Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wTJvE6kbrFb_s7koY-PvjEJ4lu0.roa
File: wTJvE6kbrFb_s7koY-PvjEJ4lu0.roa (raw, json)
Hash identifier: 6wx7PWGAY+dMCHZJvepKq+KHE1MndzdhIZqmzXTWuqA=
Subject key identifier: C1:32:6F:13:A9:1B:AC:56:FF:B3:B9:28:63:E3:EF:8C:42:78:96:ED
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246ED5DDC6F700CDB446CB94183742E
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wTJvE6kbrFb_s7koY-PvjEJ4lu0.roa
Signing time: Mon 02 Jan 2023 11:38:48 +0000
ROA not before: Mon 02 Jan 2023 11:38:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205129
IP address blocks: 85.187.48.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:ed:5d:dc:6f:70:0c:db:44:6c:b9:41:83:74:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c1326f13a91bac56ffb3b92863e3ef8c427896ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:4f:d5:7c:ab:71:77:4e:cc:41:48:32:43:
f9:63:89:b2:80:5e:b6:25:b2:9d:81:0b:b4:5c:fa:
4a:ea:57:91:26:be:ef:d4:b2:79:ea:bb:c0:c1:a5:
34:79:bc:a7:dd:2a:87:01:87:9a:26:a9:cd:5b:24:
9f:69:1d:5d:50:b9:c4:77:62:4f:86:1c:31:a9:07:
b4:4b:37:1d:a1:52:c0:26:6c:90:3b:c3:d9:d8:49:
06:ca:92:c8:37:4a:55:c1:5f:2a:e3:d0:ad:51:45:
f9:4c:57:7f:47:1a:a3:30:02:98:4d:6e:7a:f6:43:
57:bf:ca:7d:47:59:69:80:fa:dd:d4:62:38:44:f6:
9e:e9:45:49:29:63:c2:5c:7b:9f:94:70:c8:d2:6e:
f0:5d:d8:89:40:1e:dd:77:40:df:56:69:22:e2:ab:
3a:bb:a5:fa:73:bf:9a:2f:67:31:41:18:c0:08:f7:
6f:be:e8:7d:c4:33:76:67:18:ab:a4:36:f0:63:38:
99:5b:12:e5:eb:cd:9e:bd:08:5f:f6:ba:a5:19:1a:
72:d1:70:24:08:72:11:70:49:19:37:49:31:cd:6d:
49:db:35:ea:c3:fb:d2:44:4e:44:45:ed:0e:d5:6d:
27:2c:92:af:42:53:97:79:48:43:ed:c0:56:57:81:
43:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:32:6F:13:A9:1B:AC:56:FF:B3:B9:28:63:E3:EF:8C:42:78:96:ED
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/wTJvE6kbrFb_s7koY-PvjEJ4lu0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.48.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:c1:38:67:bd:0a:e1:32:cc:4f:dc:17:39:96:e2:6b:87:fc:
61:50:c2:7b:49:58:d8:6a:08:bf:34:e1:7b:cc:bc:d1:df:48:
98:1f:23:9f:04:7f:23:70:d9:35:34:28:29:8d:e7:81:c0:8d:
4a:17:6e:82:ff:02:f1:fa:fd:41:49:52:aa:a0:64:fd:8b:73:
3b:6b:ea:b3:d5:ce:f9:61:a5:3e:17:d9:89:31:1d:ca:72:ca:
50:5b:cf:91:e3:50:ac:67:44:fb:db:ff:af:82:2f:1f:69:d9:
c0:1f:f3:09:a7:c7:9d:1b:c7:1c:9a:2f:6f:62:c2:49:98:e9:
0a:2f:cf:7a:c0:b9:3c:84:3b:50:0e:6e:d6:df:b3:4c:bd:6d:
bc:1d:23:1c:63:81:62:cf:a0:9f:bd:bf:93:eb:b7:cc:93:fb:
75:c2:cc:f2:04:ea:c2:6e:86:be:f9:ab:61:de:89:32:6b:f4:
d8:7a:a1:41:81:8a:f9:d6:75:03:21:20:6b:53:58:8b:c1:4c:
27:11:f0:52:2d:3f:34:1e:01:6c:b2:26:01:9d:03:3d:c0:16:
33:3a:ec:53:0f:3e:ce:a9:8a:bd:fa:0d:34:9b:36:52:18:51:
af:68:ca:e4:9d:4d:41:f1:82:e6:df:6c:38:12:49:aa:ab:59:
84:49:47:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:12 2024 by rpki-client on console-fra.rpki-client.org