Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/FQpZBhRvOM2vyETgwF5bpBfRtJU.roa
File: FQpZBhRvOM2vyETgwF5bpBfRtJU.roa (raw, json)
Hash identifier: Y+uX7xUSQzHmCpLESLzypNf0daHalLrur1aoAXoNYYc=
Subject key identifier: 15:0A:59:06:14:6F:38:CD:AF:C8:44:E0:C0:5E:5B:A4:17:D1:B4:95
Certificate issuer: /CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Certificate serial: 01856D9421344FFD51064129A1E5DE9C9CD2
Authority key identifier: 8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/FQpZBhRvOM2vyETgwF5bpBfRtJU.roa
Signing time: Sun 01 Jan 2023 13:45:02 +0000
ROA not before: Sun 01 Jan 2023 13:45:02 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48951
IP address blocks: 185.225.10.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 10:33:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:94:21:34:4f:fd:51:06:41:29:a1:e5:de:9c:9c:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa9aeb426c28a34808776f9568935d3b9ec9e08
Validity
Not Before: Jan 1 13:45:02 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=150a5906146f38cdafc844e0c05e5ba417d1b495
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4c:18:d3:71:da:bd:89:8c:7e:f6:e3:70:8c:
0b:fe:92:3b:e1:a5:fd:0e:51:2e:22:9c:97:00:3d:
55:47:2a:3a:a5:2b:fa:3e:d2:7b:d2:33:7d:2f:96:
0f:06:3f:21:fb:e1:86:64:d5:0f:84:13:cb:dd:a9:
0e:73:e3:22:78:53:a8:d6:81:07:91:c7:21:05:66:
a4:83:c9:64:3a:4a:5c:a2:c2:56:1b:99:6a:87:89:
d0:ba:0e:af:63:50:aa:77:56:4a:d0:fe:67:4e:16:
b5:db:ef:be:e2:16:04:e4:04:2f:05:0f:b9:32:65:
c0:59:20:f1:e8:d3:4a:0e:c4:a0:58:ed:9d:ec:75:
0a:9b:cb:ef:26:c5:93:a3:d9:1b:5a:50:a3:12:aa:
b4:bd:e3:a6:a3:82:2f:14:8b:30:69:1a:c9:27:d7:
b0:6e:53:e4:c0:2a:ee:54:96:c6:da:50:3f:16:c2:
ef:10:70:9a:a0:fd:bf:7b:25:1d:6c:dc:9b:7b:35:
e2:94:b8:91:a4:86:00:9f:90:dc:6b:2a:2f:08:4f:
88:f0:61:36:85:63:16:c6:c5:8b:e7:42:5b:3b:2a:
59:79:e7:2f:93:a2:8c:be:4f:45:86:b9:3d:55:2c:
d3:28:75:92:25:84:e4:3c:05:f9:e8:28:f1:6c:05:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:0A:59:06:14:6F:38:CD:AF:C8:44:E0:C0:5E:5B:A4:17:D1:B4:95
X509v3 Authority Key Identifier:
keyid:8F:A9:AE:B4:26:C2:8A:34:80:87:76:F9:56:89:35:D3:B9:EC:9E:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6mutCbCijSAh3b5Vok107nsngg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/FQpZBhRvOM2vyETgwF5bpBfRtJU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/77792b-e20e-4bf7-b126-359f79361e99/1/j6mutCbCijSAh3b5Vok107nsngg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.10.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:fb:13:97:77:8e:28:8e:8a:6c:d9:e2:d8:8a:de:7d:90:b4:
cb:3d:ed:25:a6:0f:e4:c0:48:4c:24:49:2f:91:02:33:15:96:
c9:8c:f7:90:f2:cb:9b:88:f1:19:90:ce:70:bd:2b:f4:8c:dd:
e5:b6:ba:de:41:b7:7b:5a:10:04:b7:9e:21:4f:f9:9b:b5:8c:
e3:af:19:fc:a5:a8:ca:24:74:2d:ef:ac:bd:d3:bd:b6:f1:cc:
37:7f:6d:2b:c2:56:9d:71:49:4e:e3:d3:bd:12:19:8e:26:55:
2b:70:7b:83:35:09:b9:14:68:c7:c7:9f:fe:34:4f:84:d0:1f:
25:aa:48:ea:87:3c:85:0d:7b:54:fd:79:14:9c:1a:91:62:24:
10:3c:15:21:e5:cc:e5:dc:cb:86:54:21:81:17:13:a1:73:cb:
4a:f6:c3:26:1e:06:57:c6:44:bd:61:13:f1:1b:95:59:05:2d:
dc:5e:45:c8:c3:7e:1b:5a:07:ae:b7:26:4e:cd:79:3e:69:1d:
ac:01:3e:d0:2e:e1:a6:62:83:88:c9:0f:e9:ec:cf:f1:a7:b7:
87:bf:14:b0:af:6f:85:2e:19:b2:27:5a:3b:7f:ec:bb:7f:8f:
70:a8:52:ad:d2:d7:bc:14:55:fb:3f:54:10:83:d7:bd:53:9f:
9e:df:85:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:01:14 2024 by rpki-client on console-fra.rpki-client.org