Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/RgJQfa9CIuS4OdBjcfVaehLPvk0.roa
File: RgJQfa9CIuS4OdBjcfVaehLPvk0.roa (raw, json)
Hash identifier: P6GudVNAPsxN+FMbUkbw4nkWDFMf2iCF62FQWEBf+FU=
Subject key identifier: 46:02:50:7D:AF:42:22:E4:B8:39:D0:63:71:F5:5A:7A:12:CF:BE:4D
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CCA3B5A10DC079C298EFE8BCA7A2D6
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/RgJQfa9CIuS4OdBjcfVaehLPvk0.roa
Signing time: Mon 02 Jan 2023 14:04:51 +0000
ROA not before: Mon 02 Jan 2023 14:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212042
IP address blocks: 85.203.33.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:a3:b5:a1:0d:c0:79:c2:98:ef:e8:bc:a7:a2:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4602507daf4222e4b839d06371f55a7a12cfbe4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ea:94:e8:4a:ee:f1:d1:ab:94:aa:f6:f7:9a:
87:8c:16:3d:ec:52:56:8f:7c:4f:f7:0b:3d:49:ce:
eb:a7:76:22:f8:e3:0b:89:8d:3f:bf:a8:78:f9:83:
34:3a:3b:da:05:79:31:05:ed:92:c7:46:8e:de:59:
23:43:a0:b2:16:e5:d7:4e:24:c9:5d:44:cb:96:17:
d9:b3:78:45:63:c5:49:44:b4:14:14:75:97:d8:1b:
09:91:e9:19:03:6c:73:4a:d6:b8:94:83:a9:9c:7d:
6d:8b:dd:dd:91:75:ff:d1:af:78:0d:a9:ac:4f:c7:
49:12:2e:c7:34:6d:70:fd:44:36:6d:1f:53:83:7b:
c8:77:7d:32:2a:99:ef:bb:b2:db:4d:d5:21:98:22:
7b:25:9d:1f:8c:29:71:91:05:03:49:2d:96:d8:34:
55:06:2f:62:a3:a3:74:d8:93:47:ae:b3:3d:95:02:
6a:18:27:3c:7d:01:43:e2:4b:e5:a7:a8:c3:5e:ed:
c0:c0:c2:ca:86:e6:c2:0e:22:52:a2:f5:18:b3:37:
f5:ac:0d:56:8e:10:4e:ae:3d:60:75:72:9b:cd:d9:
c8:b5:89:df:c6:92:8b:14:47:57:22:bf:29:a1:16:
0b:89:62:71:43:df:92:65:48:38:48:87:8b:56:46:
76:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:02:50:7D:AF:42:22:E4:B8:39:D0:63:71:F5:5A:7A:12:CF:BE:4D
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/RgJQfa9CIuS4OdBjcfVaehLPvk0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.33.0/24
Signature Algorithm: sha256WithRSAEncryption
60:c4:08:ff:cc:7d:a7:fd:f3:e2:ca:e9:ed:da:c5:07:27:fc:
56:a8:db:f8:e6:ce:3e:5c:d6:d0:23:92:83:d4:52:ab:b0:d8:
eb:12:3d:6d:c9:e1:fb:83:ee:14:7d:a3:81:cb:6f:bb:73:02:
82:82:bf:e7:a4:f8:0a:8a:df:18:2b:6e:37:e3:a9:d5:c3:eb:
24:20:77:5e:53:5e:80:15:bf:e5:03:37:7a:0d:ad:82:11:b0:
87:6b:35:2d:51:9f:c0:11:bc:84:92:3a:3a:68:78:b8:a1:22:
75:0f:6f:49:13:ad:ad:0c:dd:6e:72:65:40:44:a7:15:ee:25:
fb:9e:28:9b:e1:90:5b:a0:11:d5:d5:f0:df:2a:c1:0f:6a:8a:
e5:d3:da:4d:10:f1:0a:4a:60:fc:a8:14:56:16:16:36:a0:88:
89:5f:75:b4:f6:f6:ab:85:cd:73:c9:2e:81:fd:6b:3e:fd:ec:
97:25:48:e0:20:7b:98:76:13:d3:b5:0f:6a:4a:fb:b8:4d:a4:
cc:8a:4d:ac:eb:58:8b:72:69:bc:73:17:6e:83:06:01:2d:22:
1e:31:1f:62:b4:a4:a5:74:6d:7d:b6:87:bb:46:5b:90:c2:66:
07:b6:42:7e:3e:e6:ab:48:3e:f1:74:cd:78:a1:a3:77:68:1e:
6c:17:a7:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:34:15 2024 by rpki-client on console-fra.rpki-client.org