Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/InJZFLuzgqmv8NfKxLEktMPyyyk.roa
File: InJZFLuzgqmv8NfKxLEktMPyyyk.roa (raw, json)
Hash identifier: z9MgNQytRY2lACAHNl7qy2Rb5Ev2SaPQSoHsjbZ/AT8=
Subject key identifier: 22:72:59:14:BB:B3:82:A9:AF:F0:D7:CA:C4:B1:24:B4:C3:F2:CB:29
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E08AF9E56DCC57E0649887760985C
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/InJZFLuzgqmv8NfKxLEktMPyyyk.roa
Signing time: Sun 01 Jan 2023 23:15:05 +0000
ROA not before: Sun 01 Jan 2023 23:15:05 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43444
IP address blocks: 85.239.42.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:08:af:9e:56:dc:c5:7e:06:49:88:77:60:98:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:05 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22725914bbb382a9aff0d7cac4b124b4c3f2cb29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:61:75:d7:8e:5e:cd:81:20:60:c3:67:d3:87:
b8:a1:b3:47:39:dd:b8:b7:ed:c4:1e:a9:cc:8d:6b:
6a:03:61:9e:c4:a4:03:69:8b:da:a4:e8:5c:79:6a:
73:8d:88:54:60:98:56:5a:d0:63:6b:20:f0:70:04:
4e:39:d9:dc:7c:06:c5:4c:b1:a1:54:61:ed:40:63:
4b:13:f1:dc:c0:08:a5:55:34:a0:18:a8:0a:f6:32:
4e:59:0b:7d:4f:c3:02:ed:c8:3b:69:89:52:fc:e2:
7d:c9:de:a8:2a:b8:d1:12:bc:b4:ac:0b:14:08:31:
c3:2b:6e:4c:95:d1:aa:03:87:c4:c2:51:8c:48:32:
a6:30:ff:a4:ae:6d:67:77:c0:6e:3a:95:f8:af:d2:
c1:6b:27:2e:70:ff:a7:b4:08:3c:70:82:9c:d8:69:
44:93:76:13:d9:12:fc:fe:b6:60:10:d6:1d:06:7f:
8b:b8:e9:df:87:12:91:69:8c:f8:ab:5b:3e:4b:94:
9e:02:bf:c0:d2:a8:92:c8:c9:78:e4:52:28:fd:c5:
06:ce:07:67:37:8b:e0:0e:e0:b8:b6:d5:01:28:ac:
8e:15:9b:54:8c:08:7a:66:d8:51:43:b4:cb:3e:75:
c4:65:54:df:8e:07:21:38:09:7c:16:fc:95:6a:b9:
0b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:72:59:14:BB:B3:82:A9:AF:F0:D7:CA:C4:B1:24:B4:C3:F2:CB:29
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/InJZFLuzgqmv8NfKxLEktMPyyyk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.42.0/23
Signature Algorithm: sha256WithRSAEncryption
98:4a:fa:37:a7:f2:1c:8f:91:0a:fb:bd:7c:34:f6:c1:ec:4f:
b0:6b:3d:0a:ef:71:58:d5:be:cd:a1:96:ec:13:2a:90:91:0b:
66:a2:b1:2b:ad:5c:83:a0:43:e6:77:bc:af:2e:41:46:b3:38:
d4:42:f9:2b:22:3f:d4:c6:fc:f9:30:dc:e6:cf:46:92:96:22:
7a:4d:1f:16:d8:e0:48:f6:e9:15:0b:0e:8c:05:c3:d4:9f:74:
34:74:0d:01:ea:21:4a:d2:9f:bc:da:78:8b:cc:c5:c7:39:8b:
fa:98:f4:17:9e:02:95:1f:7f:ba:5e:f6:d1:b4:22:6f:bb:d3:
98:fd:73:fb:1b:33:ac:79:26:d4:c2:64:f8:ba:43:b1:63:2a:
89:fc:fd:7c:b8:6a:0f:08:7a:bc:36:c6:fe:01:90:7e:80:6c:
ca:5d:f3:05:b9:fd:e1:c6:01:cb:cc:ae:a2:1a:f2:d2:0b:68:
0e:cf:07:93:59:05:55:3f:47:aa:56:f3:cd:00:e7:21:7e:d5:
fd:f7:6a:9c:2c:eb:f0:e1:1a:ab:f7:87:6c:e3:c4:98:4f:9b:
3d:26:d4:fb:5f:db:8e:83:91:3a:bb:b7:4f:69:db:8b:90:3e:
95:37:b6:d0:f3:b4:f5:51:a8:f5:f6:57:6b:41:90:f2:3f:bb:
2b:2f:25:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org