Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa
File: 1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa (raw, json)
Hash identifier: CSr1+30CH2xayg/63FW5Tw8+XMHhWUxfK6+VRMVXtSw=
Subject key identifier: FA:55:90:BB:9A:E3:C5:45:94:0C:55:D3:0D:EA:58:E8:C1:0D:4F:E4
Certificate issuer: /CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Certificate serial: 018CC6B8F799840D096F3D08BBBDE9421D54
Authority key identifier: 0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa
Signing time: Mon 01 Jan 2024 20:30:59 +0000
ROA not before: Mon 01 Jan 2024 20:30:59 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 39405
IP address blocks: 185.247.84.0/23 maxlen: 24
Validation: Failed, certificate revoked on Wed 01 Jan 2025 03:48:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:b8:f7:99:84:0d:09:6f:3d:08:bb:bd:e9:42:1d:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b312fe97464bc0e6a1effa2f1c896f7a8a02678
Validity
Not Before: Jan 1 20:30:59 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=fa5590bb9ae3c545940c55d30dea58e8c10d4fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:05:62:06:41:3d:44:a4:26:61:a8:97:f5:5f:
26:1c:aa:af:9f:f5:06:fd:56:0b:e6:b0:e3:42:1c:
35:e0:db:b3:38:73:44:66:b6:ff:01:60:67:8d:2b:
87:b7:f8:65:d8:2e:96:a0:ab:4a:36:27:7d:b9:f6:
28:4c:aa:60:f2:c1:3d:f2:5d:7d:cf:4d:78:76:73:
aa:a9:6a:f9:84:e3:25:77:cb:55:2c:c4:2d:10:3a:
30:bd:bf:88:b3:ac:6b:fa:51:33:b0:8c:a4:af:34:
0e:e7:b6:f0:b7:6b:c7:95:e1:90:10:29:81:ec:93:
81:dc:26:4e:29:e6:0d:6b:78:58:b9:d3:e4:3f:fb:
27:48:d6:0a:40:32:31:81:16:7e:10:ec:9b:7f:9b:
4e:b5:34:54:eb:37:c4:b1:e5:47:00:c6:e5:ab:e8:
fb:ba:0f:88:c9:55:6c:28:65:1a:79:58:7e:54:ed:
42:51:bf:6c:98:cb:fd:8d:16:10:e2:03:f6:2d:51:
d3:e3:fd:ef:15:d2:66:82:18:56:cd:8f:53:f7:ad:
ca:55:5a:b6:55:be:b1:8a:f5:4c:bc:30:b3:60:bc:
f9:99:a1:f2:49:8c:cc:f3:53:18:98:30:7e:9a:24:
60:78:c1:3e:a0:2f:fe:1f:bd:75:65:19:97:31:ab:
92:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:55:90:BB:9A:E3:C5:45:94:0C:55:D3:0D:EA:58:E8:C1:0D:4F:E4
X509v3 Authority Key Identifier:
keyid:0B:31:2F:E9:74:64:BC:0E:6A:1E:FF:A2:F1:C8:96:F7:A8:A0:26:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CzEv6XRkvA5qHv-i8ciW96igJng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/1-lWQu5rjxUWUDFXTDepY6MENT-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/6b2c9e-e50e-4887-b482-fa1b555daa91/1/CzEv6XRkvA5qHv-i8ciW96igJng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.84.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:78:11:89:c3:d3:ce:f7:c7:96:7c:1f:fe:a6:4e:f0:3b:c0:
1a:46:a2:0e:85:02:2f:15:26:c2:66:db:67:cd:3a:b0:b6:4f:
2b:db:e1:a7:b5:2c:2f:1a:7e:fa:2c:69:a7:23:80:7f:01:87:
86:c5:0d:fe:c2:a8:03:21:a3:5e:77:0b:c2:2d:7b:e8:88:66:
97:42:e0:d0:02:69:58:bd:d5:2e:9f:4f:73:8e:c9:6f:4e:3b:
ff:d0:86:7a:f5:c8:f5:b7:c2:59:93:09:0f:7e:5c:35:59:90:
dc:ce:b7:3c:7b:5a:d4:5d:db:3b:04:4d:6c:7f:40:81:5a:2b:
76:b1:1f:82:8b:91:66:17:a3:76:d4:40:2b:f4:04:a6:84:52:
ce:26:6d:57:b7:e6:f0:b5:5c:5f:09:7a:36:1b:eb:40:27:e6:
cf:83:22:23:f6:76:7e:09:e3:85:a8:b6:ff:5d:ba:40:54:19:
0b:b3:7d:a4:20:53:ea:e8:6c:4d:bd:89:da:09:60:c3:1e:25:
a3:3c:77:98:2d:25:c4:8f:c4:73:d6:ab:7b:f1:2f:7f:bb:d7:
e3:dc:67:25:10:68:f1:b8:05:6b:00:e3:cf:e6:69:f0:41:c5:
52:69:05:b5:5f:a2:6a:dd:27:33:91:27:33:25:c8:76:8f:02:
71:2d:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:12:52 2025 by rpki-client