Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/1-ivnJ5G0jlSZH1_0zsZvXAzCnOg.roa
File: 1-ivnJ5G0jlSZH1_0zsZvXAzCnOg.roa (raw, json)
Hash identifier: ssI/GP5YnyDzOtxt3G17GbT05MgiBLjXnwpjmvQlqG4=
Subject key identifier: FA:2B:E7:27:91:B4:8E:54:99:1F:5F:F4:CE:C6:6F:5C:0C:C2:9C:E8
Certificate issuer: /CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Certificate serial: 01856FF04C04C425C1041C3D9DBF5CB67C52
Authority key identifier: A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/1-ivnJ5G0jlSZH1_0zsZvXAzCnOg.roa
Signing time: Mon 02 Jan 2023 00:44:57 +0000
ROA not before: Mon 02 Jan 2023 00:44:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 213151
IP address blocks: 185.125.141.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f0:4c:04:c4:25:c1:04:1c:3d:9d:bf:5c:b6:7c:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3608d6b0e80a6430fb6af43fae168a0e8011fee
Validity
Not Before: Jan 2 00:44:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa2be72791b48e54991f5ff4cec66f5c0cc29ce8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a3:58:4d:9d:95:af:86:0e:e2:81:33:fc:46:
f8:03:7c:a1:9f:a1:c2:1d:b9:e9:f5:e3:73:47:04:
be:8d:f2:54:44:82:5d:f7:da:1d:cb:80:0d:40:6a:
e2:6a:44:f1:bc:54:e0:f6:9b:26:e1:35:66:37:ef:
64:ca:12:77:10:e7:11:85:7f:b2:73:1c:78:50:9b:
4b:e4:df:ad:66:fb:1d:a1:5e:6e:d4:b0:6e:21:64:
f2:a0:56:b5:79:59:a2:2b:ef:87:50:7e:a8:c5:52:
ca:d0:0f:fd:e7:74:6d:6a:46:78:ca:a5:6a:a5:48:
a3:6a:0a:00:d9:df:62:fc:75:dc:8d:21:47:56:fe:
9d:9b:f8:58:f0:84:49:bb:56:d1:50:d7:12:10:1c:
df:e2:9f:1f:6a:10:90:0f:c2:55:98:44:d1:73:eb:
a3:c3:83:65:a0:92:3a:85:c4:8a:ed:e3:08:41:b3:
74:ce:13:e5:af:57:58:2d:a1:66:f8:c0:bf:f1:b5:
a0:51:8e:56:0d:ac:60:34:b3:94:1b:e2:56:00:a6:
62:64:09:93:38:e4:15:c0:fb:9c:03:01:2c:df:73:
da:5f:a1:f1:ff:4c:55:ca:9e:7e:53:0f:aa:b3:5f:
3d:89:e0:31:6e:ae:46:2c:81:71:26:e1:52:04:10:
1d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:2B:E7:27:91:B4:8E:54:99:1F:5F:F4:CE:C6:6F:5C:0C:C2:9C:E8
X509v3 Authority Key Identifier:
keyid:A3:60:8D:6B:0E:80:A6:43:0F:B6:AF:43:FA:E1:68:A0:E8:01:1F:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o2CNaw6ApkMPtq9D-uFooOgBH-4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/1-ivnJ5G0jlSZH1_0zsZvXAzCnOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/fb5910-fe14-4453-8c9c-83bf70b1fd6b/1/o2CNaw6ApkMPtq9D-uFooOgBH-4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.125.141.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:28:c1:48:7d:63:1b:9e:4a:40:a9:1c:19:d1:9b:39:1d:d5:
7d:ce:f7:05:16:8e:a8:7a:99:c0:08:82:23:6c:85:0d:cc:2f:
b2:19:4d:b5:71:61:a3:51:d9:23:28:9a:60:f9:d2:39:bc:6f:
c6:01:71:10:80:a5:2c:8d:71:cd:6e:dc:70:cc:04:9e:ac:06:
50:15:fa:0f:0f:40:5f:37:52:33:16:63:b0:3f:63:9d:d9:52:
23:e4:5f:b6:29:ae:99:58:8f:e0:14:78:2f:d8:52:80:a0:a2:
fa:2c:ce:8a:9f:9f:2c:07:56:38:00:b1:52:18:7a:21:20:9a:
fd:63:b1:e0:8f:2e:3f:40:5f:45:32:56:b3:35:2b:1b:2a:d6:
15:b1:99:f3:ff:02:13:93:f8:67:9b:58:19:6d:43:a8:11:15:
1c:58:73:c3:98:01:52:99:2f:f7:c8:a5:0c:1e:a4:67:62:29:
19:ed:15:90:ef:06:7b:0a:c4:0e:f0:3d:27:a8:af:c3:0c:cc:
a7:5b:06:bf:fa:27:c4:25:58:14:16:fe:59:1a:e2:d4:0d:97:
97:58:a0:ab:54:55:32:dc:1d:50:b5:f8:cf:5f:37:d1:4c:a4:
f7:74:cb:51:c8:49:0a:97:84:2c:fd:38:1d:50:95:b1:a7:91:
07:bd:85:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:39:25 2024 by rpki-client on console-ams.rpki-client.org