Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/6BmaaaDzODXGsu1UDJe6CuvLhRk.roa
File: 6BmaaaDzODXGsu1UDJe6CuvLhRk.roa (raw, json)
Hash identifier: cSjR236S84W+lgfI5jedmOUTOV6P1OFgcuBbow9AV00=
Subject key identifier: E8:19:9A:69:A0:F3:38:35:C6:B2:ED:54:0C:97:BA:0A:EB:CB:85:19
Certificate issuer: /CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Certificate serial: 019290E024A241DAF5BB81CE9933913F7504
Authority key identifier: FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/6BmaaaDzODXGsu1UDJe6CuvLhRk.roa
Signing time: Tue 15 Oct 2024 15:51:01 +0000
ROA not before: Tue 15 Oct 2024 15:51:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203316
IP address blocks: 185.138.212.0/23 maxlen: 24
185.138.214.0/23 maxlen: 24
Validation: Failed, certificate revoked on Tue 26 Nov 2024 08:21:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:90:e0:24:a2:41:da:f5:bb:81:ce:99:33:91:3f:75:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbf8cd5d24a08b5a8afb57c9e604d193bc8cae20
Validity
Not Before: Oct 15 15:51:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=e8199a69a0f33835c6b2ed540c97ba0aebcb8519
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:d9:30:10:06:e8:71:34:4d:df:cd:2b:03:1a:
12:30:6c:a8:08:dc:b6:c5:17:a1:42:76:40:e6:4d:
be:c8:95:82:d4:94:01:d2:20:67:a9:68:e7:91:94:
cb:f5:e8:50:3b:22:f1:ff:84:aa:49:fd:8a:61:ec:
dd:61:02:e0:c3:b5:6d:a5:c3:85:6f:50:af:37:75:
95:ec:b7:70:f2:7b:0c:e0:6b:f1:7a:e6:64:80:a8:
a5:a4:e6:ad:51:ba:8f:e2:5c:0e:66:2b:c6:cc:c7:
fe:04:ac:28:ea:69:f3:11:66:0b:b9:36:9d:f8:7f:
8c:81:55:a7:37:63:f8:b2:c9:38:a2:92:66:e6:95:
7b:9c:8a:f5:b5:bf:b1:a0:f1:24:89:5a:79:de:2c:
44:bf:fb:65:6d:fe:0a:37:1f:a8:07:41:2d:72:a7:
20:32:07:c9:be:81:5d:a5:c6:cb:53:c2:8e:4f:76:
88:6f:e2:0a:07:22:9d:8b:c7:84:dc:64:c8:c2:1f:
ad:7f:80:f3:3a:eb:7d:54:ef:93:04:2c:da:e6:b2:
9c:7b:73:4c:12:cc:87:40:0b:76:f3:b0:14:bd:e6:
fe:44:7a:d8:a3:30:c6:f7:ac:6b:3d:b7:38:ff:c8:
bc:75:96:bf:21:1c:2b:f4:9c:a7:96:c0:4e:d3:5c:
c6:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:19:9A:69:A0:F3:38:35:C6:B2:ED:54:0C:97:BA:0A:EB:CB:85:19
X509v3 Authority Key Identifier:
keyid:FB:F8:CD:5D:24:A0:8B:5A:8A:FB:57:C9:E6:04:D1:93:BC:8C:AE:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/6BmaaaDzODXGsu1UDJe6CuvLhRk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/eb3e9b-6db5-46c6-9aa1-eb87869bd1c9/1/1-_jNXSSgi1qK-1fJ5gTRk7yMriA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.138.212.0/22
Signature Algorithm: sha256WithRSAEncryption
79:3d:8c:b4:d7:f5:bf:14:4a:8f:c5:66:8e:fc:ab:51:98:b8:
89:e1:4c:fe:f4:a4:c3:1a:b2:9b:6e:8a:95:1b:75:fa:23:2b:
13:ad:be:51:c1:1f:00:97:b9:99:7e:6a:fa:6b:2e:a2:95:e8:
91:0c:84:f1:b8:1e:c1:cc:1f:10:e0:c3:88:cc:11:38:e8:ea:
8e:f6:b1:f3:c5:66:05:28:7f:00:db:de:29:dc:15:e7:cc:a2:
71:84:66:b9:45:8c:94:0a:e4:c4:c9:7a:12:2a:93:63:d1:f7:
6a:09:cb:3b:3d:21:cf:51:a0:cd:c9:4d:26:a4:6c:51:52:76:
ed:c7:f5:1a:3e:a4:c2:cf:58:39:bf:e1:e7:25:1b:24:8c:f7:
cf:51:2e:ea:26:ad:bf:95:25:e1:16:a3:78:a8:21:d7:6f:d3:
0e:92:bd:5f:f2:02:86:b4:b1:2a:53:f2:6d:c3:a2:72:b4:38:
93:2a:eb:b5:f5:ac:37:04:d0:8a:06:c2:a8:4c:9c:de:9e:e5:
61:6f:01:5e:d7:bc:fd:b5:99:17:f3:59:19:db:ee:8e:d4:aa:
ee:99:d6:d2:44:4e:50:e1:8d:de:71:0f:24:ea:94:ca:2e:6c:
15:d5:0f:80:58:e9:d9:b0:fc:cc:05:2f:7a:03:bb:b1:c1:3c:
15:9a:7c:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 07:36:07 2025 by rpki-client