Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/_pGF0TwudfvM2LgQ1drxUd4GGuA.roa
File: _pGF0TwudfvM2LgQ1drxUd4GGuA.roa (raw, json)
Hash identifier: qEKFNndo/M9srBZf/7bYMJHmIHf9X4IJkU4gYLpq8os=
Subject key identifier: FE:91:85:D1:3C:2E:75:FB:CC:D8:B8:10:D5:DA:F1:51:DE:06:1A:E0
Certificate issuer: /CN=5ece10f13c46806926a67946cc6a1102aa09031a
Certificate serial: 01856D4AE47523A4CD19F121417256B05BBE
Authority key identifier: 5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/_pGF0TwudfvM2LgQ1drxUd4GGuA.roa
Signing time: Sun 01 Jan 2023 12:25:02 +0000
ROA not before: Sun 01 Jan 2023 12:25:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 205279
IP address blocks: 185.223.120.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:4a:e4:75:23:a4:cd:19:f1:21:41:72:56:b0:5b:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ece10f13c46806926a67946cc6a1102aa09031a
Validity
Not Before: Jan 1 12:25:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fe9185d13c2e75fbccd8b810d5daf151de061ae0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cd:58:3e:73:9f:3b:04:92:b6:65:36:3d:06:
8e:48:ac:e3:e1:dd:e9:06:ed:7a:b7:de:0b:00:23:
e2:95:95:15:eb:87:6b:0a:59:a1:df:a6:5a:06:ac:
01:b8:9a:f4:9d:1e:a5:c4:a7:bf:8b:45:b1:4a:4f:
c6:86:0b:c1:eb:61:c4:3b:f1:90:a4:33:eb:ac:c6:
98:f0:b6:2f:d9:ba:45:60:bf:78:00:fd:dc:aa:b0:
32:6d:8c:cf:00:82:dd:d6:b8:aa:ff:9b:35:75:3a:
6c:ca:d5:30:14:04:6c:4d:d6:30:21:cf:bf:e4:55:
90:98:3c:4d:2f:6c:4b:64:df:32:1c:c7:5e:4c:32:
10:fe:36:46:3e:12:10:e3:32:21:fe:da:08:2a:b5:
fc:3a:f9:9c:6c:99:cb:d0:4a:8e:b1:ab:59:3b:b0:
ea:91:78:42:a8:bd:1b:5d:5d:b5:2e:52:1b:2f:3e:
b0:c5:7a:57:a6:93:cf:3d:07:94:49:2b:b6:67:0b:
b6:a3:42:a9:5c:43:73:81:3f:36:5c:4a:e3:ef:1a:
e4:0a:b8:70:d2:4c:bf:a0:b1:e3:5f:d8:52:09:2a:
bc:23:cc:a5:f9:7a:86:82:ca:e6:74:91:0f:ac:8d:
0c:78:87:63:17:26:5c:99:1f:9c:ba:41:ac:e9:7e:
8a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:91:85:D1:3C:2E:75:FB:CC:D8:B8:10:D5:DA:F1:51:DE:06:1A:E0
X509v3 Authority Key Identifier:
keyid:5E:CE:10:F1:3C:46:80:69:26:A6:79:46:CC:6A:11:02:AA:09:03:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/_pGF0TwudfvM2LgQ1drxUd4GGuA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/ae3323-0a49-4d7a-8955-b6f7aed856c0/1/Xs4Q8TxGgGkmpnlGzGoRAqoJAxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.120.0/22
Signature Algorithm: sha256WithRSAEncryption
1c:fa:b6:9c:e1:fd:a2:b1:51:00:6b:8c:05:e9:9b:a1:b8:a3:
80:52:7c:f0:23:6e:56:2d:54:a7:da:4a:a2:74:8c:be:5a:ee:
07:2f:95:33:8a:a8:58:bd:b5:f4:87:af:d9:11:04:e4:6b:38:
9e:7a:e2:4b:92:8b:e4:c1:a4:fa:43:08:82:93:bc:4a:8b:e6:
3d:b4:ef:a9:e3:f1:a9:5a:03:19:41:53:32:97:a7:28:8a:a5:
37:0d:fb:3c:4e:cb:ea:92:b6:84:cd:af:e9:bd:b4:09:d6:44:
5c:b4:0a:d5:23:c2:bc:07:43:69:62:ed:10:3f:eb:6a:40:02:
b3:c4:11:8b:16:41:17:e4:2e:47:33:c6:a6:29:3b:d2:c6:1c:
21:e3:33:40:d0:cf:ed:8d:f1:d7:be:34:51:53:f3:24:b3:6f:
70:8b:90:0d:6e:aa:9b:22:66:6f:07:0b:51:c6:82:40:1e:00:
ce:50:be:a9:d5:46:c2:94:3f:da:e4:9b:54:6f:46:f4:60:5d:
34:84:f6:41:22:a9:85:27:57:3c:0a:cd:9e:94:d2:fa:f1:d4:
00:08:46:f5:12:31:2b:7a:91:e4:87:8a:c4:d3:39:7e:78:34:
c8:7d:d0:d7:a5:26:e7:04:9d:51:8d:77:cb:8f:32:59:5f:54:
18:b5:7c:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:31 2024 by rpki-client on console-fra.rpki-client.org