Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t5npfqhwykfuStuEx5nph5aS534.roa
File: t5npfqhwykfuStuEx5nph5aS534.roa (raw, json)
Hash identifier: 7sVw5/sGbvSJhXzbfwT6qTG/dj4cUk4BcO1vc5vlnG0=
Subject key identifier: B7:99:E9:7E:A8:70:CA:47:EE:4A:DB:84:C7:99:E9:87:96:92:E7:7E
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246D51132E47C7D7CB2F381B4B60878
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t5npfqhwykfuStuEx5nph5aS534.roa
Signing time: Mon 02 Jan 2023 11:38:42 +0000
ROA not before: Mon 02 Jan 2023 11:38:42 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44901
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:d5:11:32:e4:7c:7d:7c:b2:f3:81:b4:b6:08:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b799e97ea870ca47ee4adb84c799e9879692e77e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:aa:f2:89:0f:f5:ce:0d:61:36:c4:41:25:72:
30:7a:e5:24:7c:db:40:29:a5:73:85:1a:8c:2d:ba:
36:d3:a4:72:5e:ab:f7:57:0a:11:37:60:8d:4a:fc:
9d:27:2a:3c:e5:b7:42:5b:1f:91:8c:f4:fe:92:23:
2a:09:fe:14:2e:51:d9:28:27:88:59:63:d5:91:62:
c2:58:71:74:1b:36:b9:e6:4f:2a:25:2c:7c:cb:6e:
27:59:73:7f:36:0f:1d:3d:b6:c4:96:a7:2f:16:61:
86:3d:41:54:34:f4:26:5e:b2:68:8f:40:98:71:77:
97:4d:3c:73:9a:53:54:94:ba:76:ab:69:40:4c:cd:
ca:f0:39:b4:4b:1d:d4:89:2d:ba:58:75:93:91:a3:
b1:cc:71:41:0d:da:63:64:17:46:e2:d8:f5:e1:a9:
4a:bf:72:8c:58:0f:6d:3f:7b:70:c6:b0:0d:ca:03:
5f:90:5f:cc:20:ca:6a:24:4c:26:a8:0d:f3:4a:b0:
54:e2:90:11:15:5f:bb:69:c4:6e:d4:6a:33:35:44:
86:8c:0e:da:7e:8d:b3:03:96:0d:6c:eb:43:bd:4d:
53:b4:e2:9b:4c:4b:4b:bf:2e:44:7f:24:ee:48:4a:
7c:8d:ea:0d:14:2d:48:0c:5c:93:89:5a:c4:68:fb:
46:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:99:E9:7E:A8:70:CA:47:EE:4A:DB:84:C7:99:E9:87:96:92:E7:7E
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t5npfqhwykfuStuEx5nph5aS534.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
89:e1:f2:24:12:01:9b:39:6e:8f:e0:96:0b:c5:73:19:91:24:
28:a8:7c:f3:c7:7a:1c:44:aa:a2:75:c2:68:ec:17:5a:f0:39:
ed:a3:01:d8:40:ad:bf:e2:2f:e2:0f:5f:9e:0e:4f:2f:d8:77:
b7:bd:36:e7:37:95:0f:05:f5:8c:e0:98:3f:9c:54:38:26:a9:
3e:dd:17:d5:c1:fe:66:3c:7c:90:56:33:48:b3:4d:70:85:94:
fd:e8:a6:17:28:10:96:2b:96:78:ad:de:1a:a9:b1:19:4d:ce:
65:36:57:45:70:9a:7e:f4:f7:8d:eb:91:5d:2b:5f:67:86:83:
4f:3f:49:b3:71:dc:98:22:46:fc:db:e6:e3:02:cf:62:8e:df:
26:bd:42:38:75:76:cc:35:5d:0c:32:5d:17:82:c1:05:15:30:
38:29:83:e5:22:35:84:27:73:5e:04:4b:f9:82:b8:b1:ab:c5:
c3:d3:1c:c5:20:b6:d5:f2:98:f1:c6:6e:46:0c:9c:08:d0:62:
e9:78:51:6b:bb:0c:90:d0:0e:bb:31:6c:ee:c5:89:0e:55:ce:
2d:b5:6d:f8:5e:5d:db:50:e4:76:7d:40:6f:2e:65:c5:05:cf:
b0:5c:34:57:6a:28:ed:52:da:13:ca:63:32:79:2e:25:df:4c:
5c:33:c3:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org