Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RsL1ySsnq-FHvSaPnLny2vtky5o.roa
File: RsL1ySsnq-FHvSaPnLny2vtky5o.roa (raw, json)
Hash identifier: bnfmh6KJtxdiiviOR3O1jx74vfnwh03PzuY3MbMbFJc=
Subject key identifier: 46:C2:F5:C9:2B:27:AB:E1:47:BD:26:8F:9C:B9:F2:DA:FB:64:CB:9A
Certificate issuer: /CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Certificate serial: 018AEFE7CA75A24AD60FF9C53D6E50707DCB
Authority key identifier: 4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RsL1ySsnq-FHvSaPnLny2vtky5o.roa
Signing time: Mon 02 Oct 2023 10:20:59 +0000
ROA not before: Mon 02 Oct 2023 10:20:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 22773
IP address blocks: 85.8.160.0/23 maxlen: 23
85.8.162.0/23 maxlen: 23
84.54.0.0/23 maxlen: 23
84.54.2.0/23 maxlen: 23
85.8.144.0/23 maxlen: 23
85.8.146.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 04 Oct 2023 19:08:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ef:e7:ca:75:a2:4a:d6:0f:f9:c5:3d:6e:50:70:7d:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f9509b33da55f3e5d5283eb621d0d35d7aeed5c
Validity
Not Before: Oct 2 10:20:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=46c2f5c92b27abe147bd268f9cb9f2dafb64cb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:32:db:40:1a:5e:65:c8:2e:f8:b9:87:4e:f0:
b6:f4:a7:b2:4a:fd:82:dd:7c:84:e9:1a:0c:6d:a2:
5d:ae:32:fc:a8:a6:76:e9:d3:1a:86:a0:1f:ac:e4:
68:3e:08:ef:25:16:ad:9a:0f:38:da:1a:c6:6b:c2:
9a:61:6f:f0:94:33:89:a9:11:02:4f:b7:13:d4:a2:
8e:17:39:ca:e8:43:a2:88:a5:2c:66:88:73:cc:85:
fe:09:40:ef:eb:17:87:66:49:9c:46:3e:ce:dd:e0:
d0:7e:ea:d5:8f:38:95:0d:8a:14:8c:a8:62:5e:b4:
fb:29:ff:1f:f7:5e:22:97:3f:4c:9a:1d:3e:4e:1c:
b4:c0:33:64:dd:73:c2:55:39:12:b9:6d:f0:09:e9:
80:f3:95:e1:f9:00:5f:b2:f6:26:fa:b7:66:b9:79:
06:cf:76:05:18:33:d1:3b:0c:c0:93:aa:f2:63:4a:
e9:9a:6b:9e:3b:cf:7f:86:b3:e3:87:3e:26:b3:86:
fd:e6:f7:79:b6:74:91:f8:14:40:0f:6c:d3:fd:d0:
78:19:2f:f8:71:bc:cf:c4:a9:a1:91:a4:66:90:de:
52:e5:9e:fe:94:42:36:c2:d3:69:23:39:a2:f0:74:
a0:f0:1e:84:2a:c2:a6:fb:25:b1:43:96:30:04:b1:
97:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:C2:F5:C9:2B:27:AB:E1:47:BD:26:8F:9C:B9:F2:DA:FB:64:CB:9A
X509v3 Authority Key Identifier:
keyid:4F:95:09:B3:3D:A5:5F:3E:5D:52:83:EB:62:1D:0D:35:D7:AE:ED:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/RsL1ySsnq-FHvSaPnLny2vtky5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/6fc1bc-a5f8-42a8-95e4-60107e2b5109/1/T5UJsz2lXz5dUoPrYh0NNdeu7Vw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.54.0.0/22
85.8.144.0/22
85.8.160.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:f8:db:1d:23:3e:3e:c8:86:76:e2:bd:b7:cb:ad:15:f0:9a:
b8:3b:db:9e:b2:3d:74:03:c9:f9:dd:7f:03:54:f7:7b:06:74:
ed:35:28:a3:0e:d0:4b:6d:bd:2d:ae:d2:32:ba:0d:2d:5f:3c:
ea:bc:9f:b3:f7:e5:f3:4c:59:63:06:f6:8c:99:83:b9:86:8b:
b7:57:15:c9:50:63:87:38:e5:9e:a8:1c:ad:79:9d:44:58:ce:
e2:9e:af:c5:3d:94:bf:40:d5:ec:5e:96:71:99:28:4d:aa:7e:
7d:22:72:05:9c:54:09:15:18:42:e9:a7:5c:db:4a:af:d7:1a:
d8:e1:2c:ce:70:5c:22:93:0f:33:40:da:06:c7:60:21:e8:df:
3b:1d:aa:1d:71:16:af:3d:c2:9d:48:7d:88:6c:ba:d3:db:2f:
95:63:9d:86:fd:af:ce:ac:10:38:a7:09:9d:b2:d8:42:0a:45:
f2:c5:c6:40:0b:7d:69:45:50:41:4e:6c:a0:7f:87:dd:95:ce:
1f:9f:9e:68:b4:5d:5e:f5:16:59:c0:98:68:01:87:bd:8f:47:
c9:bc:82:7f:b6:f3:df:b0:1d:ad:bd:b9:89:2a:1d:ea:76:8a:
f0:af:bf:63:95:96:c4:fc:ea:1c:2e:30:c2:fe:07:3b:5f:11:
1e:10:49:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:58:49 2024 by rpki-client on console-ams.rpki-client.org