Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/A0GrKVfRB2YM-85s1iRhXKM5tjY.roa
File: A0GrKVfRB2YM-85s1iRhXKM5tjY.roa (raw, json)
Hash identifier: vEINOZLEwwA31J0Y8QbUolKd58UjMwG5M3DcYx97MEc=
Subject key identifier: 03:41:AB:29:57:D1:07:66:0C:FB:CE:6C:D6:24:61:5C:A3:39:B6:36
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CCA104B9FB059CAE9D032229F3CCE8
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/A0GrKVfRB2YM-85s1iRhXKM5tjY.roa
Signing time: Mon 02 Jan 2023 14:04:51 +0000
ROA not before: Mon 02 Jan 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 85.203.15.0/24 maxlen: 24
85.203.36.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a1:04:b9:fb:05:9c:ae:9d:03:22:29:f3:cc:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0341ab2957d107660cfbce6cd624615ca339b636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:df:43:92:b6:46:16:fb:ec:0a:f6:5a:f8:7d:
ba:bb:fe:d3:b6:d6:81:cb:bd:d3:94:a7:91:46:5b:
ee:6d:e2:d8:2b:fa:e3:0a:de:54:a9:cc:c6:68:1d:
99:41:8b:de:30:73:d6:6c:ea:27:0d:22:4a:9a:8b:
8a:2d:1a:2e:5c:18:7e:41:d7:96:e7:57:06:02:97:
33:2f:a4:ac:25:41:92:48:9a:c9:7d:56:2b:67:2f:
4d:29:95:c5:64:66:9d:4a:86:43:44:67:4b:19:7e:
58:2d:a3:1b:53:ad:8e:eb:e1:14:52:51:c9:e6:7e:
61:95:31:a8:8a:e5:7c:e0:3d:bd:49:38:22:4f:02:
6b:4d:5f:de:f5:1f:bf:7a:cf:2f:1c:30:82:09:9d:
ff:f2:47:79:ab:97:aa:76:a0:f4:bf:3b:38:f1:91:
e1:ab:ea:8b:4c:ae:43:42:02:fe:6a:df:de:f5:c0:
15:b3:3f:e9:f9:b1:4b:34:60:5f:b3:d8:28:d0:b6:
29:e0:57:90:5c:34:66:20:26:1d:df:72:75:77:cc:
ce:d5:60:66:f4:17:5f:11:26:81:19:a1:6a:55:60:
a7:4f:4e:54:2d:6c:98:5e:42:c8:9e:9b:c3:a8:c8:
b4:3a:f1:21:3a:4f:8f:02:15:69:8b:a5:49:13:b1:
25:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:41:AB:29:57:D1:07:66:0C:FB:CE:6C:D6:24:61:5C:A3:39:B6:36
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/A0GrKVfRB2YM-85s1iRhXKM5tjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.15.0/24
85.203.36.0/24
Signature Algorithm: sha256WithRSAEncryption
97:b9:09:c3:21:a4:a0:c5:24:a6:a4:f0:f4:1e:b0:78:5a:ab:
5c:82:0b:c1:37:c8:5d:7c:09:fd:35:25:a0:d3:9b:97:f9:53:
2c:7e:b8:dc:72:19:f6:9e:a4:33:c7:b8:b3:09:1f:5e:aa:7c:
28:40:38:20:f0:a0:8e:c2:0c:e0:c1:83:ce:34:6a:1d:1f:14:
1d:0d:5c:20:cc:5d:c0:d1:9c:45:6a:a7:d8:35:fc:ec:e5:90:
db:ce:42:28:b8:09:e6:46:f9:d5:7b:98:46:96:5c:d4:ea:71:
33:c5:75:ce:5a:88:6a:38:cd:6d:ef:a2:7d:bb:9a:05:65:c4:
13:21:ca:be:9f:0e:33:33:73:da:b8:c5:27:d1:ef:ae:b6:67:
d9:aa:aa:ca:48:a0:cb:e9:5b:a2:bc:9b:77:63:7a:bd:f7:17:
ae:11:04:29:00:74:59:db:55:09:31:4a:9b:73:e7:b1:e1:95:
7f:39:3d:5c:38:03:8b:11:1a:fa:3e:20:e7:a4:9b:52:10:e0:
8c:46:be:53:66:6c:85:7d:7b:4c:5e:4d:dd:30:04:af:31:ce:
9c:99:ee:a8:71:66:5c:26:6a:4f:63:cc:5e:04:a2:68:b5:42:
8c:27:b9:34:54:98:4f:21:03:e1:4e:73:9c:d1:b0:cb:0b:b0:
24:52:e3:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:15 2024 by rpki-client on console-fra.rpki-client.org