Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D56Kt6UCqZVuTvX-PIyPWMTpv0A.roa
File: D56Kt6UCqZVuTvX-PIyPWMTpv0A.roa (raw, json)
Hash identifier: J10ryRPcJy+e81/r1/swomqUo7y43BpPLaV/7WicOqY=
Subject key identifier: 0F:9E:8A:B7:A5:02:A9:95:6E:4E:F5:FE:3C:8C:8F:58:C4:E9:BF:40
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E93B65C89D8EFE87DB7D312AA327
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D56Kt6UCqZVuTvX-PIyPWMTpv0A.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200475
IP address blocks: 185.255.212.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e9:3b:65:c8:9d:8e:fe:87:db:7d:31:2a:a3:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0f9e8ab7a502a9956e4ef5fe3c8c8f58c4e9bf40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:f0:a2:89:d7:c8:60:88:36:da:05:fb:51:
9b:ac:3a:41:4c:d8:4e:af:0c:29:a6:de:75:a7:a2:
b9:f8:98:82:27:48:67:eb:ce:94:7b:24:51:d0:3b:
42:4f:81:c2:10:70:6f:1b:b1:5c:e6:10:22:9b:98:
c3:b6:08:fc:ff:6c:37:d8:1d:f0:01:07:c9:2e:c8:
80:53:41:8e:82:be:80:8a:8d:1e:4c:20:75:6e:c9:
de:ef:d7:dd:08:57:65:f6:c8:e5:e9:d9:2a:99:10:
78:df:12:51:52:76:b3:c3:3b:7b:04:60:59:56:1a:
3e:f9:1b:72:73:ad:62:45:32:e5:ab:a5:4a:8a:ea:
e0:bb:d8:f6:27:8a:5f:04:b5:a7:86:8a:33:c4:b2:
2a:91:33:c7:04:8e:54:20:62:88:8d:97:99:06:4d:
ca:d6:4a:ff:c3:ea:69:37:bd:cd:f2:55:48:e9:b0:
8c:d7:36:7b:03:ca:74:7f:e6:70:7b:41:92:e0:d8:
95:71:1f:a8:db:5b:18:35:12:7d:87:87:fe:77:db:
d7:95:07:c2:0c:f0:b8:13:b8:a5:5c:63:52:ea:a5:
56:4e:08:57:11:4f:6e:2b:da:e3:77:9f:b9:43:c7:
1b:84:7f:03:5c:a7:89:55:f4:ec:2e:ed:d0:30:15:
2f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9E:8A:B7:A5:02:A9:95:6E:4E:F5:FE:3C:8C:8F:58:C4:E9:BF:40
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/D56Kt6UCqZVuTvX-PIyPWMTpv0A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.255.212.0/22
Signature Algorithm: sha256WithRSAEncryption
19:16:dd:c7:d9:b4:a6:2c:de:42:fc:f9:a4:2e:37:79:bf:80:
51:1c:a7:70:65:bb:d4:0c:e1:4a:11:b9:35:8e:2b:f7:36:43:
6f:ad:0e:91:66:6d:4f:fe:1f:8c:b5:ce:b6:6b:fc:6b:8e:f3:
7e:1d:a8:1d:b7:32:96:9d:81:f9:42:b8:54:69:84:5c:a0:dd:
c7:83:0a:bc:e0:6d:8f:b2:3c:71:25:92:2c:ec:3a:d9:17:db:
e6:10:2f:9c:47:55:b7:45:72:70:71:78:46:eb:fa:f8:bf:cb:
fc:17:2a:33:85:9b:2a:8b:07:3a:6a:ef:07:ba:e4:ad:dc:87:
d9:e2:88:2b:25:e6:28:56:eb:cf:b2:3e:39:9d:a1:1d:28:08:
5b:9c:93:df:3e:49:c0:be:b7:f4:84:c8:c7:2f:e7:4b:ec:5f:
e6:83:e3:92:b1:9e:c0:8d:ca:12:9f:a9:e8:6d:aa:f0:51:25:
e0:22:62:be:92:af:46:86:e4:24:90:a7:a9:7d:a2:3d:52:c4:
2c:10:f9:e6:a2:a0:50:d6:d9:c4:5d:dc:9a:cb:26:ed:d7:86:
6a:86:1d:6e:1b:df:3e:28:98:1d:d1:81:0e:02:b4:e1:b2:26:
5c:ee:6e:da:73:82:59:b3:70:03:7d:05:1f:97:3e:88:ae:5d:
8b:c0:da:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org