Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-hdrwEB5kvkgUyGl3IOQnfHOhns.roa
File: 1-hdrwEB5kvkgUyGl3IOQnfHOhns.roa (raw, json)
Hash identifier: EeP96O07ZjDhOhQNXqXnQ2aWNownxO0OkOAxZ3E668w=
Subject key identifier: FA:17:6B:C0:40:79:92:F9:20:53:21:A5:DC:83:90:9D:F1:CE:86:7B
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F021025EB50F9BEE105FD3FE0C68
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-hdrwEB5kvkgUyGl3IOQnfHOhns.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207691
IP address blocks: 85.187.51.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f0:21:02:5e:b5:0f:9b:ee:10:5f:d3:fe:0c:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fa176bc0407992f9205321a5dc83909df1ce867b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:6e:9e:a5:26:ef:d9:eb:56:b7:50:ed:0c:
8a:70:4f:92:9d:15:97:73:b9:43:dc:b1:b5:75:04:
64:21:43:1e:46:b2:ac:c3:f9:ba:3e:f3:3b:b9:0d:
a8:b8:88:6a:b1:68:bc:c3:6f:f1:cc:b3:32:c7:92:
15:d2:36:07:17:30:8b:28:70:6a:5a:1d:0f:d8:64:
f1:67:4b:93:bc:5f:e5:0d:b6:05:21:5a:4e:1b:ea:
e0:31:15:0c:ab:2b:69:61:ef:cb:29:a9:3a:0e:39:
83:22:04:b3:df:c4:6c:58:6c:07:f6:0f:85:a0:5e:
54:bd:f2:a5:8d:61:01:c8:95:53:d0:d0:3a:f4:96:
b9:b5:b0:09:7d:dd:01:8f:2d:ee:64:87:3c:7e:dc:
3a:a5:ef:63:49:ad:3d:3f:da:88:ab:45:ba:05:db:
d6:8b:56:53:f1:48:7f:64:71:af:2c:88:ab:84:88:
6c:d2:12:71:c6:6a:df:7b:e7:7a:c7:cb:9a:a2:48:
d4:b8:7a:f1:83:e0:92:80:dc:27:8e:3c:d0:2e:e9:
f9:84:ca:d9:c0:f2:ac:08:a4:e8:f2:38:16:26:9c:
98:f3:96:07:70:f8:80:fe:9b:ee:39:99:2c:05:48:
0e:7c:f8:3f:34:fc:59:9d:ef:0f:54:04:2d:3a:81:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:17:6B:C0:40:79:92:F9:20:53:21:A5:DC:83:90:9D:F1:CE:86:7B
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1-hdrwEB5kvkgUyGl3IOQnfHOhns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.51.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b2:b4:26:e7:50:76:0b:6c:58:da:86:71:08:3e:b7:cf:21:
69:6f:ca:42:bf:a6:08:4e:3c:2b:e4:08:f2:b8:6b:ae:99:b2:
51:3a:6d:be:77:26:7f:7d:dc:67:df:36:14:f5:dc:49:28:52:
82:bf:0b:66:5a:45:d0:53:2b:39:bc:09:76:40:47:82:a5:6f:
c5:f6:5d:38:aa:76:6f:fb:40:03:4d:8a:b2:9f:97:61:f4:b7:
be:e4:c2:38:f6:36:59:a3:7f:77:5b:a4:58:6e:22:2b:29:89:
d2:9d:ab:49:f1:bc:4e:d1:8f:9b:79:1b:19:9e:7a:52:09:4d:
3e:6f:84:86:1d:90:31:59:e6:91:b5:a3:3b:fa:6a:ea:f5:a6:
27:27:1c:92:9c:0a:0d:e4:85:7a:e1:88:ef:07:6d:55:25:d0:
33:09:80:6c:a7:38:45:f9:92:65:88:70:6f:24:f1:f5:a7:54:
4c:23:c7:df:38:45:0c:2a:14:9a:b3:fb:7d:6d:4e:9b:8e:88:
cd:fc:4b:46:1c:8e:6b:67:72:92:f5:17:12:c8:b3:ff:91:c1:
f4:49:3d:d4:30:7b:2f:eb:38:a4:56:fd:9a:11:db:3d:36:e9:
71:70:0d:2b:31:3e:72:ba:85:2e:9b:29:ea:ec:69:4c:56:b9:
b9:16:6d:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org