Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/e1JxFUmUS1b1yZwObfkeUGgEL2s.roa
File: e1JxFUmUS1b1yZwObfkeUGgEL2s.roa (raw, json)
Hash identifier: 8/sQi+dnVenY8az+m9bhge/E3aK/77Xb8NH/sq2HZhQ=
Subject key identifier: 7B:52:71:15:49:94:4B:56:F5:C9:9C:0E:6D:F9:1E:50:68:04:2F:6B
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E0B6AED171490E08170FA173BC127
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/e1JxFUmUS1b1yZwObfkeUGgEL2s.roa
Signing time: Sun 01 Jan 2023 23:15:06 +0000
ROA not before: Sun 01 Jan 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 62240
IP address blocks: 85.239.60.0/22 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:0b:6a:ed:17:14:90:e0:81:70:fa:17:3b:c1:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7b52711549944b56f5c99c0e6df91e5068042f6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7d:83:00:47:fd:0e:1a:92:5c:b1:a3:eb:8d:
23:4b:d5:c1:c7:a3:22:5a:0d:25:d9:c5:81:0f:66:
7e:e4:18:b3:c2:fe:cb:3c:6b:df:68:65:8b:ce:8e:
4f:fe:17:81:c7:37:50:0d:93:6f:7b:cc:7e:93:3c:
5f:f0:b8:be:63:c2:59:11:f8:1a:36:20:2a:1d:df:
ea:e1:97:a2:5d:5c:a6:c7:ce:f6:63:94:ed:0d:b4:
f5:32:65:2d:8d:f4:4e:35:fc:bc:2d:52:5f:1c:62:
17:d5:78:3c:73:60:9f:da:09:38:10:13:ad:c8:e9:
90:90:80:87:f1:93:c5:49:b9:ff:d8:07:1d:97:66:
ec:08:28:61:e9:3d:ea:e2:26:94:17:52:bd:0d:c7:
d5:19:d2:4f:dc:92:a2:ee:cd:1f:fb:ad:3e:fb:d9:
cc:56:e6:f1:b0:ba:11:4c:a1:8b:db:e7:16:92:75:
55:77:a3:63:3a:c0:4f:e1:7d:65:36:9d:29:4c:de:
67:12:fe:f6:c7:50:98:ab:b7:28:e3:3e:f6:31:ed:
13:3f:e1:08:4c:94:84:10:fe:0d:23:4e:26:4f:50:
e0:56:56:1c:c9:ea:15:9a:7f:71:ab:a6:9d:68:70:
50:6d:92:a0:d3:23:b7:2b:d1:85:33:f8:58:32:c3:
39:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:52:71:15:49:94:4B:56:F5:C9:9C:0E:6D:F9:1E:50:68:04:2F:6B
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/e1JxFUmUS1b1yZwObfkeUGgEL2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.60.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:52:a9:8b:08:61:15:45:2f:ac:30:f2:a6:4b:ba:b7:21:59:
b7:62:9c:30:f2:ed:94:e4:ac:cc:f9:1d:b2:4a:a1:63:6f:99:
3e:85:2f:b8:f7:e8:38:7b:51:4c:92:0b:26:1a:2c:a9:69:7b:
ce:c3:d4:00:d6:27:55:95:04:0b:be:bd:62:22:94:03:d9:d5:
f9:43:07:07:fb:03:18:ba:13:2b:d7:46:63:50:82:35:dc:a0:
17:e9:c7:40:da:47:a4:28:89:08:b2:87:07:d1:dc:19:0f:26:
b0:78:2f:de:c8:64:2d:f7:33:44:6d:28:db:ae:2b:d5:c7:ba:
51:a7:b7:3e:9a:bb:06:8a:86:05:2b:02:c5:59:54:7c:a2:a7:
fe:23:84:f8:c9:bb:5e:79:c7:a4:e1:0f:39:8a:fd:ad:68:73:
74:06:a3:95:43:e9:ce:96:fc:f6:6a:f4:99:29:f6:db:34:9c:
0d:ad:e4:91:85:88:aa:32:9d:d7:5d:fe:26:da:e0:86:9d:26:
7e:50:a4:94:9e:73:c5:31:d5:5f:1c:8a:a7:83:ad:8d:d1:f2:
dd:14:98:59:65:22:1b:0d:5c:f4:06:94:5a:0a:51:6f:27:fa:
81:16:ef:28:76:fb:7e:d0:61:8d:8e:9f:80:2a:b1:6c:dd:69:
a3:f5:b9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:28 2024 by rpki-client on console-ams.rpki-client.org