Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa
File: VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa (raw, json)
Hash identifier: 1nkIvR2NPMj2WGgS6rYqRsWb/82jnIC23Ps1x5AbL10=
Subject key identifier: 54:44:FD:EB:2E:D8:1A:BF:1A:27:96:2D:6C:2F:8D:5E:C6:74:24:21
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018934054F435EDBB6A6E96D45260B55C635
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa
Signing time: Sat 08 Jul 2023 05:41:50 +0000
ROA not before: Sat 08 Jul 2023 05:41:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 212238
IP address blocks: 85.237.80.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 07 Oct 2023 07:52:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:34:05:4f:43:5e:db:b6:a6:e9:6d:45:26:0b:55:c6:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 8 05:41:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5444fdeb2ed81abf1a27962d6c2f8d5ec6742421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:28:04:73:fc:7f:24:18:93:6a:3d:fd:c1:37:
fa:0e:b7:ee:ff:6d:d1:4d:65:74:98:dc:38:95:f2:
f3:00:dd:0b:74:2e:44:6f:74:9f:cd:40:f5:af:e3:
84:33:c6:af:4a:1f:2a:23:d3:eb:14:d5:52:f0:52:
7b:ab:75:64:ed:9e:ef:56:3b:88:f5:b6:2e:ff:e0:
e7:00:e7:68:ea:66:c2:bb:8d:cd:ed:79:d4:1b:21:
17:d8:01:6b:12:3f:f8:1b:61:7d:77:56:2a:84:cf:
6f:93:2a:91:9f:e3:c5:cb:ac:eb:c6:ad:97:39:79:
eb:07:61:ff:26:aa:69:c2:15:da:4c:d6:bb:6c:64:
7b:f8:d2:67:59:6a:d4:dd:9e:25:0a:ac:17:39:24:
32:38:ea:c6:26:47:c5:2d:e5:e0:cb:8f:ea:b8:7c:
df:39:cd:88:fd:9c:ac:f6:4b:4a:56:7c:d7:5c:26:
cf:c5:86:17:90:5c:3a:f7:aa:d5:dc:71:e3:d2:b0:
ec:31:40:d0:d5:fc:a1:3d:7d:6d:ae:eb:11:9e:b1:
92:5f:3c:df:ba:f1:ae:c8:ad:06:c2:9c:47:c3:f8:
39:c6:7e:5d:ea:6e:6a:d9:d8:a7:72:66:bf:6c:73:
d8:40:52:b7:06:d7:16:09:c2:71:83:db:56:4a:dc:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:44:FD:EB:2E:D8:1A:BF:1A:27:96:2D:6C:2F:8D:5E:C6:74:24:21
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/VET96y7YGr8aJ5YtbC-NXsZ0JCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
83:a5:f4:46:e5:6a:b6:7e:9b:d7:10:39:fc:9f:f8:3c:d2:9b:
ae:61:c7:30:2b:2b:6a:9f:93:25:17:ac:0d:fc:3c:c8:92:8a:
ec:2a:0d:dd:d4:53:cd:89:a3:67:1b:ad:fd:2a:99:f2:82:41:
7c:44:76:5b:8d:a6:47:ac:3c:49:3a:99:3c:74:2b:16:9d:73:
bb:8b:c4:27:63:f1:db:08:d6:cf:00:a4:e6:12:66:ff:ec:2b:
49:9a:23:6d:27:29:4e:d2:16:88:9f:2c:b2:0f:3b:23:2d:d4:
a9:e7:c9:3a:b7:a7:17:f4:70:8d:45:64:65:f0:d2:da:51:c2:
40:1b:c5:a6:05:cd:76:43:0e:de:da:7a:76:8c:70:03:36:a7:
f3:0f:ea:03:e5:bd:05:e8:08:d7:45:8e:a1:a4:6c:d3:c1:5d:
f3:86:86:51:6f:a4:62:a1:30:38:45:37:f7:46:76:27:77:fe:
ee:97:99:fd:5e:59:27:eb:37:6a:1a:17:57:17:16:e4:a7:4a:
24:f1:96:50:91:01:aa:61:d0:8e:bb:f4:87:01:65:95:2d:ff:
97:eb:8d:23:99:e1:18:c3:41:54:bc:ed:8f:98:1e:10:58:25:
1b:c4:b9:d6:c6:9e:30:2a:2c:41:9d:73:af:02:28:ad:a6:77:
09:77:72:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org