Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/FfELaGKJ6l-PjSmzk7sdTwPbv8c.roa
File: FfELaGKJ6l-PjSmzk7sdTwPbv8c.roa (raw, json)
Hash identifier: 2fNj3UjRkEomqy252F+fwCL65DEn4XuqsE/Pwq4TbIQ=
Subject key identifier: 15:F1:0B:68:62:89:EA:5F:8F:8D:29:B3:93:BB:1D:4F:03:DB:BF:C7
Certificate issuer: /CN=52e02224ffb971172e4935ed7dd965d1155089b6
Certificate serial: 01856F3021500ADC34E8554266B347C4CB41
Authority key identifier: 52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/FfELaGKJ6l-PjSmzk7sdTwPbv8c.roa
Signing time: Sun 01 Jan 2023 21:15:03 +0000
ROA not before: Sun 01 Jan 2023 21:15:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8791
IP address blocks: 185.121.16.0/22 maxlen: 22
185.121.16.0/24 maxlen: 24
185.121.18.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:30:21:50:0a:dc:34:e8:55:42:66:b3:47:c4:cb:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52e02224ffb971172e4935ed7dd965d1155089b6
Validity
Not Before: Jan 1 21:15:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15f10b686289ea5f8f8d29b393bb1d4f03dbbfc7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:28:3a:3e:2c:6c:ad:ec:87:df:89:1f:72:67:
10:76:45:db:fc:37:33:c6:c6:a0:ed:0d:0f:e4:47:
b6:68:ea:bb:53:f8:45:41:28:af:f8:43:40:28:6d:
67:fb:c4:66:6b:74:12:ae:4b:be:8e:3b:66:65:42:
0f:c3:33:a8:25:c1:ca:c0:50:33:72:a9:b2:34:46:
d3:d7:b7:93:c6:d8:30:c8:d0:65:9d:b2:de:89:8f:
4f:88:89:19:0e:b0:d0:d6:76:da:cd:2c:71:2c:ea:
82:90:3f:a8:11:f5:44:6c:88:bf:a1:4a:3a:a6:15:
e1:e0:b3:df:f9:ca:72:35:4f:a2:da:8c:8a:65:9c:
d9:36:e9:da:68:af:21:69:cd:37:57:da:85:e0:9d:
fc:5b:2a:6c:34:8a:8a:ba:cd:d1:a3:d9:0b:ff:8c:
63:af:7d:7b:e4:2d:4a:99:dc:fb:40:c4:d1:d5:69:
95:e3:28:26:c1:7c:fb:7e:e9:23:9a:ca:9a:fc:37:
a8:1b:4c:8a:da:1b:ed:96:86:dd:e6:a6:d1:ba:64:
d2:d6:65:5a:50:62:51:23:4f:83:fa:90:23:24:4e:
73:bb:35:8e:09:e9:b9:f9:ac:5b:7c:e1:d8:cc:3d:
e8:54:06:49:83:2f:0f:f5:28:5f:ba:52:9f:4b:ea:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:F1:0B:68:62:89:EA:5F:8F:8D:29:B3:93:BB:1D:4F:03:DB:BF:C7
X509v3 Authority Key Identifier:
keyid:52:E0:22:24:FF:B9:71:17:2E:49:35:ED:7D:D9:65:D1:15:50:89:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UuAiJP-5cRcuSTXtfdll0RVQibY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/FfELaGKJ6l-PjSmzk7sdTwPbv8c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/311bc5-3f36-4d5e-abde-b8da89406bed/1/UuAiJP-5cRcuSTXtfdll0RVQibY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.16.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:60:35:fc:5a:e6:62:c9:12:e1:4b:cf:9d:bc:50:82:ee:66:
c5:f4:44:51:79:b8:ef:69:a1:9a:af:15:98:31:c4:9b:03:11:
b4:28:fc:68:ae:4f:39:cb:23:c5:6e:eb:e9:f1:6a:2e:a1:e5:
93:c4:32:9b:14:3e:03:bc:80:ec:e4:be:8f:18:a3:52:dc:1a:
e2:70:52:af:0f:8c:6f:d4:e2:61:bf:66:0d:9c:ad:e6:63:5d:
ce:5c:c2:b2:a9:39:67:76:44:2a:38:16:a0:57:d2:34:21:b4:
20:36:1c:6f:b2:64:f6:40:4c:78:54:99:cc:14:cf:4c:4c:17:
30:de:aa:60:93:06:a8:0f:f9:ad:f3:ac:ea:4e:98:30:8a:ef:
e0:66:b4:1b:15:be:89:50:52:dc:3f:f5:97:14:b0:28:c0:9f:
93:85:e4:c7:ba:2a:bb:e6:58:2d:22:e1:81:f9:39:d2:40:0b:
f3:a5:38:41:0c:2f:fc:9e:26:39:cc:1e:38:12:d7:e7:31:4e:
c4:de:b5:b8:0b:10:04:f6:03:d1:db:f0:75:bd:5f:8a:2e:02:
6a:52:c3:e0:ff:d3:57:07:80:1d:dc:ae:71:39:34:e1:17:96:
2c:3a:3a:17:37:33:42:28:94:92:32:26:e7:2f:c7:67:a2:49:
33:53:31:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:41:21 2024 by rpki-client on console-ams.rpki-client.org