Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t64jarvtsQn-SzdXXEkMP881eCI.roa
File: t64jarvtsQn-SzdXXEkMP881eCI.roa (raw, json)
Hash identifier: 9/0vabqu2HJRmbrfWDeSVLuEFbKwqbQeWjE/+DNOuTE=
Subject key identifier: B7:AE:23:6A:BB:ED:B1:09:FE:4B:37:57:5C:49:0C:3F:CF:35:78:22
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246EB2BCE754D294CDEAB50DFF9F53E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t64jarvtsQn-SzdXXEkMP881eCI.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203182
IP address blocks: 85.187.16.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:eb:2b:ce:75:4d:29:4c:de:ab:50:df:f9:f5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b7ae236abbedb109fe4b37575c490c3fcf357822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:86:c1:42:f2:f4:63:1a:f5:d6:da:22:57:
24:ef:04:c5:2e:22:32:1a:0a:79:27:69:46:24:1e:
c3:4b:96:ed:84:d5:4e:63:4e:5d:a2:13:b4:6f:b0:
db:e8:6b:49:8e:0c:e8:1a:61:a1:19:c1:01:f0:51:
e1:e7:ea:26:20:c2:21:09:60:f6:d2:92:65:ff:5f:
b7:78:0e:af:76:41:49:72:d5:90:04:6d:38:40:ba:
fe:c3:80:e3:b5:ed:70:6b:fc:c5:22:4c:dc:2e:d4:
5f:d4:ee:a0:e4:e8:ad:8d:8e:4a:d7:f9:03:db:10:
7d:02:aa:7b:fc:ff:bb:f4:4d:8d:0a:85:35:4f:a9:
12:8b:e2:ec:bc:1c:3c:af:eb:16:a4:1b:27:22:f7:
28:65:e9:73:09:4d:05:31:22:9d:bc:4c:3a:1f:e5:
f3:a4:71:7f:e7:38:cb:26:1b:1f:18:c2:bb:d4:60:
2f:f2:3e:a0:05:7e:a8:92:00:54:07:b4:e3:ed:4d:
03:0f:01:64:af:a3:d3:49:39:41:97:a7:ac:f1:a3:
df:67:76:79:87:45:07:0d:d4:ce:dc:2b:52:ed:bf:
26:80:7d:43:7d:17:8f:da:cb:47:18:1e:d7:6f:06:
99:cb:a5:c6:39:46:e2:e6:9f:c5:e2:52:c1:97:06:
90:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:AE:23:6A:BB:ED:B1:09:FE:4B:37:57:5C:49:0C:3F:CF:35:78:22
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/t64jarvtsQn-SzdXXEkMP881eCI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.16.0/24
Signature Algorithm: sha256WithRSAEncryption
52:1b:b3:b7:ba:f1:ec:e5:fa:31:6c:9b:a8:6c:7b:44:35:fa:
7c:be:1d:dd:f6:43:e5:fb:39:d0:14:c8:09:e5:57:5a:e2:16:
17:98:69:74:83:7c:98:df:ba:a9:33:e8:0f:99:29:cb:1c:3f:
4a:43:5c:e1:c2:c9:01:b5:c3:cf:a9:98:5f:09:c7:8e:86:2a:
aa:0b:0b:f8:f6:ff:55:ab:5f:af:fb:50:55:59:2c:7c:7e:59:
38:34:b3:20:ec:c4:58:7b:e1:9f:97:87:3a:a3:a2:a2:fa:0f:
f8:df:dc:e9:38:e9:8d:b4:8c:f2:17:0b:d9:b5:88:b9:35:f4:
94:5b:e5:68:57:be:46:ab:e4:8d:68:93:00:4f:df:14:20:f0:
bc:67:7a:b0:8d:8d:af:d2:c7:2e:a4:7e:08:2e:85:a9:94:bb:
7f:a5:f7:a6:8a:57:c8:08:81:a1:01:9e:3a:de:8d:e2:00:81:
99:02:65:12:f3:c3:05:1a:c8:eb:a1:39:31:80:9d:b8:f5:ab:
8d:ff:0e:48:ae:69:f8:36:41:b6:0a:85:04:c2:4a:4d:00:c3:
50:24:7d:9b:2e:21:b1:b3:74:a8:df:48:c5:75:e6:36:f3:c5:
af:0a:77:42:d2:41:84:af:1f:d4:49:a4:cc:07:57:da:c0:97:
38:09:09:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org