Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Jch2HGUYV-vVSWIchxNm7qvj_xw.roa
File: Jch2HGUYV-vVSWIchxNm7qvj_xw.roa (raw, json)
Hash identifier: umhR8uA+Qg3xvcJf+cew2a8byl2n1bo0EQ7RWIf7c88=
Subject key identifier: 25:C8:76:1C:65:18:57:EB:D5:49:62:1C:87:13:66:EE:AB:E3:FF:1C
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E07E7CA4E1E4AA3CA8FF61ED3896
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Jch2HGUYV-vVSWIchxNm7qvj_xw.roa
Signing time: Mon 02 Jan 2023 11:38:45 +0000
ROA not before: Mon 02 Jan 2023 11:38:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 57705
IP address blocks: 85.187.43.0/24 maxlen: 24
85.187.17.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e0:7e:7c:a4:e1:e4:aa:3c:a8:ff:61:ed:38:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=25c8761c651857ebd549621c871366eeabe3ff1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:50:5a:8e:23:ac:da:19:3f:d4:cc:ff:f0:80:
b5:82:1d:09:e7:1a:aa:72:f1:14:90:b2:d1:1c:37:
e1:f4:59:38:bd:da:fd:da:52:52:38:c5:2c:97:02:
ae:af:45:5d:a9:c5:f4:42:da:12:9b:3c:ce:5b:77:
0b:2c:48:ce:66:22:6c:28:0e:2e:2f:df:e3:d9:c8:
4b:cd:df:a3:d6:18:bd:bb:50:5f:79:3a:6a:61:74:
dd:7e:c5:23:4e:f7:86:9d:34:10:17:4a:e4:bc:bb:
2c:9f:d2:cd:20:af:96:ac:99:82:31:38:0c:54:65:
4d:b0:64:6e:2d:0b:fd:f6:69:88:12:14:5c:1c:da:
8e:b1:ca:63:4d:7c:99:13:48:f5:43:88:f8:49:86:
15:a7:08:b2:04:9d:0f:39:5b:02:1f:ef:45:3c:2d:
a0:c2:a0:a2:29:82:24:34:ed:8c:ff:d7:05:eb:b0:
40:c6:87:26:08:44:b6:db:2c:90:e4:59:65:e8:42:
bf:e7:e4:2f:73:d6:77:0c:8c:e3:5e:4e:bb:2a:aa:
07:0e:3f:d8:95:05:14:ce:b6:9b:bc:11:82:8d:e6:
f2:21:1a:c4:1b:64:e9:a5:87:3a:36:2f:48:9d:fd:
6f:83:9d:88:57:c0:ef:23:e3:f8:38:d1:d9:3a:3c:
84:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:C8:76:1C:65:18:57:EB:D5:49:62:1C:87:13:66:EE:AB:E3:FF:1C
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/Jch2HGUYV-vVSWIchxNm7qvj_xw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.17.0/24
85.187.43.0/24
Signature Algorithm: sha256WithRSAEncryption
db:7b:31:2a:c4:22:b8:58:a1:51:49:a1:a9:42:1d:fc:b1:8f:
f2:df:c0:12:6e:da:22:83:9c:4b:0b:94:a1:d4:fe:4f:c8:11:
d7:96:35:88:ba:a0:94:61:08:8c:19:00:24:29:1c:53:c8:6f:
24:00:83:a1:81:f6:77:f3:e8:35:75:90:64:63:4c:fb:48:d5:
be:67:e0:e9:2e:20:bc:08:7c:05:7c:55:02:08:d1:79:36:b1:
ea:8d:c1:a7:c7:76:b8:64:e7:3f:27:f5:ad:b1:cf:c5:c5:c3:
eb:f3:9e:44:51:9d:16:d8:51:8b:c7:3c:11:0b:ad:9c:ab:de:
32:41:3f:7f:f7:b2:50:65:49:2b:bd:86:a6:af:72:dd:de:be:
e2:81:27:c7:49:f0:1e:c9:bd:12:c1:71:83:94:f4:11:aa:96:
c9:94:53:78:8d:f2:22:f9:50:ee:63:35:10:7a:9d:61:19:da:
17:3b:fd:34:5a:2e:ad:cd:db:0d:50:ee:ce:43:d5:f7:69:9a:
38:d7:3e:6b:75:2a:34:f1:92:7a:6d:e9:5c:a9:de:80:0c:23:
a0:b1:bc:ab:a6:ba:9a:cd:e3:84:10:e6:48:75:79:dd:9a:b9:
ac:ec:e5:30:5e:f7:96:66:d2:73:36:21:c4:74:bc:ac:06:bc:
6c:91:0c:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org