Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FMhHxY4LLjn6PzL7kTH7xPKQgpI.roa
File: FMhHxY4LLjn6PzL7kTH7xPKQgpI.roa (raw, json)
Hash identifier: UX6AxbQTq0GN8ExBCrJHxZwwUQBCHuuu2hDNAjyj3D0=
Subject key identifier: 14:C8:47:C5:8E:0B:2E:39:FA:3F:32:FB:91:31:FB:C4:F2:90:82:92
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 0188DCE65BAD3D928D7C3E25586C0B28090F
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FMhHxY4LLjn6PzL7kTH7xPKQgpI.roa
Signing time: Wed 21 Jun 2023 07:41:04 +0000
ROA not before: Wed 21 Jun 2023 07:41:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41925
IP address blocks: 185.39.205.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 02:30:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dc:e6:5b:ad:3d:92:8d:7c:3e:25:58:6c:0b:28:09:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Jun 21 07:41:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=14c847c58e0b2e39fa3f32fb9131fbc4f2908292
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:80:cb:04:19:d0:a9:8b:ef:b0:d3:3e:78:22:
8d:1f:29:f1:ac:d6:02:6d:62:23:23:db:0e:30:f8:
a2:3c:3d:b2:b3:4f:1f:e3:6c:36:36:7e:df:4b:e0:
e4:e2:84:66:87:c7:c8:1d:79:da:24:33:b6:dd:c5:
5b:67:4a:ec:3e:e4:25:ed:ff:3c:d4:8f:5d:02:e8:
97:ea:6f:27:e2:e9:28:71:d3:ec:74:5c:37:00:61:
a8:dc:ea:98:82:25:9c:07:b4:2c:43:12:fa:da:82:
15:35:8c:08:91:7d:f5:71:1e:64:7a:9f:65:17:4b:
4d:2c:65:9a:2c:c7:f7:db:a8:bc:4d:2f:4e:e7:b2:
e6:0e:e6:fe:ee:d9:f3:69:ae:5f:9d:c5:d5:da:06:
ee:25:18:fa:47:6b:7b:5a:73:6f:33:d8:fa:56:67:
9d:0b:24:53:60:a1:26:53:7f:f3:17:1c:e8:40:c5:
a0:cc:7b:29:0b:e7:e2:a3:48:1c:12:45:2b:90:c9:
32:91:08:74:a4:e7:41:9a:fa:84:5b:4b:aa:17:6d:
95:2a:62:9c:f5:4c:56:00:b3:48:eb:ed:f1:84:59:
a2:c1:3c:2b:44:fa:12:99:80:0e:a8:9c:72:d9:cf:
1c:b8:23:4d:aa:0a:a2:8f:04:1c:7b:14:72:82:21:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:C8:47:C5:8E:0B:2E:39:FA:3F:32:FB:91:31:FB:C4:F2:90:82:92
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/FMhHxY4LLjn6PzL7kTH7xPKQgpI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.39.205.0/24
Signature Algorithm: sha256WithRSAEncryption
14:0f:a3:40:fa:ca:ab:8d:8d:20:71:1a:f1:cf:1e:f3:9e:75:
7d:2b:04:eb:81:10:0c:07:eb:68:c7:b0:1c:06:10:d6:a8:05:
62:53:6b:66:5f:05:67:0f:76:fb:4c:cb:ce:f8:99:30:ed:69:
eb:4e:e3:4a:bd:bf:5d:34:5a:8f:ab:88:87:1c:14:2c:65:f4:
5f:b4:4b:6b:46:80:1f:1b:d6:93:96:eb:e5:ca:03:eb:65:ff:
7f:16:c7:12:75:3f:91:6a:cc:6c:dc:51:21:a2:c7:73:ff:b1:
ce:41:fc:69:cf:1e:61:82:61:bc:22:ba:fd:7f:cd:84:7e:f9:
98:46:2c:6f:68:c6:e6:53:aa:3b:2d:8e:7a:b8:0c:91:e8:76:
ac:89:62:a7:c8:d4:a9:ce:da:c1:06:b6:d5:7f:d7:31:65:09:
36:5d:cb:b6:b5:45:10:75:14:f0:04:b9:01:c0:b7:d9:ba:7f:
9a:70:b2:87:9f:fc:82:69:86:2a:64:59:21:61:d2:42:d6:23:
80:cb:95:3d:f2:9b:3c:8f:66:92:bc:fc:9d:9d:a2:50:75:58:
a7:00:2c:7c:5d:11:fc:7e:1a:59:46:ae:3e:26:00:0a:15:24:
83:21:07:0f:de:06:36:a8:e9:89:5f:4f:c7:55:31:3c:cc:7a:
f8:e8:ed:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:54:33 2024 by rpki-client on console-ams.rpki-client.org