Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fdt97Hymv8WN_7fFCmeMulztDqQ.roa
File: Fdt97Hymv8WN_7fFCmeMulztDqQ.roa (raw, json)
Hash identifier: QP0xipn0g49T+Yep6v0t0wWaBPb33zzDUDjDK0ICvAY=
Subject key identifier: 15:DB:7D:EC:7C:A6:BF:C5:8D:FF:B7:C5:0A:67:8C:BA:5C:ED:0E:A4
Certificate issuer: /CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Certificate serial: 0185710C1CDF03712EE5D920C721820B1E98
Authority key identifier: B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fdt97Hymv8WN_7fFCmeMulztDqQ.roa
Signing time: Mon 02 Jan 2023 05:54:57 +0000
ROA not before: Mon 02 Jan 2023 05:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 42922
IP address blocks: 185.252.145.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 06:32:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:0c:1c:df:03:71:2e:e5:d9:20:c7:21:82:0b:1e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4f96345d3f22edb395d247f7b86d2d73e4a0091
Validity
Not Before: Jan 2 05:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=15db7dec7ca6bfc58dffb7c50a678cba5ced0ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:fb:fe:81:12:bd:b5:4c:4a:7e:89:aa:58:81:
bd:a5:d2:db:45:57:14:fa:72:58:9e:94:c4:6a:37:
bf:b4:b1:20:56:2f:05:49:be:9a:7a:30:c7:e9:50:
25:8f:98:dc:f5:35:0a:7a:8b:b3:82:8d:02:bc:c7:
17:12:35:83:32:a2:16:cc:65:50:dc:bd:28:80:37:
cd:1f:f6:4a:89:98:38:26:00:de:4d:1b:5b:f3:91:
4f:2a:92:9e:48:d0:81:32:25:36:06:93:99:43:f7:
24:d5:43:52:0b:f0:b7:6b:a2:c0:9f:c0:98:ca:1c:
f3:6a:5a:e0:da:62:57:ed:a3:ba:95:4a:fb:6d:a6:
a7:1e:64:cf:af:ff:fd:d3:45:93:74:3d:16:09:5a:
3d:ac:d6:2d:b7:d1:4b:16:58:11:46:70:97:e4:df:
8f:14:e1:4d:8e:0f:76:d0:f8:c9:4d:ef:f1:a5:42:
c7:e1:42:f5:82:85:db:cf:ce:8c:8a:d1:5c:23:89:
90:d6:94:6f:ba:bb:3b:51:71:fd:f0:21:5b:9b:16:
1e:32:3e:1d:98:3f:e3:8a:e5:c4:9c:22:21:fe:2e:
86:45:05:e4:d3:9e:db:58:68:fb:4d:2c:7d:45:d6:
31:71:d0:b8:4d:7d:ce:64:fc:0a:6b:02:34:11:9c:
a3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:DB:7D:EC:7C:A6:BF:C5:8D:FF:B7:C5:0A:67:8C:BA:5C:ED:0E:A4
X509v3 Authority Key Identifier:
keyid:B4:F9:63:45:D3:F2:2E:DB:39:5D:24:7F:7B:86:D2:D7:3E:4A:00:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tPljRdPyLts5XSR_e4bS1z5KAJE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/Fdt97Hymv8WN_7fFCmeMulztDqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/8e121d-73b3-438a-83c4-6fc343d77cd2/1/tPljRdPyLts5XSR_e4bS1z5KAJE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.252.145.0/24
Signature Algorithm: sha256WithRSAEncryption
47:65:51:6b:45:1b:e1:b7:24:27:a0:0d:71:96:e0:2e:a0:21:
70:0b:96:dd:1e:8a:51:57:54:56:c7:da:a4:ae:99:83:88:ed:
b0:41:b2:2b:f0:f8:0c:3b:e4:51:16:7c:fa:69:b1:a2:02:50:
29:40:24:ac:d5:35:64:7b:80:77:d3:da:28:55:cc:ee:28:4d:
bf:88:08:0b:0d:6a:81:d7:e6:77:31:16:ac:f7:47:bc:2a:a5:
58:dc:7a:f5:f1:ff:86:ff:ee:40:29:cf:73:b5:7f:e0:fc:32:
df:a6:a7:1f:ee:a6:d9:7e:ab:ee:9a:68:a0:e5:73:1f:3f:5e:
e3:1b:ba:45:0e:01:08:8b:1e:75:c8:04:30:64:b3:7e:06:d3:
c3:3b:78:4c:ad:f2:bf:7c:50:18:b8:28:20:c1:15:25:35:da:
e1:e3:e5:9f:e3:e1:e5:3f:ce:b1:af:59:cc:c3:a6:cb:01:c6:
37:05:a7:a0:64:c8:6a:23:ee:9e:93:29:ae:ac:b0:34:17:0e:
a1:b6:4e:b4:78:e3:4d:a8:c6:10:16:6c:e8:99:9d:6d:0d:ee:
ee:70:ae:17:e0:68:e6:7c:86:36:4b:b7:63:01:b2:c0:9a:87:
ac:f1:46:b6:f2:66:73:d0:4a:cf:bc:8a:f2:2b:d5:ad:57:d4:
a2:24:88:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:08 2024 by rpki-client on console-ams.rpki-client.org