Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/fQMR-EAMLhOY4sK46H8SCD_IOS0.roa
File: fQMR-EAMLhOY4sK46H8SCD_IOS0.roa (raw, json)
Hash identifier: y6jvV7i30G5nAutzpknXQrdqGchNKTWphfiuQ0tlQS8=
Subject key identifier: 7D:03:11:F8:40:0C:2E:13:98:E2:C2:B8:E8:7F:12:08:3F:C8:39:2D
Certificate issuer: /CN=3b7ec9423bf90c81d22d94841c10357a54260379
Certificate serial: 01856F9E0BFBAD1D4B022FCB969CB8BAF779
Authority key identifier: 3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/fQMR-EAMLhOY4sK46H8SCD_IOS0.roa
Signing time: Sun 01 Jan 2023 23:15:06 +0000
ROA not before: Sun 01 Jan 2023 23:15:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200019
IP address blocks: 85.239.34.0/24 maxlen: 24
85.239.33.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:33:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9e:0b:fb:ad:1d:4b:02:2f:cb:96:9c:b8:ba:f7:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b7ec9423bf90c81d22d94841c10357a54260379
Validity
Not Before: Jan 1 23:15:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7d0311f8400c2e1398e2c2b8e87f12083fc8392d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:61:72:2d:0a:14:26:50:e9:c0:d5:f5:a2:1a:
a8:d5:17:a9:b6:1f:58:90:51:78:6c:ca:90:a8:8e:
1c:f8:27:d8:c8:2f:6d:ee:95:9a:74:c8:e5:46:82:
2d:e3:14:60:b7:e7:18:b1:cc:77:70:e1:48:81:9e:
72:d4:79:9d:ab:2c:cd:f5:1a:43:b1:dd:78:e5:c0:
43:61:a2:23:8b:5b:4b:8e:34:99:2f:c4:3c:b4:c3:
d1:d9:05:ab:03:c8:dd:6f:24:1a:4e:a4:26:78:7f:
d7:f7:78:e8:0c:9b:d0:e4:d3:92:43:d5:3d:be:05:
2f:5d:8f:9f:d5:f3:11:f7:18:18:e6:1c:fc:bd:eb:
66:90:51:97:70:c0:c4:f4:39:c9:f8:fb:76:33:1c:
f3:36:16:fe:c3:d8:ba:f4:4d:fe:24:1e:eb:d5:35:
68:6a:47:42:06:b4:cc:16:86:0f:f3:38:21:38:99:
1c:fa:3e:dd:ab:eb:55:5a:57:7e:50:b4:89:da:12:
29:a1:60:6b:11:ba:af:e1:a2:e8:60:d9:e2:04:05:
78:fe:57:07:da:3e:ec:34:9e:92:94:22:f1:58:8f:
26:32:33:31:6a:45:56:7a:6c:f9:0b:e2:8c:db:2f:
35:81:c9:06:9b:25:d2:73:46:61:db:47:ca:7b:93:
7a:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:03:11:F8:40:0C:2E:13:98:E2:C2:B8:E8:7F:12:08:3F:C8:39:2D
X509v3 Authority Key Identifier:
keyid:3B:7E:C9:42:3B:F9:0C:81:D2:2D:94:84:1C:10:35:7A:54:26:03:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O37JQjv5DIHSLZSEHBA1elQmA3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/fQMR-EAMLhOY4sK46H8SCD_IOS0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8ea47f-eff3-4627-94ed-1d10f3c70bb4/1/O37JQjv5DIHSLZSEHBA1elQmA3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.33.0-85.239.34.255
Signature Algorithm: sha256WithRSAEncryption
b0:50:e2:5a:d7:e1:34:3c:f5:c1:28:c7:96:47:2b:22:b1:df:
6c:25:e7:96:ac:ee:33:fe:8a:8a:4e:47:b3:4c:92:82:c4:fb:
8e:12:92:d4:da:66:e2:eb:0f:bb:bb:c1:91:b1:de:c0:97:58:
0b:00:7d:fe:61:a3:d5:46:bd:c1:a0:6f:0b:bb:fb:bf:94:60:
c7:6b:78:d8:be:8f:f9:3e:88:17:71:ed:c0:18:6e:a8:bd:55:
16:90:ad:d7:cf:e3:9a:b0:38:64:e4:d2:22:07:dc:d1:97:5b:
89:c8:6d:20:f9:45:64:34:0f:fe:ae:c4:8d:ad:7f:6d:26:d9:
1f:29:44:b1:90:3d:83:34:5c:85:b6:f8:ef:fe:4c:a4:e5:f4:
61:1b:ec:61:34:e0:f5:04:a0:9b:57:5f:32:6e:21:5f:e4:26:
55:c8:de:01:7d:62:61:14:e5:28:a9:15:87:cd:0b:9b:3e:5a:
11:1c:56:33:b8:3b:88:41:2d:b0:20:52:2a:c3:8f:a2:9e:27:
8b:04:6f:71:b2:2a:88:c4:01:0c:c0:f8:1a:14:b3:b4:91:13:
b1:61:aa:f0:aa:10:3f:1c:80:7f:f2:31:29:1f:8c:b1:14:c7:
43:77:56:af:fe:19:0a:b3:95:74:b6:50:35:a1:8a:eb:c9:06:
c7:fd:8c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:31 2024 by rpki-client on console-fra.rpki-client.org