Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/fKEwmHookvXaSsvjET6rKq0DHH8.roa
File: fKEwmHookvXaSsvjET6rKq0DHH8.roa (raw, json)
Hash identifier: gxr0/fHJEgWMO2Rxg69P6ExZZY00acvxZRuvrG9NSjY=
Subject key identifier: 7C:A1:30:98:7A:28:92:F5:DA:4A:CB:E3:11:3E:AB:2A:AD:03:1C:7F
Certificate issuer: /CN=b93a51da2053044f96262f637d0c9cc05d730041
Certificate serial: 0185E4216A92329A253E082B1919EF77A4BA
Authority key identifier: B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/fKEwmHookvXaSsvjET6rKq0DHH8.roa
Signing time: Tue 24 Jan 2023 14:14:33 +0000
ROA not before: Tue 24 Jan 2023 14:14:33 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47377
IP address blocks: 85.94.224.0/19 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 16:09:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:e4:21:6a:92:32:9a:25:3e:08:2b:19:19:ef:77:a4:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b93a51da2053044f96262f637d0c9cc05d730041
Validity
Not Before: Jan 24 14:14:33 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7ca130987a2892f5da4acbe3113eab2aad031c7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c8:52:61:92:4a:ab:0d:27:ee:8b:6b:6b:84:
d6:a0:0d:c5:ec:01:62:5b:50:da:da:9a:19:70:fb:
67:e2:b3:88:a4:93:67:4e:0f:d1:70:4c:6d:83:7b:
ca:79:27:18:03:9a:16:35:f7:7d:2f:b6:fd:57:ba:
4f:85:16:a6:49:f0:1f:44:cb:43:01:1f:3e:c8:ad:
15:39:7e:4c:4e:2b:90:a7:5f:35:75:b6:00:70:4d:
3d:6b:c9:62:5b:e5:45:93:17:02:00:22:f4:92:d0:
60:06:53:04:51:db:a1:16:56:7d:bb:7b:79:72:d1:
f8:ea:2d:84:61:82:b0:75:02:da:29:9c:df:47:d5:
be:b0:f0:9b:d8:65:8a:85:94:e7:af:13:06:1f:7d:
2a:f2:60:34:b6:63:62:00:9c:c5:b6:30:c2:62:41:
49:ed:88:23:de:6e:3f:a0:c1:dd:d3:e2:d6:bf:ba:
71:85:cc:02:82:99:54:70:64:74:51:c5:4f:68:77:
d5:78:c8:a0:f8:4c:c8:59:a0:7f:07:54:14:62:13:
0c:7a:2d:ae:cb:23:35:61:dd:b6:10:20:3c:39:4f:
af:35:37:c4:c2:da:2b:be:60:7b:d1:43:6d:02:d7:
b4:44:2b:80:a3:b7:2c:07:bf:8d:f3:9b:77:ec:fa:
98:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:A1:30:98:7A:28:92:F5:DA:4A:CB:E3:11:3E:AB:2A:AD:03:1C:7F
X509v3 Authority Key Identifier:
keyid:B9:3A:51:DA:20:53:04:4F:96:26:2F:63:7D:0C:9C:C0:5D:73:00:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uTpR2iBTBE-WJi9jfQycwF1zAEE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/fKEwmHookvXaSsvjET6rKq0DHH8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/024143-042c-4222-be0b-a12b3c3ae88f/1/uTpR2iBTBE-WJi9jfQycwF1zAEE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.94.224.0/19
Signature Algorithm: sha256WithRSAEncryption
c1:56:52:c7:82:91:af:07:cd:a4:0f:ce:d1:ef:04:8b:0b:0d:
c1:60:eb:e0:13:61:e8:8b:dc:f8:dd:e5:3c:3c:9f:b2:c4:43:
09:2b:1f:c3:8d:15:3b:ef:46:18:57:ad:77:92:5a:97:a9:10:
bc:6c:97:1d:8b:fb:f2:5a:87:27:10:98:e6:8d:7b:7c:fc:cc:
0c:d6:5c:80:1b:7b:07:77:76:b6:c3:31:09:f4:c0:50:e3:ec:
cb:77:4d:28:88:0b:1c:be:a7:8f:38:46:f7:c4:e3:5b:09:b0:
55:a1:cd:96:b1:bf:19:51:90:77:a2:bd:c2:82:a8:cd:c7:5d:
29:63:d9:2a:4c:50:8b:53:70:f9:43:bf:ec:95:34:e8:97:1d:
20:7b:d6:2e:c2:21:7d:ff:fa:08:7c:b8:e1:de:36:1a:ed:65:
de:42:68:e7:63:c1:ec:b5:94:ba:c7:54:cc:a2:59:55:44:66:
27:d4:b8:30:67:53:35:04:04:c5:97:a4:f8:f5:95:7a:9a:82:
b0:b6:60:38:e7:33:67:4e:d3:58:bf:7b:e1:d4:ac:39:77:69:
44:84:95:01:d8:e9:f1:6d:e2:6f:af:74:8c:0a:1e:75:a3:93:
87:12:5d:33:92:e6:c2:05:c5:81:3d:be:23:9a:ee:75:bf:4b:
e5:9a:1c:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:11 2024 by rpki-client on console-fra.rpki-client.org