Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/klzfEIcL-aDtqlRNJrR3JXd7QSg.roa
File: klzfEIcL-aDtqlRNJrR3JXd7QSg.roa (raw, json)
Hash identifier: Sg8qZSwMtJy79C0yb/qxlExPARweGvnPTuMIo76Fwl8=
Subject key identifier: 92:5C:DF:10:87:0B:F9:A0:ED:AA:54:4D:26:B4:77:25:77:7B:41:28
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018CCA2980AFE9853F1D8FB40D73FD544A58
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/klzfEIcL-aDtqlRNJrR3JXd7QSg.roa
Signing time: Tue 02 Jan 2024 12:32:46 +0000
ROA not before: Tue 02 Jan 2024 12:32:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8038
IP address blocks: 85.203.19.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 02 Feb 2024 21:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:29:80:af:e9:85:3f:1d:8f:b4:0d:73:fd:54:4a:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 12:32:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=925cdf10870bf9a0edaa544d26b47725777b4128
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:af:c4:af:1b:70:a1:bd:24:f1:54:0e:2b:56:
dd:6d:f1:fb:e0:59:c9:22:a6:e0:81:0e:77:c2:86:
14:06:92:5d:a8:05:5f:e7:f0:4f:0d:aa:f5:5d:f9:
08:b2:19:d3:18:df:c4:ac:79:23:69:d6:d6:92:b6:
ef:4f:46:8b:23:ba:06:06:55:89:8a:e8:8a:6e:c0:
c8:e7:c2:3a:b9:c7:04:b8:91:1f:85:54:2f:37:0e:
8e:79:7f:e0:05:ad:0b:7f:34:ab:46:f0:49:94:04:
ef:cf:15:04:e8:03:30:99:17:75:65:a8:c5:23:ed:
fe:bb:a4:fc:3f:73:6b:dd:f0:6d:e8:e9:d5:49:ae:
6b:bf:f0:5d:c1:3b:ba:d1:c7:46:31:4d:14:e1:77:
b6:06:d6:1f:84:27:6e:35:14:0e:3c:72:16:8b:ad:
76:55:f4:09:6c:74:50:cb:ee:6b:6d:c1:dd:62:54:
9a:8e:c0:f1:73:e6:89:c6:4b:d0:9b:1b:2c:07:7b:
e3:bf:36:33:ff:7f:5b:6c:d0:c5:2b:e5:d1:4e:9a:
28:d0:95:eb:18:09:4f:dc:38:f7:1d:c0:54:0c:ba:
98:6c:93:ae:92:86:4d:5b:70:d1:91:f6:46:0e:5d:
07:cf:04:30:27:69:2c:a6:a1:51:d0:2d:83:e3:f2:
86:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:5C:DF:10:87:0B:F9:A0:ED:AA:54:4D:26:B4:77:25:77:7B:41:28
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/klzfEIcL-aDtqlRNJrR3JXd7QSg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.19.0/24
Signature Algorithm: sha256WithRSAEncryption
33:a5:60:df:46:38:f6:3e:7c:c4:40:c8:54:2c:ae:90:b7:14:
be:20:d3:67:e3:5e:88:d2:4c:29:5f:1b:96:08:7b:19:f6:0c:
49:92:94:e1:2d:d1:8f:4d:9c:51:77:44:82:52:43:5d:a2:85:
37:fc:5b:27:76:40:27:8d:23:cd:03:a3:d0:ba:d2:c9:83:89:
d5:ae:fe:c0:2b:4c:93:b4:39:2b:b1:40:44:bf:ba:d8:d1:90:
f0:2f:50:d9:7a:c6:c1:25:3d:47:32:4e:ad:9b:a9:a5:44:9b:
31:51:88:3b:0e:d5:97:b9:7c:4f:e7:81:40:de:9f:f5:d7:23:
1b:8f:dc:4b:bc:8e:28:28:81:8a:34:90:a9:6d:e6:da:09:37:
e9:5d:f1:cc:ee:f3:f5:8b:52:93:33:84:64:09:ac:53:24:d3:
28:21:23:93:d9:28:57:e0:98:d2:89:b1:b7:34:41:ad:32:6e:
22:d3:76:9c:a6:2a:a3:7a:b6:94:43:d7:84:12:0e:bb:09:65:
f4:71:a2:bf:51:b2:a3:4f:f0:14:c6:2b:8f:13:31:e3:96:23:
32:97:08:9d:39:d6:64:1e:86:1f:62:f1:92:c8:c9:30:7b:31:
8b:fa:c6:7d:34:17:7e:a9:be:fd:3b:66:07:93:d6:09:db:44:
66:f9:0e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Feb 3 02:09:47 2024 by rpki-client on console-ams.rpki-client.org