Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Ezbc6DSaUhSCcbWn52OwktHMqSQ.roa
File: Ezbc6DSaUhSCcbWn52OwktHMqSQ.roa (raw, json)
Hash identifier: 3d1iySi++bmMeultSUP0bBP42hEIdrA0zg+WVPHAd3w=
Subject key identifier: 13:36:DC:E8:34:9A:52:14:82:71:B5:A7:E7:63:B0:92:D1:CC:A9:24
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CC96A893AD732AA3F8BE1E870015C1
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Ezbc6DSaUhSCcbWn52OwktHMqSQ.roa
Signing time: Mon 02 Jan 2023 14:04:48 +0000
ROA not before: Mon 02 Jan 2023 14:04:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.46.0/24 maxlen: 24
85.203.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:96:a8:93:ad:73:2a:a3:f8:be:1e:87:00:15:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1336dce8349a52148271b5a7e763b092d1cca924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b0:8b:59:d8:e8:d7:c0:20:31:ab:b1:85:98:
15:b3:41:54:af:31:89:3a:24:71:ab:03:a4:98:e6:
e0:d4:4f:46:8f:05:70:4a:62:71:e4:e1:a2:11:a4:
d2:41:e2:4e:67:a1:03:d3:c0:c2:90:40:3e:dc:8f:
2b:d7:e1:14:95:7e:0a:a8:b9:aa:5f:30:5d:a3:3f:
11:29:62:1b:0b:89:d8:bb:5d:13:48:c5:dd:ea:55:
7a:63:16:68:96:e3:39:d4:d8:47:f5:30:09:97:40:
2a:d5:f6:6a:fe:b0:a8:90:6a:b5:78:86:38:49:99:
fd:00:16:17:64:54:eb:ae:3a:a6:bc:16:5b:06:c6:
35:4d:f3:6b:d5:39:ee:92:6a:7e:d6:1f:9a:39:ce:
d3:09:63:d6:89:94:4c:dc:29:9f:58:f9:99:44:7f:
45:22:3b:a5:cc:1a:99:7d:7f:b4:c4:94:f4:ce:4f:
54:0d:c4:bd:21:06:80:35:20:55:8c:37:43:d5:39:
33:55:f6:3e:e6:af:d9:87:4a:5e:fe:99:13:39:ca:
98:9b:e4:58:5a:82:be:f2:54:fb:e2:6c:f3:8c:32:
1d:04:07:94:7d:d6:16:fd:fa:3c:7c:e4:3f:b3:bb:
f3:11:d3:c9:0a:39:e5:ca:02:d4:9b:5a:d9:dc:74:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:36:DC:E8:34:9A:52:14:82:71:B5:A7:E7:63:B0:92:D1:CC:A9:24
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Ezbc6DSaUhSCcbWn52OwktHMqSQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
02:51:79:bf:1b:3f:01:d1:61:db:2a:94:e0:a8:ac:b7:0d:38:
a3:5d:60:87:bf:4c:5d:03:93:55:e3:1f:9a:70:c5:b0:41:fa:
93:7c:dc:87:48:f5:3b:22:37:a2:c7:4e:78:78:0b:c7:99:51:
c8:1a:b2:88:e1:27:b9:d1:7a:6d:01:2a:37:a0:0c:fa:9c:f4:
f1:a5:ef:d1:b9:97:eb:46:6f:1b:9c:5f:f8:3b:7a:c0:b2:c8:
e5:43:17:da:be:fe:2d:64:f9:8e:ad:11:50:4e:e3:05:fc:bb:
df:01:ee:6e:c6:19:81:d6:dd:cf:bf:43:76:e9:15:4c:93:99:
65:81:ec:df:fa:6e:30:43:87:e7:64:d3:8f:fe:24:84:bb:56:
80:e8:92:7e:a8:45:c0:27:4b:3c:f7:84:a5:26:db:62:92:a2:
f6:90:cd:f6:3a:25:ee:6e:5e:51:64:5a:d3:17:e8:df:1d:ea:
42:11:e4:39:91:c4:37:0e:b7:77:9a:42:2f:50:71:65:22:79:
43:ec:2e:44:e1:84:a3:da:ee:89:ff:52:37:79:e3:07:80:5f:
fc:18:a8:45:45:2f:9a:0e:e5:88:04:2a:b5:53:7b:92:17:e0:
dd:5e:d2:43:18:e2:fe:82:01:d0:40:f1:fe:f1:4a:11:9e:51:
cc:a8:31:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org