Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/je28Uwgy3XIzkxbppYFzyxzJlL4.roa
File: je28Uwgy3XIzkxbppYFzyxzJlL4.roa (raw, json)
Hash identifier: Jr+gfV1H8vv+YoPLza6unWZYndkgGcsiifp2AWb7v6U=
Subject key identifier: 8D:ED:BC:53:08:32:DD:72:33:93:16:E9:A5:81:73:CB:1C:C9:94:BE
Certificate issuer: /CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Certificate serial: 018D36B24F1D8E85523AA86220FEBAF1687F
Authority key identifier: 56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/je28Uwgy3XIzkxbppYFzyxzJlL4.roa
Signing time: Tue 23 Jan 2024 14:21:11 +0000
ROA not before: Tue 23 Jan 2024 14:21:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 35080
IP address blocks: 85.119.71.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 06:41:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:36:b2:4f:1d:8e:85:52:3a:a8:62:20:fe:ba:f1:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=568fe35cc962633a2757af10a0e6e8ab6d01f4c9
Validity
Not Before: Jan 23 14:21:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8dedbc530832dd72339316e9a58173cb1cc994be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:0b:77:f6:f3:32:b5:31:55:22:0a:4a:f6:be:
2e:85:86:da:4f:c7:c3:08:18:0c:c9:45:8c:e7:77:
43:a2:d3:db:f0:7b:47:47:8b:d5:08:33:a6:1c:14:
5a:b0:26:23:01:c6:dc:19:be:b8:25:7d:11:af:a6:
b6:de:73:5e:59:a4:8c:2c:06:96:4c:74:0f:f1:4b:
75:bf:71:0a:22:0d:a0:d7:18:ea:5b:83:2e:10:e0:
96:ad:ae:a3:ff:38:e1:7d:37:34:1e:9a:35:af:64:
e1:63:9f:b7:56:7b:cc:9d:74:dc:af:33:84:66:3b:
2a:f2:bd:62:f8:23:83:79:6d:e7:cb:73:d9:08:52:
51:00:99:a0:43:23:5f:d5:d2:4a:08:c3:16:15:b5:
13:88:d9:a8:6a:ed:c1:d6:cb:54:cb:fe:b3:15:21:
7c:ee:5c:f5:4f:98:a5:b1:7b:aa:e6:b9:27:c9:62:
89:40:f1:9d:c0:e6:64:74:79:40:e8:be:b9:8e:3c:
c1:de:94:f0:79:70:c8:fb:2e:d0:c9:3f:82:d0:3a:
f7:ff:af:12:45:cf:40:8e:5d:3b:a4:21:47:68:da:
cc:52:ca:30:ba:0d:e4:24:27:19:a0:3f:7e:8e:91:
28:bb:c8:aa:e9:d6:4b:1b:6e:32:0b:67:f9:59:9b:
52:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:ED:BC:53:08:32:DD:72:33:93:16:E9:A5:81:73:CB:1C:C9:94:BE
X509v3 Authority Key Identifier:
keyid:56:8F:E3:5C:C9:62:63:3A:27:57:AF:10:A0:E6:E8:AB:6D:01:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vo_jXMliYzonV68QoOboq20B9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/je28Uwgy3XIzkxbppYFzyxzJlL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/37ebe6-8bfe-4c1f-a183-83d648f79746/1/Vo_jXMliYzonV68QoOboq20B9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.119.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:bc:d6:dc:b8:6b:63:d7:31:ad:2a:bf:90:cc:28:03:a6:63:
5a:64:0b:ee:d7:ff:c9:b1:56:61:fb:32:fb:34:67:a2:80:4f:
6c:f2:22:b6:c0:9c:ff:61:fb:ae:24:ef:9a:e4:2f:21:ff:a7:
04:94:28:6f:96:8f:41:35:88:8c:85:17:37:7f:a9:a5:b3:3d:
71:c0:d4:8e:91:1a:77:61:bb:de:44:96:94:3e:99:00:36:86:
a4:3f:6a:7e:c2:2c:cb:02:22:06:fb:f4:4a:52:86:d4:d4:46:
45:c6:2e:7d:02:d8:c6:67:f1:28:aa:47:eb:40:4a:1d:6b:cf:
ac:3b:82:44:95:80:c1:73:44:bd:05:88:d7:4f:44:95:1c:86:
c0:42:a8:95:83:84:99:42:e3:a2:9a:af:2b:b2:30:aa:ef:04:
0b:a8:a7:d4:76:6f:a8:c1:87:a5:0e:bc:c0:e3:d7:69:89:09:
2f:47:2a:b5:da:ec:9f:23:bc:81:b4:62:8b:27:3f:40:92:d0:
f5:11:5c:bd:7d:87:fd:53:47:f5:8d:4a:93:45:5a:d8:27:6e:
5c:a7:d0:c4:3c:e8:74:54:08:ea:28:1d:57:b9:21:2b:21:96:
7c:d2:e3:e2:dd:b1:62:cb:2e:51:79:47:8f:52:41:02:64:ed:
b5:5c:9e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jan 24 07:35:16 2024 by rpki-client on console-ams.rpki-client.org