Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-9DAsozHCr9MSiK-_GRrlPY0S00.roa
File: 1-9DAsozHCr9MSiK-_GRrlPY0S00.roa (raw, json)
Hash identifier: HVgDwOcsNgonKO5vvohHf8Jwz7GQ4fH+Hzrb5pDm37U=
Subject key identifier: FB:D0:C0:B2:8C:C7:0A:BF:4C:4A:22:BE:FC:64:6B:94:F6:34:4B:4D
Certificate issuer: /CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Certificate serial: 01877468A91E386437DC56F6DC2540D469FA
Authority key identifier: D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-9DAsozHCr9MSiK-_GRrlPY0S00.roa
Signing time: Wed 12 Apr 2023 07:40:28 +0000
ROA not before: Wed 12 Apr 2023 07:40:28 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 51662
IP address blocks: 185.195.44.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:74:68:a9:1e:38:64:37:dc:56:f6:dc:25:40:d4:69:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d475fb0934cf6a58dccef110875dbe5e3e8b6b75
Validity
Not Before: Apr 12 07:40:28 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbd0c0b28cc70abf4c4a22befc646b94f6344b4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2b:4f:f6:fc:88:d9:23:05:ea:86:40:bf:62:
df:db:55:72:d5:2f:77:e0:43:62:70:88:19:2d:fe:
0f:60:10:28:31:3d:b9:e9:78:da:01:fd:b6:31:3d:
76:b2:d5:ff:fb:03:00:14:31:73:06:57:d8:04:a4:
66:82:ca:82:37:1b:ee:ec:95:83:8d:e2:b1:1d:0b:
18:c2:23:ed:9b:1e:73:93:9d:24:fc:30:1c:12:a3:
fb:38:67:ff:22:51:c8:15:0f:23:d6:05:ea:74:4c:
5e:83:18:ab:34:97:68:a5:dc:d0:ed:a6:99:81:03:
2f:f4:12:3c:3f:66:29:67:5f:cc:33:a8:21:e7:cb:
d6:c2:f6:57:a3:67:ac:b1:82:d1:f9:e2:ac:39:b0:
5e:d5:0a:c5:82:0f:e6:ed:3e:da:ed:c2:86:e5:ba:
75:e9:ae:af:01:01:08:52:db:79:5f:02:28:3c:ce:
f1:91:d4:ed:f7:0e:11:b4:45:85:0e:6a:1f:a1:5c:
e0:75:fe:90:b5:2a:a3:de:72:0c:67:44:09:22:61:
c8:ae:5f:93:52:d2:17:6c:72:dd:dc:bd:2d:8a:da:
a0:99:35:a5:74:80:af:f4:02:47:9c:22:df:14:99:
d6:45:10:a5:38:f9:a5:c1:25:16:2e:aa:f4:f1:39:
08:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:D0:C0:B2:8C:C7:0A:BF:4C:4A:22:BE:FC:64:6B:94:F6:34:4B:4D
X509v3 Authority Key Identifier:
keyid:D4:75:FB:09:34:CF:6A:58:DC:CE:F1:10:87:5D:BE:5E:3E:8B:6B:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1HX7CTTPaljczvEQh12-Xj6La3U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1-9DAsozHCr9MSiK-_GRrlPY0S00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/bff4aa-4f07-4129-8ad6-c7914ab64273/1/1HX7CTTPaljczvEQh12-Xj6La3U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.44.0/22
Signature Algorithm: sha256WithRSAEncryption
b2:0c:84:da:50:d6:39:52:8a:35:b1:69:7b:23:3f:d1:6d:46:
fa:7f:c7:59:b9:cf:70:66:8a:29:20:35:7a:1d:43:5b:a3:f3:
23:0c:d4:8e:8e:44:0d:ce:08:31:eb:52:7b:58:64:3d:af:c5:
50:9c:b7:32:74:24:38:2a:14:d6:b8:1e:6b:95:46:a1:7d:2f:
a2:e6:6a:90:b8:f5:c6:71:dd:71:9b:0d:e9:ff:71:c1:60:62:
41:56:ed:27:77:a0:59:35:e9:18:84:ac:f2:71:ab:10:3d:fa:
4c:e6:72:7d:54:de:f2:50:3a:7f:98:d7:63:c8:e6:40:81:b7:
8b:ae:af:34:40:0d:5c:a5:52:d0:53:59:64:dc:44:0c:a9:89:
06:f1:b8:24:76:74:3b:2e:cf:c2:4d:34:75:01:d2:58:c6:5e:
fe:33:07:67:be:a7:72:92:7c:03:9e:59:19:1b:23:b3:ce:c9:
72:34:44:cd:31:5c:03:f0:68:48:f6:b1:ed:48:55:86:7f:dc:
38:fd:18:41:f4:bd:86:6e:33:5b:5f:d2:a7:02:6b:21:d5:05:
e1:8c:51:5a:bd:c0:79:9a:b5:3a:14:cf:16:81:a6:a1:db:37:
7d:a7:03:a6:9d:14:19:88:aa:5f:e5:97:ba:26:f6:4f:77:cb:
87:22:d3:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:53:36 2024 by rpki-client on console-fra.rpki-client.org