:3e:5e:5c:25:
d3:3a:3a:18:35:7e:2a:64:a4:14:2d:2a:a7:7a:94:8e:c7:b0:
9b:c3:b7:fd:4f:d5:a8:48:0e:c4:e4:bc:86:44:d2:a4:d0:6a:
19:f7:56:30:5d:7f:c9:73:3f:a0:3e:f1:fc:41:cf:14:63:63:
b7:be:f6:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:49:19 2024 by rpki-client on console-fra.rpki-client.org