Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/H28JDl_xDyl1jr_xXJ7zjalHbp4.roa
File: H28JDl_xDyl1jr_xXJ7zjalHbp4.roa (raw, json)
Hash identifier: OeiCf/6BZmTWQIBD/K6eeHJ9elN0xC3IhmDPslOttx4=
Subject key identifier: 1F:6F:09:0E:5F:F1:0F:29:75:8E:BF:F1:5C:9E:F3:8D:A9:47:6E:9E
Certificate issuer: /CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Certificate serial: 018CC3493B17413B8ED7A4EF3B74B5977D9B
Authority key identifier: 67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/H28JDl_xDyl1jr_xXJ7zjalHbp4.roa
Signing time: Mon 01 Jan 2024 04:30:05 +0000
ROA not before: Mon 01 Jan 2024 04:30:05 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200845
IP address blocks: 85.208.16.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 27 Mar 2024 17:05:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c3:49:3b:17:41:3b:8e:d7:a4:ef:3b:74:b5:97:7d:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6735a8295a30d7dfcac2a570b8decb25c4652140
Validity
Not Before: Jan 1 04:30:05 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1f6f090e5ff10f29758ebff15c9ef38da9476e9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:d2:16:40:a1:51:fc:5b:6b:8f:4a:f4:2d:2f:
15:95:6b:c2:f8:b2:34:a3:4d:ff:9c:64:45:83:45:
5a:64:99:35:ed:30:d9:f6:f5:5a:4d:69:c4:47:b7:
69:4a:0b:e3:8d:de:de:12:fa:97:e8:52:f1:8f:11:
41:d0:15:9a:54:34:a9:28:69:73:54:83:f1:89:4a:
a1:fc:60:82:4e:0d:1b:06:8f:4d:ef:3b:24:b8:7a:
a4:5c:15:6b:91:87:44:7d:1b:f5:c9:a0:ba:08:7f:
6f:e2:f2:05:5e:cf:a3:af:0a:ee:83:ac:87:b8:03:
e9:9e:e8:2c:fe:8a:bc:07:9a:03:ea:22:86:4b:3f:
f9:e1:5c:03:22:af:51:31:0b:51:37:14:8f:c9:c3:
0b:dc:29:7e:16:8e:a2:e4:b9:72:39:d6:ff:3d:6c:
0c:63:c8:0e:b9:cc:5b:ed:ec:17:51:39:8f:10:8f:
d4:0e:9a:06:eb:86:4f:dc:96:fc:63:57:ab:a8:8e:
77:94:a4:6e:64:01:84:c9:32:3e:73:ed:6d:e3:01:
f6:d6:97:dc:dc:2d:20:49:14:59:cd:91:28:4c:fb:
82:d1:ec:f5:ec:97:b7:c5:d7:59:43:eb:11:6d:e0:
da:e8:40:63:dc:b2:2c:0d:64:e7:87:9a:a1:cf:14:
29:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:6F:09:0E:5F:F1:0F:29:75:8E:BF:F1:5C:9E:F3:8D:A9:47:6E:9E
X509v3 Authority Key Identifier:
keyid:67:35:A8:29:5A:30:D7:DF:CA:C2:A5:70:B8:DE:CB:25:C4:65:21:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZzWoKVow19_KwqVwuN7LJcRlIUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/H28JDl_xDyl1jr_xXJ7zjalHbp4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/10b0ec-7055-4ebc-96fc-18e18d659d8f/1/ZzWoKVow19_KwqVwuN7LJcRlIUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.16.0/22
Signature Algorithm: sha256WithRSAEncryption
74:19:4a:f5:50:e2:e9:e6:df:d7:47:6c:95:71:0f:f4:05:a2:
65:e6:c6:09:2f:21:fa:23:35:be:26:60:12:b3:79:c3:15:68:
0c:6b:1b:5e:e1:85:71:2d:57:44:db:17:57:3b:3f:3a:9d:38:
d3:45:49:54:8c:0b:2a:bf:d8:eb:7d:3b:4f:6f:ae:63:62:08:
4f:78:15:40:4c:9b:9c:b7:6b:48:62:a9:94:c4:e2:c7:18:f8:
dc:f5:eb:b4:1b:85:0e:39:bb:1e:00:d0:fc:76:48:16:9a:9f:
25:9d:4a:e7:2c:3e:d3:17:b4:2d:69:71:2b:8d:1e:7b:d3:02:
9f:01:eb:aa:78:64:ab:8f:26:d6:4f:d0:ce:14:90:79:c6:6b:
e6:15:4f:b3:c6:ed:0e:f3:93:80:b1:e7:bc:51:b0:5a:75:07:
aa:0a:c7:64:97:c8:99:f4:69:88:d3:dc:dd:25:d1:1b:4d:42:
23:92:3e:e4:16:62:62:b8:a8:97:41:99:4e:3d:67:52:81:3a:
65:d5:bd:f0:73:a2:e1:d0:11:dd:01:2a:5b:1a:11:20:52:dc:
59:75:bb:99:0a:56:91:2f:99:6f:31:0e:a0:17:89:55:77:59:
51:18:f6:89:7f:3e:7a:91:39:3a:0e:72:4b:a1:59:56:d6:69:
41:10:71:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:26:00 2024 by rpki-client on console-ams.rpki-client.org