Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/IhuVZFI-fd_jj4KjO27HxKCwr1A.roa
File: IhuVZFI-fd_jj4KjO27HxKCwr1A.roa (raw, json)
Hash identifier: iNvvtqbtyb2rOTo+/uJ2r+hvOH1L73lzWAngaxaEZ1E=
Subject key identifier: 22:1B:95:64:52:3E:7D:DF:E3:8F:82:A3:3B:6E:C7:C4:A0:B0:AF:50
Certificate issuer: /CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Certificate serial: 0188924715C1572D57A5CE615F74D17ED60B
Authority key identifier: FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/IhuVZFI-fd_jj4KjO27HxKCwr1A.roa
Signing time: Tue 06 Jun 2023 19:55:12 +0000
ROA not before: Tue 06 Jun 2023 19:55:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 185.200.206.0/23 maxlen: 23
185.200.206.0/24 maxlen: 24
185.200.207.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 07 Jun 2023 13:19:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:92:47:15:c1:57:2d:57:a5:ce:61:5f:74:d1:7e:d6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd37cc8f16b3c6cbd3346aa3ed61771f3e83ac97
Validity
Not Before: Jun 6 19:55:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=221b9564523e7ddfe38f82a33b6ec7c4a0b0af50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:51:d3:f3:dd:ad:fc:15:a2:04:27:a0:2f:6d:
56:97:f9:28:a9:80:dc:c1:91:0d:3e:c9:0b:f3:d4:
dc:67:f0:aa:b9:d9:99:35:47:89:93:3d:b0:a1:25:
33:19:0c:51:47:9f:db:49:15:02:88:41:68:b2:38:
46:92:8d:b1:a0:ef:06:51:db:a5:0a:61:8c:7b:50:
8f:6d:4f:f9:83:c1:df:56:19:b4:4f:7c:6b:71:32:
95:bf:8b:3a:02:e9:bd:2d:d3:f7:2c:76:95:31:7d:
7b:fa:1d:b6:e7:ab:82:a0:7d:34:f0:7b:12:4c:fa:
67:aa:87:a2:23:68:67:63:ae:32:6e:3e:45:9a:49:
f2:46:bb:b8:1c:d4:3f:27:4d:88:92:da:db:e2:7a:
ec:2a:a4:04:29:08:75:4f:11:a8:5b:3e:06:71:a7:
01:80:79:9d:26:b4:29:81:b1:c7:fa:82:59:25:73:
87:ed:09:e8:3b:7a:22:fe:26:e7:eb:1c:3d:c5:8b:
84:e1:9c:21:ef:a2:2c:12:a8:59:89:d7:6a:17:c5:
db:5d:ff:d8:58:74:67:c4:1e:0e:b7:12:6c:d6:d3:
4e:e0:ee:e1:09:5d:5f:94:fa:55:c6:4c:f6:81:d9:
36:e7:42:db:e1:5d:9d:0f:80:23:ac:5f:82:7e:b9:
0c:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:1B:95:64:52:3E:7D:DF:E3:8F:82:A3:3B:6E:C7:C4:A0:B0:AF:50
X509v3 Authority Key Identifier:
keyid:FD:37:CC:8F:16:B3:C6:CB:D3:34:6A:A3:ED:61:77:1F:3E:83:AC:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_TfMjxazxsvTNGqj7WF3Hz6DrJc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/IhuVZFI-fd_jj4KjO27HxKCwr1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/05e17f-d31f-431f-a8bc-7e05ab41b6e4/1/_TfMjxazxsvTNGqj7WF3Hz6DrJc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.206.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:ca:43:ba:72:22:85:49:c4:53:ab:12:49:00:7d:fc:3b:59:
8c:8b:cc:ef:ec:67:94:89:50:2b:33:fb:bf:d5:85:8f:7a:68:
44:20:52:4a:e9:cb:af:99:e9:e0:1d:bd:03:2d:4c:4e:7b:50:
d8:a2:ff:da:71:d8:99:70:0b:99:07:34:fb:3e:be:d3:13:74:
dd:c7:9a:13:89:f4:84:19:ca:56:07:79:39:e9:d5:aa:70:29:
03:0d:1f:dc:37:9c:b2:84:c2:94:de:13:fa:a0:08:11:47:8a:
f3:f8:96:bb:1f:80:a3:ad:52:e8:9d:ef:f7:9f:fe:5d:1d:9b:
da:54:5f:54:2d:49:d3:6e:e7:d1:0e:8c:db:c0:da:56:7b:3b:
fa:6a:1a:56:fc:c7:cf:c6:1e:d5:ff:d0:8c:5e:f7:b5:09:0b:
7e:2f:12:e3:c2:78:94:bc:0f:69:3f:e0:11:d9:f0:03:eb:f2:
26:63:fe:2a:c8:e9:2c:ae:d1:47:f2:3f:b3:94:fb:f5:4a:39:
60:cf:56:e2:10:6c:8e:5e:bc:f8:36:9b:68:46:a6:a0:11:0b:
96:d1:ff:46:03:68:54:25:0a:58:6c:9f:af:e6:e7:6b:45:88:
3a:54:aa:d7:64:9d:dd:ee:f6:fb:6c:a2:f7:81:d9:46:de:01:
de:31:bf:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:32 2024 by rpki-client on console-ams.rpki-client.org