Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vxef9cXaioqy9v51OHH-JSUlubA.roa
File: Vxef9cXaioqy9v51OHH-JSUlubA.roa (raw, json)
Hash identifier: q0sEsIWgnKfh2UGr/HX/ul93bxDY6GrjyrCvkh62lyc=
Subject key identifier: 57:17:9F:F5:C5:DA:8A:8A:B2:F6:FE:75:38:71:FE:25:25:25:B9:B0
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 018CC8DCE21A930FEAF8CFDCDC5968F6DA06
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vxef9cXaioqy9v51OHH-JSUlubA.roa
Signing time: Tue 02 Jan 2024 06:29:28 +0000
ROA not before: Tue 02 Jan 2024 06:29:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 44103
IP address blocks: 85.209.132.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 06 Feb 2024 11:43:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c8:dc:e2:1a:93:0f:ea:f8:cf:dc:dc:59:68:f6:da:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jan 2 06:29:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=57179ff5c5da8a8ab2f6fe753871fe252525b9b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:00:23:05:f8:e7:4a:b5:15:d0:f4:3a:f1:b0:
35:7e:93:b2:d4:c9:55:b2:62:ae:f9:c9:22:bf:71:
f4:a2:3d:59:11:a5:07:20:9b:c7:0a:35:4d:85:c5:
59:0e:6a:e6:39:c9:49:9f:20:c6:43:88:79:fe:81:
6d:35:2c:00:f8:3b:c6:d3:ff:34:33:0a:98:3a:71:
0b:bb:e6:72:05:59:9a:f9:89:55:cd:3e:6e:7e:dc:
c2:8a:c3:b9:21:f4:16:2e:13:3d:43:e5:97:ff:08:
bf:00:08:2d:82:36:26:e4:2d:50:52:38:1f:03:7e:
f8:8d:be:5b:22:cb:95:55:71:e0:6f:2a:64:b7:9f:
35:75:d3:5d:d3:2f:ab:36:3f:b4:85:b0:b7:eb:1c:
a3:91:11:b3:b9:ec:6d:9e:ef:43:b7:80:08:7a:8e:
68:91:cd:a6:51:ee:1f:66:e1:9e:44:fa:0d:60:8d:
81:c6:63:04:62:2f:3c:86:cd:9f:be:35:49:69:e1:
6f:89:00:9e:55:0c:bc:6b:e9:c9:de:eb:f7:eb:cd:
33:f5:6a:0b:9b:af:80:1a:62:4b:59:75:36:ee:32:
85:9b:ef:87:31:93:cf:47:4e:04:01:d9:29:dd:19:
b2:d3:bf:b4:e6:d8:e9:6f:1d:d9:98:19:08:be:e6:
26:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:17:9F:F5:C5:DA:8A:8A:B2:F6:FE:75:38:71:FE:25:25:25:B9:B0
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Vxef9cXaioqy9v51OHH-JSUlubA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.132.0/24
Signature Algorithm: sha256WithRSAEncryption
81:4e:b1:7f:32:3a:52:0b:7c:de:d7:26:ce:d6:6e:0e:e2:a2:
c0:e9:7c:8d:80:d0:2f:43:02:e6:88:94:60:34:94:56:5e:c2:
4c:56:0c:93:d8:eb:94:19:bb:d2:b4:f6:ff:b1:26:02:d0:93:
a7:75:11:b2:5f:42:87:3b:af:1b:52:64:25:3f:d8:39:b2:49:
eb:6e:2a:7b:f3:28:d2:47:2b:9e:76:9c:9c:93:d3:5f:67:7a:
f7:b1:e1:46:ff:b8:b9:0f:72:71:95:3e:90:53:b8:91:1d:be:
b3:64:07:5e:75:00:cb:5a:c2:1b:95:02:93:bb:b0:7e:31:58:
14:d4:03:43:33:66:78:67:27:8d:eb:5f:5f:08:2b:46:31:b7:
fe:c1:01:b4:d0:5a:55:5b:e7:72:ea:b4:dc:3c:6a:58:51:95:
95:75:79:56:01:b6:6b:bb:bf:43:f5:89:4e:b3:f4:e4:83:a4:
79:34:ff:0e:f6:36:18:cb:38:60:14:3a:97:8d:2a:51:be:da:
ae:7c:87:ad:eb:a5:33:84:79:80:c9:c6:47:d7:77:83:d7:4a:
1a:98:36:76:a1:56:47:96:a4:d8:b7:b2:87:83:d9:3d:84:f5:
4d:7c:28:a4:34:e7:d2:fd:1c:2c:6e:f6:ea:06:3e:8b:59:0d:
15:2b:be:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 6 15:04:15 2024 by rpki-client on console-ams.rpki-client.org