Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1-rIbAr5StcPL5N_oGmFYH6FQcpM.roa
File: 1-rIbAr5StcPL5N_oGmFYH6FQcpM.roa (raw, json)
Hash identifier: VEStIQhBq48e6Kha3SX17KoaGSlNDPtH/Oyz6UdmG1s=
Subject key identifier: FA:B2:1B:02:BE:52:B5:C3:CB:E4:DF:E8:1A:61:58:1F:A1:50:72:93
Certificate issuer: /CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Certificate serial: 0189E3DC152F15FD6DF7951359E94849EFA2
Authority key identifier: F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1-rIbAr5StcPL5N_oGmFYH6FQcpM.roa
Signing time: Fri 11 Aug 2023 09:09:58 +0000
ROA not before: Fri 11 Aug 2023 09:09:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197450
IP address blocks: 185.110.63.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 26 Aug 2023 04:19:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:e3:dc:15:2f:15:fd:6d:f7:95:13:59:e9:48:49:ef:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04eb204f358004788224e2fb18e4d5e74bebf8d
Validity
Not Before: Aug 11 09:09:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fab21b02be52b5c3cbe4dfe81a61581fa1507293
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:de:5f:bc:b2:71:7d:7b:48:97:27:3b:29:f1:
eb:3b:a6:0d:f2:30:34:85:72:a5:18:4e:d1:49:7c:
75:2e:02:1e:00:f7:43:c8:a4:8b:e5:e3:b2:6b:58:
9e:79:62:52:02:d8:d7:c0:06:c8:05:0a:f5:02:83:
c2:b8:ba:20:da:79:c9:66:c2:a5:ad:73:82:a9:38:
b2:05:98:5f:2e:11:7f:81:30:b5:34:7e:b2:ee:ae:
3c:d9:07:c9:d9:d7:cb:ba:bf:8c:2b:22:4f:8c:b7:
a1:a3:02:3b:74:79:5d:9a:4b:3d:f6:63:7b:86:f7:
19:15:5c:b3:0a:9d:dc:b4:5e:24:e1:78:5f:4b:cb:
de:73:7a:cb:14:1f:47:43:ba:8b:08:1b:20:aa:2d:
b9:b5:0c:4a:a7:7c:7d:70:7c:e9:b9:f9:2f:36:a4:
14:13:e9:37:f3:ef:fc:ec:1f:ac:cb:7b:23:23:5a:
a9:51:ee:eb:22:1b:cf:d2:dc:75:72:f8:67:bb:fd:
d8:05:d7:6d:b8:c4:a7:b9:6b:0f:57:39:50:15:b3:
88:e1:09:f9:2f:55:12:8e:b8:58:98:ea:44:f8:55:
dc:54:20:a0:b1:ca:34:48:1e:f0:cb:94:b7:48:5e:
0d:94:ae:4c:69:8f:bb:7d:e0:1c:a8:80:3a:9a:de:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B2:1B:02:BE:52:B5:C3:CB:E4:DF:E8:1A:61:58:1F:A1:50:72:93
X509v3 Authority Key Identifier:
keyid:F0:4E:B2:04:F3:58:00:47:88:22:4E:2F:B1:8E:4D:5E:74:BE:BF:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8E6yBPNYAEeIIk4vsY5NXnS-v40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/1-rIbAr5StcPL5N_oGmFYH6FQcpM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/9ab42a-df92-4e42-9e33-5c5892afa487/1/8E6yBPNYAEeIIk4vsY5NXnS-v40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
16:37:d2:77:04:ce:46:05:4b:f4:93:b4:54:06:ad:47:cb:72:
07:06:11:fd:96:95:12:3a:d7:f9:a1:29:2c:f0:01:94:75:6c:
f5:4b:24:a1:69:7c:7f:79:a6:7d:8d:6c:df:1b:0f:d8:d4:a7:
99:f9:1c:2b:6d:6d:c0:ee:3e:5c:f0:29:6d:66:ff:ee:6b:06:
21:22:8f:53:28:d1:d7:19:5f:9c:57:df:d9:90:d6:1a:de:9b:
cf:72:7f:be:2b:47:e5:dd:f9:17:e0:d2:06:32:88:86:d0:ed:
0f:1d:a7:86:d5:b2:e5:c8:f5:d3:0a:eb:28:85:71:68:5c:5d:
8f:c4:06:e2:d2:24:f2:50:9e:43:31:8c:bf:3a:9d:58:f0:8c:
7b:c0:18:ec:51:85:0a:73:ed:8e:fb:a6:7b:a8:d0:a0:e2:29:
e7:af:21:29:52:a6:79:5b:d5:fe:08:a1:75:76:59:4b:43:fa:
8c:54:55:66:20:c1:b1:f0:38:ee:67:8c:1d:21:7b:c8:3a:d3:
84:60:56:97:70:77:87:90:9b:c8:a7:39:6d:98:85:fb:ff:0e:
1d:9a:e2:f4:aa:8a:ee:31:8d:22:89:44:8b:62:55:bb:0a:be:
50:d6:1a:19:2e:de:a2:b1:a7:35:33:5d:b0:fb:b6:a5:35:19:
aa:de:18:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:09 2024 by rpki-client on console-fra.rpki-client.org