Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ftf8aXsbiPh7zEVh1cp-BJp366A.roa
File: Ftf8aXsbiPh7zEVh1cp-BJp366A.roa (raw, json)
Hash identifier: pe2NxQADsTdO5ZIiTn6CTsjIH/9qaXW8T+bPjriDgWw=
Subject key identifier: 16:D7:FC:69:7B:1B:88:F8:7B:CC:45:61:D5:CA:7E:04:9A:77:EB:A0
Certificate issuer: /CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Certificate serial: 0192F6D282930FDFAE81EAA3AFFB73DFF6F6
Authority key identifier: 60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ftf8aXsbiPh7zEVh1cp-BJp366A.roa
Signing time: Mon 04 Nov 2024 10:57:23 +0000
ROA not before: Mon 04 Nov 2024 10:57:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 20473
IP address blocks: 185.194.177.0/24 maxlen: 24
185.209.38.0/24 maxlen: 24
185.209.73.0/24 maxlen: 24
185.210.235.0/24 maxlen: 24
185.222.29.0/24 maxlen: 24
185.246.112.0/24 maxlen: 24
193.58.146.0/24 maxlen: 24
194.76.172.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 05 Nov 2024 11:05:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:f6:d2:82:93:0f:df:ae:81:ea:a3:af:fb:73:df:f6:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=606784c105085b9d6ad5f73a03b20d9a5c114caf
Validity
Not Before: Nov 4 10:57:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=16d7fc697b1b88f87bcc4561d5ca7e049a77eba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:a7:8b:a8:f8:6e:82:6e:c9:71:fd:2f:52:bc:
a6:f1:95:aa:82:92:a3:00:10:11:10:26:38:10:c1:
a1:e5:4b:cd:db:d7:28:76:a5:bc:34:ee:6b:54:ac:
7a:dd:a8:4f:c1:3d:32:1d:83:8e:df:2a:4f:8e:36:
26:cc:10:9e:b8:f7:a3:ad:07:ef:c6:66:bf:b8:55:
96:01:ea:e3:bc:05:b9:0e:e7:bb:10:17:87:12:32:
4c:51:6d:5f:b2:8c:80:e2:a9:f4:40:21:0d:f3:6a:
2f:3d:44:8f:07:d2:44:34:14:1a:c0:26:3c:d6:9d:
d0:bd:ec:43:37:31:95:eb:14:a7:cd:4f:29:6d:f4:
0c:87:70:69:77:dd:ab:f3:9f:20:41:d8:47:b4:bf:
17:72:ae:58:ca:f2:fe:85:aa:ad:ba:7b:50:59:35:
c4:81:b2:e5:b4:f1:dd:27:b2:5d:6b:5f:80:c5:87:
06:40:62:7f:88:0f:1a:2e:8f:c5:fb:4d:51:80:50:
54:a4:7d:ea:72:d0:57:eb:c6:4e:9a:f4:1f:ca:69:
f0:6d:69:fe:86:e4:db:dd:03:0a:d1:d6:d5:de:71:
d9:aa:cf:1a:12:25:c7:fc:61:d5:f9:ca:b2:3f:21:
c8:74:6d:b0:c2:58:a2:05:da:4a:d6:73:a1:49:95:
ae:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:D7:FC:69:7B:1B:88:F8:7B:CC:45:61:D5:CA:7E:04:9A:77:EB:A0
X509v3 Authority Key Identifier:
keyid:60:67:84:C1:05:08:5B:9D:6A:D5:F7:3A:03:B2:0D:9A:5C:11:4C:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGeEwQUIW51q1fc6A7INmlwRTK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/Ftf8aXsbiPh7zEVh1cp-BJp366A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/2b834e-bad2-49ff-ba38-b4342ba91abc/1/YGeEwQUIW51q1fc6A7INmlwRTK8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.194.177.0/24
185.209.38.0/24
185.209.73.0/24
185.210.235.0/24
185.222.29.0/24
185.246.112.0/24
193.58.146.0/24
194.76.172.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:78:e3:0e:3d:8c:43:bf:b6:ef:9b:c6:2d:2c:3d:02:96:b9:
4b:c3:a0:62:ca:a9:9d:d4:61:f9:2c:99:66:f4:f6:63:e9:e1:
7f:62:38:24:62:92:a1:72:a8:97:8c:78:0d:d3:0d:86:dd:87:
d7:19:e2:55:1e:66:70:cd:0d:cc:d7:5a:d9:85:ea:b8:77:e9:
5f:5d:6b:32:71:d9:30:3f:56:6a:35:62:da:80:0b:88:24:24:
3e:27:e6:da:6b:f6:e5:db:a8:71:73:15:7f:80:62:6b:47:38:
7b:b9:5e:f0:01:ef:f4:f8:fc:2e:9f:26:b5:71:8c:40:a3:89:
e1:d6:03:1f:72:bb:74:d2:0e:55:3f:5f:9f:9f:a5:f5:f7:ba:
e9:6e:6a:e9:f6:00:1e:bb:4d:5a:c7:ee:4b:f8:7a:a3:96:c5:
f8:30:0e:81:2d:76:8d:e0:86:2c:7d:f0:ff:ea:4a:bc:45:6e:
4d:d7:13:64:56:53:ae:f6:2e:1d:21:66:08:b8:d1:b1:56:12:
7d:d2:51:5e:4b:67:8e:12:2f:67:c2:dc:a8:15:7d:b2:f0:1c:
1f:3e:fb:1b:41:6e:c4:86:eb:98:30:fb:db:0e:82:0e:4f:df:
62:43:8b:1d:20:b4:36:13:59:dd:5f:d7:27:3a:59:59:0b:83:
16:fa:ae:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 5 16:38:35 2024 by rpki-client on console-fra.rpki-client.org