Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JTtyEwP2dEeOinvxyYU5lc3pLNc.roa
File: JTtyEwP2dEeOinvxyYU5lc3pLNc.roa (raw, json)
Hash identifier: uOfoIV0RHY/j5P5f9E0z4Hug0olMkGB8iWujK6U/xys=
Subject key identifier: 25:3B:72:13:03:F6:74:47:8E:8A:7B:F1:C9:85:39:95:CD:E9:2C:D7
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEEDF8D41AD0BE9B575A14277EB4795
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JTtyEwP2dEeOinvxyYU5lc3pLNc.roa
Signing time: Sun 01 Jan 2023 06:04:55 +0000
ROA not before: Sun 01 Jan 2023 06:04:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208807
IP address blocks: 85.31.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:df:8d:41:ad:0b:e9:b5:75:a1:42:77:eb:47:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=253b721303f674478e8a7bf1c9853995cde92cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:db:1c:29:ff:5c:56:d4:3a:47:9a:56:a7:10:
78:f6:91:66:d8:33:0f:bf:6e:33:a2:91:8c:c8:4d:
6b:72:6e:41:e9:34:f8:5c:5d:41:92:2d:1a:fd:a8:
2f:5c:f2:35:c4:07:5c:d1:f0:b9:15:0a:d8:1f:ce:
57:bf:c0:3d:4c:18:5d:95:6d:d4:1a:1b:59:4a:8a:
87:ee:37:5d:ff:df:da:1a:3b:23:a9:ae:2d:da:82:
c0:a4:ce:d9:33:f6:69:af:ef:e2:c7:cc:0f:bd:64:
a9:59:15:06:c4:a0:be:ad:85:fa:58:c7:24:27:87:
15:2f:07:a3:95:bb:4a:4e:7f:54:29:92:1e:34:e6:
73:b7:d7:3e:29:ce:78:93:d2:d0:31:bd:a2:cf:24:
9b:bb:83:de:f3:db:47:c4:9e:85:a0:6a:ee:71:81:
05:81:b2:32:f2:9c:0c:80:ff:02:7b:40:a5:68:33:
c0:ad:d9:09:02:1d:92:40:0d:64:db:e4:bc:75:19:
08:a6:ba:f1:1b:ce:3d:d4:75:17:c0:e1:a2:5e:e2:
27:07:51:3d:95:d8:4b:fb:48:0d:48:20:48:29:33:
bc:da:56:6b:0c:00:dc:4c:1b:6d:ec:7a:6f:b3:9b:
b9:24:20:fa:65:7e:a6:55:b7:8b:34:3c:5a:53:57:
cd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:3B:72:13:03:F6:74:47:8E:8A:7B:F1:C9:85:39:95:CD:E9:2C:D7
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/JTtyEwP2dEeOinvxyYU5lc3pLNc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.246.0/24
Signature Algorithm: sha256WithRSAEncryption
17:e4:47:c1:f6:c7:33:f8:df:72:3b:41:51:b7:b3:de:2e:5f:
c2:92:d7:26:18:0c:bb:38:1b:ef:88:e5:8b:64:00:d5:77:24:
cd:4b:08:6f:c9:ec:0f:ef:99:bc:90:c7:f7:d3:0e:b8:e8:45:
c6:4d:dc:55:11:bc:71:28:63:a4:88:71:92:dc:8b:f3:f4:69:
a2:52:6e:13:73:d7:cb:32:d3:d8:ce:89:36:e1:93:59:47:5f:
37:15:30:02:7e:9b:d1:0d:14:f9:5e:02:30:9f:64:15:cb:db:
e6:06:cc:5f:90:55:f8:8b:16:2e:ae:f8:25:30:a4:be:90:59:
aa:63:06:c3:05:16:be:a9:dd:60:13:98:ff:5d:84:5e:a6:6d:
3c:a3:c4:36:f3:84:49:9b:f4:d3:64:13:4b:cc:79:19:6f:8b:
9c:63:ce:12:1f:c1:ec:4d:2f:3d:bb:e1:06:4e:13:51:5f:11:
f3:85:7c:a9:32:ad:48:42:b7:30:31:aa:af:a4:3e:2f:d5:f0:
5e:e3:f2:74:32:2f:ec:6e:4e:7a:32:09:6a:0b:cd:32:61:de:
47:21:95:c0:93:38:c2:17:02:55:53:a1:bc:2f:af:4a:38:db:
f1:ec:b9:35:45:ba:73:78:f1:98:ab:db:89:fb:ad:f1:1a:62:
ec:5a:45:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org