Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/dv97EDcE3SwsNbncaQ4ZUBX2Ato.roa
File: dv97EDcE3SwsNbncaQ4ZUBX2Ato.roa (raw, json)
Hash identifier: mp4eqJAzrYP9aNW4+vtZUUZFFbTHwULO/d2TaLUlFA8=
Subject key identifier: 76:FF:7B:10:37:04:DD:2C:2C:35:B9:DC:69:0E:19:50:15:F6:02:DA
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E225F9316DA03EA983491698B9C6
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/dv97EDcE3SwsNbncaQ4ZUBX2Ato.roa
Signing time: Mon 02 Jan 2023 11:38:45 +0000
ROA not before: Mon 02 Jan 2023 11:38:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60182
IP address blocks: 85.187.233.0/24 maxlen: 24
85.187.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e2:25:f9:31:6d:a0:3e:a9:83:49:16:98:b9:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=76ff7b103704dd2c2c35b9dc690e195015f602da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:e7:1f:99:3e:62:08:b3:43:84:58:f3:87:a2:
a5:5e:06:8f:41:05:22:25:6c:e4:9a:c8:e2:83:2a:
4d:bf:69:87:53:f7:69:95:f0:f5:dc:fc:ad:6e:46:
98:6f:90:01:d2:80:bc:f6:2b:83:ae:ef:55:02:f5:
09:33:85:d3:06:d7:d6:ac:7d:3b:41:01:8a:6a:e7:
65:85:e2:b7:5a:5b:90:b7:51:31:36:aa:3a:7b:61:
70:c1:e6:f1:28:f0:00:9e:12:c8:27:3b:97:8a:2b:
53:4e:d6:d6:78:92:c3:d2:3d:0f:40:41:08:0b:53:
5f:8c:cc:0c:a2:72:14:9d:cc:67:88:1b:81:e6:a3:
14:b5:2e:55:fc:2d:7c:1a:93:09:7d:bf:6d:4c:32:
7c:06:00:09:21:f2:9d:46:15:d3:1c:57:9a:60:f5:
4b:12:24:4d:0f:44:58:b8:98:f1:7a:a0:ae:40:92:
59:80:1c:9e:4f:db:c5:ba:0d:2f:2c:02:ea:18:2a:
08:97:75:9b:7a:58:cb:bd:5e:79:62:ae:ce:be:bb:
84:fd:df:cc:6d:d4:c3:00:56:07:ef:45:ce:29:90:
83:5d:98:4b:c6:c7:7d:ba:55:9a:43:93:7e:5a:fa:
78:1d:b8:40:68:15:92:56:00:4c:cb:86:3f:cc:08:
b1:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:FF:7B:10:37:04:DD:2C:2C:35:B9:DC:69:0E:19:50:15:F6:02:DA
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/dv97EDcE3SwsNbncaQ4ZUBX2Ato.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.233.0/24
85.187.242.0/24
Signature Algorithm: sha256WithRSAEncryption
84:96:88:b3:bd:09:b6:6a:47:64:2f:1a:72:73:88:68:87:88:
ff:59:1a:58:18:87:2a:56:62:47:4e:2f:fc:6c:4e:d7:fe:32:
d3:dd:b9:49:75:c9:4c:ff:15:31:ba:7e:c6:e6:11:50:4f:d4:
82:cd:1b:1f:c6:94:11:e1:4e:97:73:1c:a2:41:83:71:5d:44:
52:00:cb:68:92:67:09:de:aa:29:9d:1c:c6:9f:56:7e:72:93:
0a:6b:c2:b5:29:a4:6a:d0:eb:17:ad:3a:c1:ea:49:82:ce:47:
9b:62:34:5d:5d:05:5d:ff:03:a0:3a:d2:55:4b:1d:ff:c6:97:
82:fd:bc:6e:1e:e2:5a:26:3c:21:f9:c0:b4:31:fb:fc:9f:d2:
64:cc:e4:8e:d7:7f:69:fd:00:1a:ae:1c:42:81:b7:64:37:f2:
6f:26:c2:53:0f:2e:24:88:c8:2a:e0:4b:fa:99:5a:69:cc:ef:
69:7d:c7:85:a5:9d:59:4d:b1:86:17:5f:72:a1:b2:55:15:5d:
32:fc:a0:ba:8e:97:9a:41:f6:78:83:b7:9d:cf:89:da:fc:e5:
ec:52:f0:65:58:21:d9:c4:42:14:ec:51:d0:42:57:9c:0e:e1:
a2:30:d5:ff:a1:80:7d:3c:76:ee:e9:75:6a:87:8f:fe:c6:72:
24:bb:06:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org