Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/H2KwqFhLeAKe-e2fjgNnCGlkdk8.roa
File: H2KwqFhLeAKe-e2fjgNnCGlkdk8.roa (raw, json)
Hash identifier: /386fttsrBYP679AHHKyha4bxwQm09KAXjlfUAMAoyo=
Subject key identifier: 1F:62:B0:A8:58:4B:78:02:9E:F9:ED:9F:8E:03:67:08:69:64:76:4F
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018964820CC419A004FCDDE1E89F3C2D5BF5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/H2KwqFhLeAKe-e2fjgNnCGlkdk8.roa
Signing time: Mon 17 Jul 2023 15:39:51 +0000
ROA not before: Mon 17 Jul 2023 15:39:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 21 Aug 2023 14:04:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:64:82:0c:c4:19:a0:04:fc:dd:e1:e8:9f:3c:2d:5b:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 17 15:39:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f62b0a8584b78029ef9ed9f8e0367086964764f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:82:0f:43:c2:d8:c5:99:4c:37:52:7b:73:5b:
a6:87:4d:db:2e:e0:46:f2:74:69:d4:c4:42:ff:82:
61:83:6b:8d:5e:00:c6:5e:64:bd:a8:27:1c:d7:df:
d8:1b:b6:a8:e7:ac:74:17:0b:46:e0:c7:ed:64:4c:
3e:08:ad:8b:b1:51:68:5b:0b:2e:9c:01:70:db:4e:
b9:cd:69:f3:1d:41:22:f3:8c:f0:6d:e5:3b:00:d2:
e2:01:70:bc:90:2d:a0:82:24:db:a4:65:ff:04:87:
87:aa:63:c3:99:99:a0:a4:9f:dd:07:8a:cb:63:83:
1c:31:f7:74:77:13:b2:a6:7f:e0:17:25:b6:56:8f:
1b:56:b9:6e:fb:df:ae:dd:7e:c5:a3:85:73:8c:0d:
4e:b1:5b:93:7b:90:bf:09:f9:3e:85:3d:36:ae:ce:
dc:69:ce:b7:d4:fa:09:a5:83:47:b8:a2:eb:7f:b5:
ba:ae:18:d2:bd:1e:8a:2e:c4:20:38:23:f6:db:14:
27:2f:da:9e:88:50:1a:cd:9f:d1:f7:26:0c:ff:22:
7d:60:4b:0a:b0:c1:22:31:34:f5:eb:7c:fa:e4:f3:
47:0d:6b:0b:91:ef:4c:c0:1a:23:06:bf:fd:91:d1:
54:b2:60:02:9a:11:45:07:f3:25:04:f4:19:46:a1:
34:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:62:B0:A8:58:4B:78:02:9E:F9:ED:9F:8E:03:67:08:69:64:76:4F
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/H2KwqFhLeAKe-e2fjgNnCGlkdk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:f2:5e:63:bb:5e:04:46:f7:6d:e3:d3:73:86:9a:0c:b1:96:
8a:b1:72:b2:20:fb:81:09:07:d6:01:cf:8b:29:5d:fa:b7:ca:
25:36:b3:17:f5:7b:a5:9d:3a:c4:76:9c:86:f8:b6:97:e6:e2:
97:c8:16:d5:65:33:0f:93:31:79:56:2a:48:88:41:e2:c3:b0:
13:c1:e5:68:54:72:35:06:b2:16:2b:7c:d5:00:07:00:cd:7f:
da:f0:5e:16:76:87:b8:78:bf:87:2f:90:94:4d:25:85:66:75:
ea:91:4c:ed:58:13:50:7f:ce:fd:cf:87:1d:8e:6b:db:e6:ab:
0f:70:26:8c:50:27:3c:bc:43:05:1f:c8:ce:21:f8:70:71:c0:
88:53:e9:5b:17:18:03:34:dd:5d:06:bf:53:e2:72:34:b6:bf:
2a:69:83:ab:25:a3:d2:a9:5c:c3:a5:9b:1f:a3:50:a3:7c:3f:
94:6e:ee:d4:86:c3:54:75:7d:01:38:26:d5:e0:82:95:e4:c6:
a7:e8:fc:b3:9c:7b:53:30:eb:4f:87:86:f5:ca:62:d9:08:3b:
2d:04:3f:d8:3e:2d:80:41:97:58:39:8e:cd:75:82:1c:13:e1:
11:a1:06:4e:b3:c6:01:40:2a:6c:19:6d:ff:63:e2:e8:fe:27:
8d:23:ed:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org