Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1IF9EEiwSMLWIkVg9KHGSlxoMI0.roa
File: 1IF9EEiwSMLWIkVg9KHGSlxoMI0.roa (raw, json)
Hash identifier: MERPVYKPL8DmrT1yBOzvZ8YDpjstZzBrybuEGDTjKzM=
Subject key identifier: D4:81:7D:10:48:B0:48:C2:D6:22:45:60:F4:A1:C6:4A:5C:68:30:8D
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246EA0F2CFE63FAB69FDC2B66886410
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1IF9EEiwSMLWIkVg9KHGSlxoMI0.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202160
IP address blocks: 85.187.13.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ea:0f:2c:fe:63:fa:b6:9f:dc:2b:66:88:64:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d4817d1048b048c2d6224560f4a1c64a5c68308d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:f6:b8:50:7a:a5:da:2b:be:10:a2:14:1f:
d6:33:32:6b:33:55:23:ac:a0:34:e6:8d:ba:71:46:
41:ba:16:fc:ef:ed:0a:91:e7:4a:d4:4c:c2:ef:9b:
92:b1:09:79:b7:4c:97:24:3f:37:54:70:5d:60:f3:
ec:77:67:66:d7:fc:18:8e:25:b0:77:c8:0f:07:8b:
c9:b8:c4:16:ad:1f:0d:b3:81:57:3b:47:64:13:ac:
86:48:7a:3d:c2:72:9b:34:62:33:21:a9:fa:6d:73:
4e:c4:dc:e4:14:19:99:eb:6e:43:1c:bf:8b:bc:40:
ea:c3:75:b0:4f:ed:93:3c:9f:50:bd:33:d7:9b:41:
da:31:99:fe:b6:3e:5e:28:1f:ce:c5:75:0e:fc:72:
09:bb:60:b9:f0:93:5e:7e:75:9d:26:bc:71:4b:7b:
66:c5:5c:e1:18:be:04:5c:f6:79:99:89:93:1b:f0:
59:b2:74:52:32:f9:5e:29:bb:7a:dd:27:35:30:cc:
59:e9:ef:72:6f:31:03:36:d8:f2:41:f8:59:39:99:
16:e4:4b:2f:4d:ef:57:73:59:cc:43:3e:4a:ee:ad:
16:c5:4e:61:95:d0:1a:b8:b1:62:5d:cd:ac:a3:e0:
ac:d4:31:3c:b8:68:55:e2:46:e4:c8:a5:c0:86:1c:
a8:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:81:7D:10:48:B0:48:C2:D6:22:45:60:F4:A1:C6:4A:5C:68:30:8D
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1IF9EEiwSMLWIkVg9KHGSlxoMI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.13.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:3c:76:43:83:35:28:38:0b:2c:ba:af:77:9d:3f:cc:79:b4:
9d:08:8a:e9:69:dd:b8:bf:20:dc:e7:9f:59:75:28:87:90:2c:
22:96:1f:ec:d0:d4:ef:b8:ce:75:d8:68:bf:2a:fe:17:78:06:
e3:31:bf:7c:7a:5d:32:f5:6a:c8:00:4d:0a:75:56:68:9a:c9:
ed:49:17:4e:fd:9f:3b:aa:e1:1d:62:29:86:d7:e9:9a:37:e9:
02:09:a2:30:ff:e9:6b:e4:e4:1e:65:d6:1c:02:a3:09:f1:0b:
b6:8a:6b:ec:eb:65:1e:fc:27:63:ff:4e:bd:6d:df:99:fb:d0:
95:7b:d6:83:d5:3d:7d:eb:b5:bc:4a:6a:c8:f9:68:5c:93:e3:
95:e8:61:5b:57:c8:fd:67:e4:7f:ac:76:76:13:32:23:20:33:
98:ef:e4:b5:a0:63:f0:88:39:59:cf:c6:3f:ab:4d:13:22:f2:
72:9d:6b:ba:ec:d0:fc:96:cd:6f:d1:51:1a:c2:98:11:ad:08:
f6:f2:ef:01:eb:b0:45:7d:c4:09:e0:2b:44:44:63:46:38:0a:
d4:2a:e0:aa:02:e8:ad:16:6a:36:58:96:51:f8:8d:5f:55:8e:
bb:52:ec:9c:ea:f5:ba:b0:86:5d:b9:f5:b1:6f:a8:99:06:0c:
0f:2e:f0:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:11 2024 by rpki-client on console-fra.rpki-client.org