Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z-YKbjbKBvfgSPjNUwzTaKGYJ5w.roa
File: z-YKbjbKBvfgSPjNUwzTaKGYJ5w.roa (raw, json)
Hash identifier: k86q9FBUveBP5JtpfYLdix1fewnGEPbFA7AAwjSaZ6Y=
Subject key identifier: CF:E6:0A:6E:36:CA:06:F7:E0:48:F8:CD:53:0C:D3:68:A1:98:27:9C
Certificate issuer: /CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Certificate serial: 01856BEED1D4F55A800D8A8420726D48CD27
Authority key identifier: B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z-YKbjbKBvfgSPjNUwzTaKGYJ5w.roa
Signing time: Sun 01 Jan 2023 06:04:51 +0000
ROA not before: Sun 01 Jan 2023 06:04:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 202385
IP address blocks: 85.31.240.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:ee:d1:d4:f5:5a:80:0d:8a:84:20:72:6d:48:cd:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b9954499977278a75570b3403f4d3aa00b1b36e8
Validity
Not Before: Jan 1 06:04:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cfe60a6e36ca06f7e048f8cd530cd368a198279c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7b:5b:a2:87:77:96:2e:5d:63:90:ab:17:84:
02:ab:8e:4a:7f:33:e3:4d:b0:aa:ef:97:d1:68:9d:
3e:7f:fb:2c:59:1e:30:0b:7e:74:3f:81:0a:76:28:
cc:ea:00:c4:87:14:d9:e4:dd:30:1e:f6:b5:3b:95:
88:1b:51:84:23:02:76:3f:65:b2:8a:a7:08:25:f2:
e6:7f:99:e0:3e:b0:f0:03:ea:8a:29:d1:7a:8b:e6:
71:67:f5:c0:49:bf:27:90:8c:be:a8:8d:71:d3:11:
83:04:a1:ec:c5:26:c6:02:e5:5e:76:88:a5:6a:e5:
98:3e:e8:65:ae:fb:56:e5:7d:0d:ec:a6:7b:7f:55:
4f:87:9b:b1:0e:fb:8f:16:3f:06:47:d3:38:0a:59:
a3:e6:0b:55:f8:9d:e0:29:7e:59:9b:42:3f:88:20:
70:76:ae:db:87:1d:ed:ee:5c:24:a2:05:26:30:bf:
1f:bb:48:74:01:6f:61:5f:3f:10:27:e3:ae:44:51:
69:d5:ad:72:1c:b7:04:b0:fe:57:ec:86:ce:5a:84:
48:03:39:6e:9b:c6:10:0e:7e:5e:e7:6d:a5:8f:c9:
2d:69:48:66:00:64:23:d0:2f:fc:31:d7:13:49:4b:
30:39:6c:56:8d:dd:0a:7b:6a:d8:eb:91:1c:0d:e6:
86:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:E6:0A:6E:36:CA:06:F7:E0:48:F8:CD:53:0C:D3:68:A1:98:27:9C
X509v3 Authority Key Identifier:
keyid:B9:95:44:99:97:72:78:A7:55:70:B3:40:3F:4D:3A:A0:0B:1B:36:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uZVEmZdyeKdVcLNAP006oAsbNug.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/z-YKbjbKBvfgSPjNUwzTaKGYJ5w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/788803-be12-433f-a8d0-024b1655c247/1/uZVEmZdyeKdVcLNAP006oAsbNug.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.240.0/24
Signature Algorithm: sha256WithRSAEncryption
83:4c:0f:3c:5a:32:8e:4c:24:82:6d:56:2d:fb:24:80:61:d7:
9a:cf:75:2e:a2:1c:f3:50:94:35:79:5c:f8:d2:57:bd:8b:b6:
93:b1:10:65:2a:0c:25:64:e0:4e:76:b2:f6:da:e1:a6:20:31:
73:96:ad:3c:02:42:00:1b:70:9b:05:ac:2f:f4:dd:03:3c:c7:
22:9b:3c:8a:b3:2d:70:cd:90:a4:89:47:76:d3:59:45:e4:52:
64:68:d1:c6:d8:e7:aa:dc:ab:44:64:b7:10:72:59:cb:77:e7:
82:18:dc:45:27:cc:d9:23:11:9d:07:18:02:52:2e:e1:ef:03:
3e:58:59:b0:5d:4b:e8:67:bf:3d:86:72:52:7f:16:c6:55:69:
ea:dc:16:9f:3e:f6:be:0d:2f:74:66:a8:28:75:6d:b7:ff:a2:
c2:15:fc:4f:fb:77:82:94:6f:21:b8:2b:ed:b6:89:47:71:0e:
24:e8:e4:6d:fe:c7:1c:e7:1f:ee:2f:ad:7a:b2:72:1d:9a:71:
d8:00:16:df:e9:07:e5:bb:a8:dd:fb:c3:d5:2b:ae:20:44:07:
b5:d9:6f:71:45:ae:20:fa:fe:21:8f:3f:4a:2e:c7:2d:5f:21:
f5:91:24:a5:74:76:69:b7:64:a8:0a:a3:73:01:b7:9d:3e:a7:
87:47:5e:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:47 2024 by rpki-client on console-fra.rpki-client.org