Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/_FuX68qsaZfiB4qgZnjSaUcyYfo.roa
File: _FuX68qsaZfiB4qgZnjSaUcyYfo.roa (raw, json)
Hash identifier: upKLzNLmZJNz7L8zxf8V3spZXeOGhnJQAws5azm39Kk=
Subject key identifier: FC:5B:97:EB:CA:AC:69:97:E2:07:8A:A0:66:78:D2:69:47:32:61:FA
Certificate issuer: /CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Certificate serial: 01856F79A277BA690F533AC0BAE758C529F4
Authority key identifier: 12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/_FuX68qsaZfiB4qgZnjSaUcyYfo.roa
Signing time: Sun 01 Jan 2023 22:35:20 +0000
ROA not before: Sun 01 Jan 2023 22:35:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61414
IP address blocks: 185.243.41.0/24 maxlen: 24
193.3.191.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 17 Apr 2023 10:50:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:79:a2:77:ba:69:0f:53:3a:c0:ba:e7:58:c5:29:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1220dd2b92da284c63cec46f6f6a41c013a9c881
Validity
Not Before: Jan 1 22:35:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fc5b97ebcaac6997e2078aa06678d269473261fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:77:da:e9:de:d0:29:61:eb:7d:52:5b:34:58:
f3:8d:b2:92:f2:4b:cb:35:cf:d4:83:96:ce:57:3b:
68:e5:c1:d3:0e:50:d4:85:e6:8b:8f:cb:48:26:bc:
74:cb:b5:ba:92:37:3e:fd:3f:55:c6:9b:90:09:85:
e9:78:78:a4:f7:a9:34:fe:cc:78:55:3c:f7:14:37:
44:f3:41:cc:dd:f2:45:1a:c6:21:fb:ff:04:5b:80:
e5:a5:cf:92:f5:38:7b:18:ce:d1:28:8e:4f:5c:84:
38:be:2e:16:33:11:25:2c:2c:83:39:ff:77:f0:86:
5d:23:34:c5:f9:db:f3:2b:b6:7c:bb:07:53:43:62:
3b:0c:6d:41:d4:04:62:38:18:0d:11:39:fa:7e:a1:
4f:27:70:94:3d:58:8e:cd:98:8b:9f:e3:02:d7:0a:
8a:d9:d6:1a:71:e3:9b:72:f9:82:65:0e:08:5f:14:
4f:97:74:c8:5f:34:dc:2b:02:7b:26:ad:f7:c4:0c:
66:f6:91:37:90:43:27:b3:21:5f:c7:93:64:3a:b6:
ae:d5:c9:c2:a2:70:77:35:fd:8e:39:2e:8b:05:b0:
71:f4:4a:8a:c8:1f:9b:0f:42:99:0e:a0:27:e1:3f:
a0:0c:5f:86:a9:1a:f2:e6:4b:52:71:d2:3c:75:9b:
12:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:5B:97:EB:CA:AC:69:97:E2:07:8A:A0:66:78:D2:69:47:32:61:FA
X509v3 Authority Key Identifier:
keyid:12:20:DD:2B:92:DA:28:4C:63:CE:C4:6F:6F:6A:41:C0:13:A9:C8:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EiDdK5LaKExjzsRvb2pBwBOpyIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/_FuX68qsaZfiB4qgZnjSaUcyYfo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/3b8f3b-ebf0-4cb7-a49b-a8585849be14/1/EiDdK5LaKExjzsRvb2pBwBOpyIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.243.41.0/24
193.3.191.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:b1:52:ec:88:b9:cb:22:d2:68:15:7a:a6:88:f0:48:27:1e:
9a:4a:d7:da:12:ab:3d:0e:ea:28:61:4e:68:b8:0d:ec:75:d1:
a9:c8:79:ac:08:10:1e:93:57:71:13:2c:c9:3b:df:90:3d:c8:
e3:af:d6:1e:35:f5:c6:18:2e:c6:e3:f7:1b:da:36:02:af:20:
71:b8:10:0e:69:5f:1a:cf:d5:87:51:1e:b9:bb:f3:82:a9:88:
83:87:6e:a4:1a:67:d9:aa:7c:75:07:e0:cf:05:48:fe:78:b5:
66:0b:a6:ff:1f:a2:f3:4d:f9:54:ff:ae:42:26:b5:4b:30:8f:
d2:e7:26:9e:0a:e5:9a:40:82:7c:e5:cf:38:ca:37:15:85:99:
7e:d1:eb:29:02:ee:b1:b4:34:9e:15:3b:01:72:15:9e:ed:1a:
b3:01:32:ad:41:0e:b6:5c:87:03:85:c9:07:2f:b8:c6:d1:a0:
e1:85:8a:49:23:26:40:76:3d:d3:27:d6:db:6b:cb:3d:4e:13:
0a:93:56:31:1a:65:4e:53:c4:36:40:78:ce:21:80:71:2d:00:
2b:d0:f8:23:9b:ac:18:fd:f5:36:5f:0d:95:47:01:d6:f3:aa:
ed:23:9a:25:83:59:a5:e7:62:95:12:66:63:ec:6c:e1:f7:63:
29:88:4e:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:18 2024 by rpki-client on console-ams.rpki-client.org