Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/2LQUytYblbYcZGUULwR3T-n2ido.roa
File: 2LQUytYblbYcZGUULwR3T-n2ido.roa (raw, json)
Hash identifier: BE7bCgA0GmeXMIv/iMFtvihkrp7p0/RmymtDGSMkfbA=
Subject key identifier: D8:B4:14:CA:D6:1B:95:B6:1C:64:65:14:2F:04:77:4F:E9:F6:89:DA
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E0BA6310D8C39CC324F0E86EFDBCD
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/2LQUytYblbYcZGUULwR3T-n2ido.roa
Signing time: Sun 01 Jan 2023 23:15:06 +0000
ROA not before: Sun 01 Jan 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197648
IP address blocks: 85.239.40.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:0b:a6:31:0d:8c:39:cc:32:4f:0e:86:ef:db:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d8b414cad61b95b61c6465142f04774fe9f689da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:ed:8b:ed:58:f7:3b:e6:df:8a:70:7d:d2:
92:e4:da:c7:ae:e1:dc:ff:f8:e3:72:1e:2a:50:be:
4e:12:88:14:54:b3:d9:13:95:d1:8d:c3:04:fc:77:
af:b8:6c:6f:15:6e:b2:17:85:4e:ab:54:96:64:f3:
54:16:12:e4:23:c4:78:56:ca:07:39:4e:d3:70:0a:
f1:c6:a6:db:c4:10:85:a5:08:87:17:82:0a:c9:13:
e6:57:eb:28:ed:e7:79:dd:06:d2:58:e4:b3:df:e0:
a9:c1:34:6f:72:f7:c2:26:98:f5:9a:9b:9f:47:7f:
a0:5d:75:92:1d:d3:3a:d5:bd:f5:61:9d:1c:69:74:
76:6a:58:9f:bf:86:47:20:8c:c5:eb:67:60:ca:4d:
7c:f3:0e:27:d6:25:d5:75:35:da:a7:b4:4d:0d:23:
dd:a7:1e:e4:d0:be:63:33:43:e8:b1:d3:03:16:bb:
f3:50:6f:77:a9:38:b7:8c:0b:df:3b:b1:cf:b5:22:
f5:9f:bd:f8:31:93:98:88:52:a4:7a:46:20:ca:39:
55:a9:81:39:6b:98:86:d7:33:0c:6c:f4:be:c9:c3:
b9:b6:7a:37:a0:67:be:14:1a:ce:50:66:c1:7b:b2:
2d:38:0a:f0:a8:11:dc:3c:f7:25:98:c0:c2:b7:34:
78:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:B4:14:CA:D6:1B:95:B6:1C:64:65:14:2F:04:77:4F:E9:F6:89:DA
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/2LQUytYblbYcZGUULwR3T-n2ido.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.40.0/23
Signature Algorithm: sha256WithRSAEncryption
08:fa:be:03:0e:06:0f:0b:2c:5d:d0:74:ed:a3:c1:04:70:66:
d8:74:df:90:1c:9f:0d:0a:3c:c7:9e:0d:e0:f8:a7:b0:03:3b:
f8:48:85:c5:0c:4e:b0:37:86:e1:55:4c:55:48:7d:a3:30:f0:
d9:d3:22:04:4b:a1:36:f4:09:de:69:c1:6d:44:ac:9d:7c:00:
67:10:f7:da:6d:2e:9c:b8:36:7d:6e:52:98:86:ce:cf:b0:94:
43:23:45:cb:90:30:32:84:c9:7b:c3:a3:f0:86:21:e2:11:f0:
56:d8:d3:49:f0:32:28:23:bc:68:9d:82:32:65:78:52:3b:68:
f7:c9:24:ba:ef:1b:4d:a8:28:6d:53:cc:71:f6:22:3f:d7:05:
49:aa:7b:8d:19:7d:b9:1a:4e:ba:22:a3:c9:f6:aa:5d:c6:25:
18:ca:94:4c:25:c7:47:6c:25:cf:80:77:08:f7:75:5f:a6:fe:
25:53:33:74:8c:2a:d1:e9:d3:ff:26:d3:d1:c9:a6:62:cc:08:
a4:33:d3:80:74:18:be:0f:b3:7c:6a:d6:40:4d:e7:32:4f:d6:
4a:18:db:30:19:4d:1a:00:58:c1:80:62:95:c2:0a:3c:aa:a9:
d5:2f:e0:02:a5:2f:19:63:c1:0f:a0:7a:f7:b5:ce:29:d0:d5:
53:7f:9c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org