Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/3-xRqsXizrPHPsgLKlA-UTGUh_0.roa
File: 3-xRqsXizrPHPsgLKlA-UTGUh_0.roa (raw, json)
Hash identifier: FLO2INpbltyRFCBDCm247Y0joI2jgu0n23M9h6bLaDI=
Subject key identifier: DF:EC:51:AA:C5:E2:CE:B3:C7:3E:C8:0B:2A:50:3E:51:31:94:87:FD
Certificate issuer: /CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Certificate serial: 0189A33EC745087F88505873443C78BF078E
Authority key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/3-xRqsXizrPHPsgLKlA-UTGUh_0.roa
Signing time: Sat 29 Jul 2023 20:02:27 +0000
ROA not before: Sat 29 Jul 2023 20:02:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 7018
IP address blocks: 185.141.116.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:32:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:a3:3e:c7:45:08:7f:88:50:58:73:44:3c:78:bf:07:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Validity
Not Before: Jul 29 20:02:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dfec51aac5e2ceb3c73ec80b2a503e51319487fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:c4:8a:ae:5a:ed:48:88:2d:9a:b5:de:08:0a:
64:36:96:06:5b:37:fe:4b:d6:95:42:25:0f:fc:0d:
ab:fd:99:a4:f3:1e:1b:e3:2f:d1:45:6b:89:d2:38:
46:ee:3d:22:a0:f1:61:47:8d:ba:89:1e:ee:02:de:
cb:00:27:0d:de:e7:d6:60:f3:e1:74:37:35:b2:96:
0b:e0:95:25:dd:f2:ac:13:56:71:56:1b:11:2b:68:
c1:c8:ba:7e:44:a2:65:58:cb:6b:aa:8f:e7:31:dc:
57:77:1e:fe:27:28:f7:67:0f:cc:f9:0c:95:9b:29:
11:fb:2e:e0:38:80:06:e6:04:ba:dc:af:13:98:04:
ad:5a:f3:95:f9:d4:ee:26:60:9e:17:82:03:84:d9:
d1:bf:09:c0:0f:2a:25:35:01:03:64:f6:bc:98:c9:
71:fc:03:3c:9d:61:9a:88:de:c5:ce:b7:fc:12:4b:
1b:bd:94:b1:ae:db:7a:35:f6:ae:3b:8e:2e:34:a6:
34:5e:5d:4b:85:42:26:f8:1e:66:83:6b:d9:e3:4b:
97:22:d8:4a:87:0a:80:28:57:0c:68:fb:e5:01:40:
4d:cb:01:05:23:f4:d3:ae:a3:de:17:2f:ef:6e:ea:
82:59:24:93:6d:97:e6:de:5a:97:7d:fb:3f:47:26:
54:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:EC:51:AA:C5:E2:CE:B3:C7:3E:C8:0B:2A:50:3E:51:31:94:87:FD
X509v3 Authority Key Identifier:
keyid:4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/3-xRqsXizrPHPsgLKlA-UTGUh_0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.116.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:6c:49:a4:7b:20:7d:cf:1d:c0:d8:7a:76:95:3a:b1:c6:1b:
a4:ec:78:14:b1:63:7b:b6:e2:38:6a:45:9d:b8:bc:e5:66:9e:
52:78:f5:4f:ed:65:44:c8:b3:05:0a:6c:dd:b6:28:36:46:8d:
f8:85:14:83:69:bb:8f:c1:7a:4e:14:7a:af:19:34:b6:00:82:
e4:ae:b0:28:aa:a4:9b:0b:66:f5:99:9f:48:1d:d7:d5:0b:f2:
06:28:36:b1:55:5c:b4:6e:fb:90:ae:89:2d:15:44:dd:e4:4f:
2f:e7:1b:b5:37:34:66:8d:99:fd:60:bd:e6:a6:36:b1:ec:70:
75:1f:33:a7:e4:cd:a9:c2:bc:6c:7e:42:0e:fd:fe:49:e1:42:
9d:18:8a:d6:c3:c0:cc:b7:58:b3:14:01:ca:aa:6f:9f:65:a5:
08:62:b3:3c:94:76:d7:aa:8c:bb:f3:b8:54:7b:b1:d5:ae:98:
b2:71:8d:67:5d:b0:fc:16:d8:d7:df:88:b5:55:7b:78:36:79:
c9:0d:23:04:b6:28:4d:17:9e:2e:80:87:be:3c:12:31:64:a0:
c0:75:76:35:44:a4:22:e5:ac:b3:5b:7a:de:5b:36:34:cc:16:
fe:80:a5:25:3d:64:79:9e:1a:8b:d3:07:9f:0c:d8:a0:43:50:
44:95:07:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:59 2024 by rpki-client on console-fra.rpki-client.org