Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Gq8yBmWCzwhwmZ4DI_ha2PfmlZY.roa
File: Gq8yBmWCzwhwmZ4DI_ha2PfmlZY.roa (raw, json)
Hash identifier: WWABw7OPRt1JtJaMnRrfl9QHHnUIBSpVWdIsOerAP+g=
Subject key identifier: 1A:AF:32:06:65:82:CF:08:70:99:9E:03:23:F8:5A:D8:F7:E6:95:96
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CCA061C1A9B32708BAE5BF6951DFD7
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Gq8yBmWCzwhwmZ4DI_ha2PfmlZY.roa
Signing time: Mon 02 Jan 2023 14:04:51 +0000
ROA not before: Mon 02 Jan 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 60750
IP address blocks: 85.203.11.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a0:61:c1:a9:b3:27:08:ba:e5:bf:69:51:df:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1aaf32066582cf0870999e0323f85ad8f7e69596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:8f:40:bc:6a:b5:51:e3:7a:e0:2f:ea:8e:
25:bc:9a:68:46:e2:21:b1:3d:88:3f:6e:d2:db:fc:
02:1c:d5:84:c6:c3:e0:7e:5b:4b:2b:96:41:13:f1:
0c:ae:5e:36:78:d6:f0:4a:07:6f:05:37:8d:77:a9:
28:7b:16:7b:d7:46:83:f0:83:ab:9d:bb:6f:82:41:
85:43:21:bd:04:9f:ce:df:ce:92:29:d9:5c:fd:cc:
0c:ac:0e:d7:05:93:e5:38:9d:74:dc:8f:cb:69:95:
87:a6:c8:6c:c5:90:27:b9:05:d8:9e:d4:c9:92:29:
9f:79:d7:df:51:23:75:ad:35:e9:b4:97:4f:5b:7a:
54:f9:df:0a:97:b2:a9:aa:fc:4f:16:d1:b9:ff:63:
b6:51:c9:1d:f2:b3:87:10:33:3b:25:60:28:d0:9c:
0c:b1:b9:f0:b1:30:eb:6d:17:09:97:43:92:70:7a:
fd:7d:d0:80:99:68:a0:d5:ca:fb:72:2c:57:d1:98:
17:01:7d:ec:bf:b4:60:15:a5:92:c1:4f:7c:3a:74:
3b:6e:c4:9d:e9:70:7e:02:91:5a:78:05:e4:1d:7e:
a5:e2:fd:c8:d4:e5:60:b1:b4:1c:1d:10:86:c6:8e:
4a:07:74:eb:21:c5:da:76:40:47:6e:a7:2b:5d:4e:
cd:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:AF:32:06:65:82:CF:08:70:99:9E:03:23:F8:5A:D8:F7:E6:95:96
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/Gq8yBmWCzwhwmZ4DI_ha2PfmlZY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.11.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:44:35:5d:ef:c2:32:2a:9c:ff:4a:f5:93:65:ae:4c:a3:ef:
f3:8e:27:74:74:6a:a8:4b:fb:51:24:32:73:1b:aa:05:6f:ee:
f5:b8:54:c1:35:15:66:b0:80:20:f8:38:7c:c4:2d:51:c8:7b:
71:62:f1:80:d4:03:b2:63:69:fa:8a:34:ca:ee:ac:f5:1d:cb:
d5:67:d2:53:fd:16:f3:0d:4f:60:85:99:ee:fc:18:2d:a6:65:
13:db:9e:0d:dc:db:13:25:a1:45:57:18:32:3f:c3:b9:08:2f:
75:e5:dc:09:73:bf:ee:dd:79:2a:bc:88:5e:79:d1:13:41:9b:
ed:f6:e5:ea:32:cd:7f:4f:9e:bb:1b:92:28:5e:c2:47:0d:f5:
c6:71:12:fe:e7:69:55:96:51:f2:79:04:71:a6:75:69:cd:d1:
0e:f9:1f:55:f0:95:65:25:cf:4f:24:8c:1e:83:79:fa:6b:d5:
86:85:5d:57:04:d6:9e:fa:3e:b5:48:16:c7:21:1e:6a:2c:05:
74:7c:7a:f1:45:12:f2:0e:3d:25:a8:42:43:be:83:80:ee:65:
e6:e8:32:b7:4f:59:b4:9b:a3:c2:f3:7c:25:a6:c7:9f:15:d1:
c5:27:33:77:ac:51:52:62:7a:29:f6:e4:a4:7e:91:0e:4d:0b:
84:e7:98:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:20:33 2024 by rpki-client on console-ams.rpki-client.org