Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GIocMNe5tHMHQ_qH1hoY2HFVMKQ.roa
File: GIocMNe5tHMHQ_qH1hoY2HFVMKQ.roa (raw, json)
Hash identifier: H+UqV2s/KwelfNpxUP4lvmWMuOCNDeWyXj6VCGc9u6E=
Subject key identifier: 18:8A:1C:30:D7:B9:B4:73:07:43:FA:87:D6:1A:18:D8:71:55:30:A4
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F13A6FB85CBAD134426774383547
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GIocMNe5tHMHQ_qH1hoY2HFVMKQ.roa
Signing time: Mon 02 Jan 2023 11:38:49 +0000
ROA not before: Mon 02 Jan 2023 11:38:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208322
IP address blocks: 85.187.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f1:3a:6f:b8:5c:ba:d1:34:42:67:74:38:35:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=188a1c30d7b9b4730743fa87d61a18d8715530a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:6f:62:c0:d4:4e:82:13:d3:8b:4b:81:9f:7b:
c3:d8:99:9d:12:bf:b0:27:12:e3:c5:05:35:e0:c6:
85:54:00:d1:a1:f2:7b:2a:50:33:ab:6b:01:30:a1:
37:b5:44:4e:f8:8f:19:5d:72:46:1f:a4:5b:78:fb:
a1:e7:8a:a2:69:88:7c:d3:15:7f:88:56:ef:b6:01:
cb:1d:44:0c:fd:54:da:26:be:9d:88:1f:96:87:9c:
94:fa:99:53:f0:74:3d:79:d9:d2:06:33:8a:9a:9e:
d3:2c:36:bd:bd:c5:5b:28:18:6d:ac:e7:b3:4a:0d:
7e:47:b1:e7:25:51:f9:8a:87:e1:2a:28:71:7e:01:
d1:b3:ea:b6:7f:29:bc:7b:36:d4:54:de:33:ef:a5:
53:4a:fc:2e:07:8b:c9:ed:f1:da:9c:28:d2:d2:16:
3d:3c:b5:42:3f:e6:77:10:6c:89:0a:72:48:d2:0b:
cf:6c:54:36:63:55:31:dd:11:3b:fd:b3:3d:e1:60:
3c:95:6f:5a:60:0e:71:20:0b:54:65:49:1f:0c:98:
06:14:66:64:a4:40:7a:50:0f:5d:a6:3a:e2:c7:88:
6e:d7:ad:47:e6:7f:3a:63:bc:b4:dc:8a:04:30:df:
31:1d:5d:7f:13:17:66:ed:f7:10:c7:e8:f5:4c:1a:
5d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8A:1C:30:D7:B9:B4:73:07:43:FA:87:D6:1A:18:D8:71:55:30:A4
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/GIocMNe5tHMHQ_qH1hoY2HFVMKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:d3:de:92:d9:ef:05:f0:f9:1f:0c:ed:02:e8:8b:30:d2:d3:
b9:3d:df:a7:9c:22:58:d8:be:e7:1e:91:4f:6a:fa:82:52:9a:
b6:51:87:05:77:88:11:bf:c1:d4:03:52:de:93:a5:34:e0:fd:
1a:ba:c0:a7:01:92:34:b0:ad:f8:c7:76:5a:08:4d:17:52:b0:
5e:c0:44:8c:22:a9:b8:b3:9c:59:94:fa:9a:07:6f:2c:80:b6:
db:62:4e:8b:b9:7d:54:77:0d:61:34:26:af:0b:6b:2d:70:f0:
93:ac:c0:41:d0:69:0f:4d:30:7a:e6:85:38:c6:f0:99:f2:0b:
1d:9d:4c:63:7f:06:bf:5f:8d:0c:72:56:13:cb:70:96:f8:4b:
ab:e9:6d:59:70:87:59:f1:d5:66:2c:c0:63:e9:20:3e:99:45:
98:58:c9:d3:84:59:4c:e3:9b:57:6f:e4:ac:4d:b7:06:fb:b7:
1b:2d:0d:d2:44:9b:13:30:54:2b:b7:bc:9a:d5:d2:df:5e:46:
00:e2:a3:a2:a9:4b:a7:6c:3c:23:15:d6:8e:3c:2d:4f:fb:84:
d7:b7:18:43:eb:23:e7:4a:5b:a7:31:1b:11:ff:14:f9:d2:24:
1b:f8:48:c9:0f:3b:96:78:f4:7a:d8:d7:05:52:36:5e:e1:98:
a1:49:85:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org