Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8Y6C_JPFrBybDjOkAmjMNtB15Ws.roa
File: 8Y6C_JPFrBybDjOkAmjMNtB15Ws.roa (raw, json)
Hash identifier: zop+BmqZ2ofwZN/E3bnXBMK11poyykYOkdeBJuW8ceA=
Subject key identifier: F1:8E:82:FC:93:C5:AC:1C:9B:0E:33:A4:02:68:CC:36:D0:75:E5:6B
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CC9F53A6A16C58296640C8ABA5DF78
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8Y6C_JPFrBybDjOkAmjMNtB15Ws.roa
Signing time: Mon 02 Jan 2023 14:04:50 +0000
ROA not before: Mon 02 Jan 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54103
IP address blocks: 85.203.48.0/22 maxlen: 22
85.203.56.0/22 maxlen: 22
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9f:53:a6:a1:6c:58:29:66:40:c8:ab:a5:df:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f18e82fc93c5ac1c9b0e33a40268cc36d075e56b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:30:49:81:6c:11:d4:05:b9:4f:fd:fe:d1:4f:
f0:3d:6f:93:fb:c6:c4:27:57:cd:51:65:54:be:cc:
2e:1a:f0:00:63:f3:d2:21:ad:56:de:a0:15:bc:8f:
01:d2:32:80:87:49:0f:2c:2e:35:cf:71:64:b7:a3:
79:bb:ae:bd:c8:ab:3c:57:2a:28:9a:d9:d7:88:00:
b2:57:79:d8:51:ab:8d:c0:c0:14:98:d7:5f:a3:c0:
c7:8d:e8:56:ba:5b:43:7e:bf:2f:e2:eb:21:b7:f4:
70:57:cf:98:8c:4e:3e:7b:c7:96:89:a2:6a:3d:01:
9c:09:25:06:74:19:89:97:3b:07:2c:06:91:50:3e:
2d:51:a2:85:62:ef:93:16:54:2a:2f:b9:02:be:d4:
99:be:17:56:4e:f1:02:65:0c:73:ca:76:34:69:19:
a5:00:95:2d:23:f0:0f:67:97:1e:5d:f1:8b:90:23:
21:54:b2:98:cc:64:91:59:28:d7:54:d3:14:33:d8:
9b:4e:01:a3:b6:c5:83:46:78:4a:92:94:35:a6:af:
6b:03:e6:38:94:2b:15:68:83:2a:ef:ae:11:70:64:
17:96:6e:16:cd:a1:bd:14:2f:09:f8:41:47:ff:ac:
25:f6:f6:9d:96:05:13:12:6a:d8:86:ca:be:80:a2:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:8E:82:FC:93:C5:AC:1C:9B:0E:33:A4:02:68:CC:36:D0:75:E5:6B
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/8Y6C_JPFrBybDjOkAmjMNtB15Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.48.0/22
85.203.56.0/22
Signature Algorithm: sha256WithRSAEncryption
55:3a:81:b6:38:2d:59:b6:7b:96:17:7a:07:9a:65:64:c3:08:
4a:63:51:c3:1e:24:eb:dd:e1:e0:43:00:58:9e:81:e2:4a:b8:
50:95:9d:e1:83:c2:3c:d1:22:fc:49:d3:7e:b7:af:16:25:c2:
14:94:0a:5e:c0:23:66:2a:62:45:47:76:bf:f0:0f:0a:aa:86:
05:75:37:25:54:51:16:4c:b1:f1:f8:82:ce:5d:60:90:33:bc:
4c:a5:eb:b0:0e:fc:1f:bc:45:04:76:3a:fd:7d:5e:0d:09:e5:
6e:14:cc:2e:3c:f5:3c:0f:30:42:bf:bb:4a:76:22:c4:b3:65:
48:b7:50:2d:7e:2e:b4:d7:be:f3:85:0a:27:62:0d:9b:da:fc:
85:e7:4b:f8:7c:9b:a7:5a:49:4e:b9:cc:25:46:dc:fe:fb:c6:
6e:6c:b5:da:3c:c2:85:db:54:4b:67:64:aa:9f:bb:9f:50:d0:
fb:53:57:8f:be:0d:ca:c3:86:a9:24:e0:c9:fd:39:3f:cb:25:
5d:65:29:5d:18:0b:2d:f3:a9:8b:5d:44:53:3e:18:66:93:95:
8a:a1:9a:e4:f3:37:42:20:21:3f:9a:cb:52:64:b0:72:18:9f:
46:ad:c4:62:f8:61:d6:fd:85:cb:e0:4a:14:ee:23:40:8a:a5:
bb:5e:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:15 2024 by rpki-client on console-fra.rpki-client.org