Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8FDrl_-KwiUD5WOsldQCwO_kJBs.roa
File: 8FDrl_-KwiUD5WOsldQCwO_kJBs.roa (raw, json)
Hash identifier: rRJ1+HhDaVJuMethnqO8Rts8tasD9VGIZy92+UhzaK4=
Subject key identifier: F0:50:EB:97:FF:8A:C2:25:03:E5:63:AC:95:D4:02:C0:EF:E4:24:1B
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 018BCCFAE86BFEB6D0ABB65847462CF2E6EE
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8FDrl_-KwiUD5WOsldQCwO_kJBs.roa
Signing time: Tue 14 Nov 2023 08:37:57 +0000
ROA not before: Tue 14 Nov 2023 08:37:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 85.239.150.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 13:38:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:cc:fa:e8:6b:fe:b6:d0:ab:b6:58:47:46:2c:f2:e6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Nov 14 08:37:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f050eb97ff8ac22503e563ac95d402c0efe4241b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:73:35:72:bf:e8:4e:56:4a:06:af:18:c7:6c:
a5:ca:5c:46:cf:b7:5a:53:d4:d7:46:d5:ff:f5:59:
d5:9f:1a:e9:cf:43:fa:62:49:b6:d2:70:f8:1f:e6:
eb:b1:70:35:ab:29:7f:61:2e:89:77:27:5d:ac:5e:
f0:6f:bd:d3:e8:bb:be:67:e8:48:f7:3a:a3:a6:3c:
89:1e:23:3d:2d:6c:c7:df:d2:ed:46:cc:32:53:96:
b4:84:b5:46:67:70:76:3c:a6:a8:dc:da:47:69:57:
ce:f3:9f:07:dd:6d:41:e2:b7:09:87:c6:0d:4b:d6:
5a:3e:1d:ff:c3:35:be:6e:61:52:70:c1:fd:c4:fc:
c4:82:bd:c7:96:97:c1:29:76:ed:1d:2c:41:5d:9a:
8a:81:f6:f9:bd:95:db:02:6f:36:97:69:3b:81:c1:
e0:04:ab:63:ed:d0:7c:46:a4:4c:a2:bd:bd:ba:fb:
b3:43:45:29:79:49:87:18:9e:10:f3:bb:a5:c3:ac:
3f:21:40:9b:b9:05:e6:d4:fd:d0:6b:34:71:40:4d:
2a:4b:c9:aa:3f:4b:47:23:ce:2d:97:a9:7c:dc:b5:
14:4d:f3:e2:d0:60:00:b8:7a:e1:c6:39:ea:fe:0c:
b6:93:0c:b3:dc:c1:f1:28:2e:91:ff:e6:aa:c0:f8:
a1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:50:EB:97:FF:8A:C2:25:03:E5:63:AC:95:D4:02:C0:EF:E4:24:1B
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/8FDrl_-KwiUD5WOsldQCwO_kJBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.150.0/24
Signature Algorithm: sha256WithRSAEncryption
59:8a:ae:d8:a7:73:9d:fc:98:31:54:2b:e4:cf:2b:3f:41:1b:
ff:ef:61:f6:a2:37:90:72:87:db:54:84:d2:ce:5e:ad:86:46:
86:37:08:2f:4e:fe:f2:dd:42:c6:07:81:fb:ac:fc:8e:f3:0a:
74:be:0b:09:78:93:8d:c6:1b:1d:ed:c9:6f:f4:27:33:0c:58:
e7:85:18:0f:49:57:9f:e3:5b:b2:2e:8f:9c:96:fa:32:99:64:
f5:08:5f:50:a7:c6:64:75:6b:0a:7f:41:e6:fc:66:06:80:5b:
52:c6:20:f7:ca:12:76:64:a7:db:42:a4:dc:6c:cc:bd:8f:a9:
bc:46:d8:ef:f1:6b:35:6e:58:0d:d2:59:0b:f4:02:3d:69:99:
85:cb:d3:27:4b:75:57:c1:2c:c3:87:61:db:59:1b:7d:f4:e7:
64:b5:ff:a6:d2:f9:a5:f4:96:fb:70:04:35:e5:d7:e3:93:32:
0e:4f:a1:bb:5f:62:a3:81:31:37:ba:8e:66:c3:68:85:d3:82:
e7:a8:c6:b2:4d:a5:bf:cd:b4:7f:82:1e:b5:76:fb:ce:05:65:
a3:d3:0a:76:cb:55:da:5a:e0:d8:9a:7f:53:8b:0f:6d:b8:39:
02:ed:f3:24:47:58:16:a4:5f:6b:ac:25:e3:a2:66:ec:0d:52:
05:15:21:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:17:53 2024 by rpki-client on console-fra.rpki-client.org