Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/_J_FnoPK2DGKlhapEDuj7piGHps.roa
File: _J_FnoPK2DGKlhapEDuj7piGHps.roa (raw, json)
Hash identifier: EQxGB4fAOC61rc0AgAswre09FzxWwuoLPKQ2K5SUnGA=
Subject key identifier: FC:9F:C5:9E:83:CA:D8:31:8A:96:16:A9:10:3B:A3:EE:98:86:1E:9B
Certificate issuer: /CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Certificate serial: 018CC50101E68FD8C414F34F5095D59B71E9
Authority key identifier: 52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/_J_FnoPK2DGKlhapEDuj7piGHps.roa
Signing time: Mon 01 Jan 2024 12:30:26 +0000
ROA not before: Mon 01 Jan 2024 12:30:26 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 203983
IP address blocks: 185.112.68.0/22 maxlen: 22
Validation: Failed, certificate revoked on Thu 02 Jan 2025 09:49:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c5:01:01:e6:8f:d8:c4:14:f3:4f:50:95:d5:9b:71:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5215fe83948cfc7d3e0072870c703fa313502cbc
Validity
Not Before: Jan 1 12:30:26 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fc9fc59e83cad8318a9616a9103ba3ee98861e9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:09:22:9c:21:a3:a9:52:97:0d:86:45:5e:86:
65:e3:a7:64:dd:d9:af:01:11:6e:f6:51:f9:e6:b7:
63:ac:61:ec:50:36:4b:af:4e:9c:6f:a8:4c:01:4b:
1f:24:a9:f5:3e:62:0b:d7:2f:df:26:5c:b3:4a:c8:
67:c4:6f:c4:45:7f:4d:9b:58:ec:51:63:b8:a0:47:
d1:55:5d:5e:40:55:55:44:b2:d9:09:c7:5c:3c:0e:
5d:53:d9:0d:b2:98:91:ac:89:57:80:b6:25:9a:2d:
9b:cc:b9:1a:ba:a7:1d:09:d2:8e:b0:b5:01:d5:b8:
3e:fa:00:93:b3:d7:a7:4a:c9:12:02:37:a1:64:11:
50:d4:a2:a6:c9:ce:36:a5:4c:2d:f4:a1:a3:cc:9d:
ab:4f:ea:c7:c9:93:1a:58:29:1c:49:1a:ad:5e:bc:
bf:40:4b:35:a4:2f:cc:7e:25:9e:7f:7c:1c:df:40:
ad:3e:6d:2f:2c:e1:45:f2:81:b5:ac:8f:b0:98:bd:
97:a3:13:dc:ba:ca:7c:23:da:9e:00:a0:34:e6:c7:
a8:e6:e2:fc:19:3b:01:72:3f:42:58:c0:81:12:ca:
4a:95:07:c7:7f:3c:16:b2:0a:52:e6:f7:52:b9:22:
1f:9e:0b:b2:3a:5d:00:d2:2c:74:40:7b:97:df:4c:
bd:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:9F:C5:9E:83:CA:D8:31:8A:96:16:A9:10:3B:A3:EE:98:86:1E:9B
X509v3 Authority Key Identifier:
keyid:52:15:FE:83:94:8C:FC:7D:3E:00:72:87:0C:70:3F:A3:13:50:2C:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UhX-g5SM_H0-AHKHDHA_oxNQLLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/_J_FnoPK2DGKlhapEDuj7piGHps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/c0934b-1d1d-45c0-ba6f-ef9814cff2b8/1/UhX-g5SM_H0-AHKHDHA_oxNQLLw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.68.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:02:09:e3:a5:86:f8:ad:61:56:77:46:37:98:e5:3e:99:e6:
c5:a8:5a:ac:5a:1c:34:3d:f0:e7:e0:85:22:da:d2:70:09:01:
2e:71:ae:98:23:18:f5:7a:f2:14:d7:4b:14:92:53:a6:be:45:
33:fb:73:da:9c:41:86:a9:cd:af:b0:54:6e:48:eb:c9:57:05:
4a:e3:5d:0f:ef:f3:8f:7c:a7:ba:a4:bc:79:42:2a:4d:6e:d3:
3e:df:77:6c:f9:07:78:7c:9c:68:86:a2:76:a8:d2:97:a0:c7:
b7:e0:33:1f:d3:a6:c8:69:8b:c5:b4:29:41:f5:46:6b:a1:26:
39:a5:d9:27:9d:ea:77:22:aa:99:ed:58:bf:b6:54:9c:74:18:
3d:a8:4f:30:38:b2:69:7a:61:73:9d:02:42:91:dd:cd:3a:e8:
c6:cd:f5:d0:19:82:ea:1b:ee:9c:26:83:73:00:32:0d:09:84:
9c:0a:41:1b:41:d0:ff:0b:3b:a4:49:84:e2:fa:41:9b:0d:06:
f3:a5:ed:51:49:e6:37:53:53:60:e6:e6:5f:09:41:46:82:d8:
d1:d1:4f:f9:50:07:ad:89:2d:bb:04:05:8c:0c:93:6a:23:46:
d7:52:9c:cc:50:72:ab:9e:7c:47:4f:de:9c:a2:8e:5d:d9:c9:
22:1d:f2:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 02:19:58 2025 by rpki-client