Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/fxKCBWfHUXMt9uHf5VZ29RrIYB8.roa
File: fxKCBWfHUXMt9uHf5VZ29RrIYB8.roa (raw, json)
Hash identifier: 1a8VPLwm0dFCNX9+C290hlh7DRQXGaANqoLoOmIZ7zA=
Subject key identifier: 7F:12:82:05:67:C7:51:73:2D:F6:E1:DF:E5:56:76:F5:1A:C8:60:1F
Certificate issuer: /CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Certificate serial: 01896828CE4564E022A4AB119AAEA6342ED5
Authority key identifier: 35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/fxKCBWfHUXMt9uHf5VZ29RrIYB8.roa
Signing time: Tue 18 Jul 2023 08:40:51 +0000
ROA not before: Tue 18 Jul 2023 08:40:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 185.155.232.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:68:28:ce:45:64:e0:22:a4:ab:11:9a:ae:a6:34:2e:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3517c9de927fa75beaef7885f0d88f6f4d2a0ed6
Validity
Not Before: Jul 18 08:40:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7f12820567c751732df6e1dfe55676f51ac8601f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fa:0d:14:04:93:ea:a7:bf:0b:72:4c:ad:9f:
59:ec:14:bf:87:a2:a6:83:c0:ee:1a:fd:36:9a:2f:
43:c5:91:42:2a:13:c6:f3:0a:61:c9:66:d4:a9:d4:
6d:c7:e3:98:7f:0c:17:58:dc:a1:92:1a:e6:64:9c:
6f:20:7b:b8:1a:c5:43:3c:46:dc:f4:2d:b5:d6:d7:
27:b4:89:56:b1:7f:80:c1:ac:a8:2c:b2:2c:63:ee:
93:50:12:3c:89:cc:7a:28:15:4a:22:29:d5:42:d7:
eb:4e:9a:ff:fa:3f:7c:ff:5d:ac:b4:db:31:1f:ac:
d4:07:3b:d1:a1:08:0a:09:c0:9d:69:7d:9e:6a:80:
c7:8b:99:52:e6:a1:4e:7c:4c:1c:db:12:49:77:86:
6f:f1:d0:ff:2e:b4:6b:3a:33:47:a2:d0:5c:75:67:
bd:f2:0f:45:95:fd:94:db:83:3f:86:26:77:58:61:
8e:6b:3e:13:64:1e:34:f6:15:d7:37:ce:99:37:9e:
90:4a:05:10:6a:6f:7e:ab:81:1e:ba:0e:0c:43:13:
01:33:ac:a9:9c:1e:87:cc:0d:43:11:c0:4b:ff:d5:
d7:f5:8b:e1:c5:ed:23:65:b0:28:60:05:f7:f0:6e:
d0:56:27:2e:23:05:ba:6c:80:65:61:b7:d9:97:3f:
2d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:12:82:05:67:C7:51:73:2D:F6:E1:DF:E5:56:76:F5:1A:C8:60:1F
X509v3 Authority Key Identifier:
keyid:35:17:C9:DE:92:7F:A7:5B:EA:EF:78:85:F0:D8:8F:6F:4D:2A:0E:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRfJ3pJ_p1vq73iF8NiPb00qDtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/fxKCBWfHUXMt9uHf5VZ29RrIYB8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/954ade-84b7-446d-a6e2-fd3b3002c0bb/1/NRfJ3pJ_p1vq73iF8NiPb00qDtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.232.0/24
Signature Algorithm: sha256WithRSAEncryption
77:d6:fb:e9:bb:87:d1:fd:e5:20:ce:32:d5:88:10:d6:ff:2f:
07:3e:a1:94:26:cd:6c:f8:9a:5e:e3:a2:80:da:4a:20:f9:bb:
e7:a0:b3:f9:b4:cd:11:c8:62:7d:91:1a:5c:42:01:0c:d7:49:
2c:73:1b:b8:d2:0d:15:79:6c:4a:05:c3:39:de:d8:53:81:cd:
2e:61:3e:13:4c:3f:1f:95:2f:bb:d2:2c:a1:88:33:c0:16:07:
bb:6d:cb:b2:79:ae:85:d4:48:1c:ab:fc:84:86:25:9c:b7:80:
5b:db:cd:e9:af:f9:71:4a:64:a5:9b:ce:18:76:bc:db:1c:2c:
1e:23:cd:ef:23:36:89:72:7f:2b:cd:e1:4b:5a:9c:ea:23:d0:
fc:81:c3:04:df:10:58:cf:c5:ec:ee:57:31:9a:33:1b:ab:c3:
ea:3f:94:6b:e5:2b:68:6d:45:5a:d7:e2:0f:1f:17:e2:2c:81:
4e:dc:2c:88:f3:f5:07:48:82:84:b3:69:91:3f:cf:1b:06:1d:
6e:99:7c:4b:b6:d8:8d:a9:8c:b1:83:00:10:bd:be:41:3b:b6:
ab:98:f7:a8:4b:f1:4d:19:cd:f8:e4:87:b7:3b:f8:6e:37:9b:
36:a3:96:c7:16:90:c4:97:08:92:b6:9a:5c:34:86:d1:23:f9:
e3:03:32:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:57:51 2024 by rpki-client on console-fra.rpki-client.org