Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/d5_8FiMuu9BvaXWpkpdR-0hr_BI.roa
File: d5_8FiMuu9BvaXWpkpdR-0hr_BI.roa (raw, json)
Hash identifier: pN03bNv+iaN6XRO1Tls0lFLv186oYaNz+0k3+S6Rb3U=
Subject key identifier: 77:9F:FC:16:23:2E:BB:D0:6F:69:75:A9:92:97:51:FB:48:6B:FC:12
Certificate issuer: /CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Certificate serial: 018571FA1CC35FAEA958E5C49B79CA616B15
Authority key identifier: 99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/d5_8FiMuu9BvaXWpkpdR-0hr_BI.roa
Signing time: Mon 02 Jan 2023 10:14:54 +0000
ROA not before: Mon 02 Jan 2023 10:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202580
IP address blocks: 185.196.223.0/24 maxlen: 24
185.170.129.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 11 Nov 2023 16:26:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:fa:1c:c3:5f:ae:a9:58:e5:c4:9b:79:ca:61:6b:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99ce569a14c2db3772f23187ce68e6541ec0048e
Validity
Not Before: Jan 2 10:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=779ffc16232ebbd06f6975a9929751fb486bfc12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f3:7c:2e:7b:12:7c:8a:87:7b:df:63:dd:e6:
12:69:16:96:25:89:ad:8f:56:f7:fc:75:24:97:f2:
a0:2f:47:96:9b:f1:a1:6d:c1:6e:e4:16:90:e8:c7:
03:b3:6e:aa:f2:5b:27:23:65:53:71:0b:c1:fe:7f:
e2:10:2f:57:b2:27:20:b0:7c:31:f1:33:b7:89:a9:
66:29:33:1c:22:41:b8:9e:b4:e5:eb:cc:36:3b:4b:
c3:a7:7c:a3:ae:7a:d8:b0:30:1c:94:42:73:57:d6:
ff:a7:a8:0b:f7:51:18:60:fd:65:24:47:51:c5:ef:
b5:09:2f:9d:51:dc:34:ba:f4:e1:ac:ea:de:8c:e0:
7c:39:7b:8b:9f:7b:ba:ef:4f:84:d4:f1:d9:9b:e2:
97:34:82:2c:c4:e7:86:d7:64:12:74:6f:55:12:07:
59:77:c3:53:c9:13:e2:88:56:b2:72:36:45:dd:e0:
41:dc:d1:d4:1f:eb:76:07:1c:af:78:41:8c:66:73:
bf:a2:d9:8d:2c:a9:4e:52:49:ae:18:2b:0d:7b:d5:
05:c6:c9:ec:bd:d7:b0:5a:34:c0:d7:48:8a:b3:24:
d7:66:78:45:3c:62:19:5e:9d:91:3a:da:97:69:e5:
ff:53:e6:4d:21:bb:ec:3e:c4:10:82:22:e9:81:cc:
06:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:9F:FC:16:23:2E:BB:D0:6F:69:75:A9:92:97:51:FB:48:6B:FC:12
X509v3 Authority Key Identifier:
keyid:99:CE:56:9A:14:C2:DB:37:72:F2:31:87:CE:68:E6:54:1E:C0:04:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mc5WmhTC2zdy8jGHzmjmVB7ABI4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/d5_8FiMuu9BvaXWpkpdR-0hr_BI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/cc6e99-6e5f-401b-912d-1095544c6c50/1/mc5WmhTC2zdy8jGHzmjmVB7ABI4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.170.129.0/24
185.196.223.0/24
Signature Algorithm: sha256WithRSAEncryption
47:08:9a:00:58:b3:aa:cc:f0:60:e2:d2:3f:3d:a1:51:55:43:
d0:a8:db:58:78:64:65:ec:e7:82:b8:76:ab:0f:50:42:27:b2:
8f:c7:bc:d0:0a:92:6d:c2:8d:e3:10:85:1b:b2:04:4d:a5:f8:
6d:ad:5c:0a:9d:01:91:b1:59:9e:82:ef:63:91:f4:eb:5c:f9:
f8:bb:2c:b4:5a:6e:81:c2:ae:21:1f:a9:a7:d6:9c:d5:89:78:
c1:05:08:ec:fc:94:f4:10:03:0e:4f:36:4b:32:6e:21:e6:7e:
50:83:83:57:72:b0:4f:da:a4:ef:a5:e0:d1:7d:4f:80:46:b8:
07:a4:72:13:af:4d:c0:69:29:ce:8e:fd:40:54:27:6d:9f:60:
14:c0:4a:40:62:ce:3c:c1:41:85:0a:0c:b5:21:a1:cc:19:1b:
1a:b8:aa:9a:d2:87:49:df:68:9d:eb:9f:7e:bb:ce:02:7e:35:
f4:52:1d:b8:65:9f:9d:33:da:13:d3:de:45:10:fc:f3:ce:6c:
52:01:f1:bd:99:bc:07:3a:1d:6d:01:3a:51:04:2f:a8:a9:7e:
37:f8:54:da:76:2f:30:fb:99:0d:bd:b9:77:72:f5:7f:48:64:
50:f7:40:8a:38:04:38:32:ee:5e:3a:0b:a9:85:5e:cc:62:1c:
e7:d3:ae:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:21 2024 by rpki-client on console-ams.rpki-client.org