Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/s5L7L8Cci9HVvZukp8hpas3t45k.roa
File: s5L7L8Cci9HVvZukp8hpas3t45k.roa (raw, json)
Hash identifier: fdSCyo6bUqhUSmtJY2VT9D+u/dbBbI+QK/7KE1SJUxM=
Subject key identifier: B3:92:FB:2F:C0:9C:8B:D1:D5:BD:9B:A4:A7:C8:69:6A:CD:ED:E3:99
Certificate issuer: /CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Certificate serial: 01856BDC9773533BC9289B782A91A220C1A8
Authority key identifier: 25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/s5L7L8Cci9HVvZukp8hpas3t45k.roa
Signing time: Sun 01 Jan 2023 05:44:56 +0000
ROA not before: Sun 01 Jan 2023 05:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 54600
IP address blocks: 85.209.40.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 01 Jan 2024 04:30:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6b:dc:97:73:53:3b:c9:28:9b:78:2a:91:a2:20:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=259e952e448b82ff4578eceb6448e6fbfc6113e0
Validity
Not Before: Jan 1 05:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b392fb2fc09c8bd1d5bd9ba4a7c8696acdede399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:06:ae:8b:2b:7d:34:cd:56:47:aa:e1:06:bd:
0a:01:92:78:80:e9:5f:95:f1:e5:99:6b:7b:3e:2f:
97:5b:0b:cc:e3:48:ba:35:6f:c7:b9:ca:fc:f2:5b:
09:90:c7:08:99:5d:62:52:05:21:ef:6f:4a:65:f2:
0b:ed:7e:3b:14:2a:2c:f7:69:c1:5a:91:d5:ab:6b:
84:58:47:ef:08:43:06:87:96:20:b1:2a:a3:68:67:
80:38:ec:1f:63:3f:ea:7a:fe:70:b2:3d:80:fd:ba:
1a:51:20:93:76:79:7e:a6:95:6a:92:6d:29:5f:13:
a2:df:ee:f7:49:fd:64:32:b1:8b:0e:4c:91:3d:62:
e1:56:56:0f:24:50:29:ca:0a:8c:87:7e:07:e3:d8:
09:1b:3e:e5:46:cc:62:56:fb:3d:b4:a3:c4:59:30:
c8:5f:0f:59:71:19:5d:8e:8a:4d:e7:20:89:31:53:
2c:71:87:a1:3c:c3:e4:da:9e:07:b7:aa:bf:3a:bb:
ee:9f:56:13:9f:31:f8:8d:bb:74:af:f1:4d:30:39:
b9:61:bc:a7:70:9b:10:87:2c:ca:0e:41:0a:0c:e9:
50:ca:cf:41:e6:5f:49:a5:90:3e:dc:3c:16:58:51:
f4:71:3a:3b:1c:be:e1:9d:61:bb:97:50:10:6b:66:
68:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:92:FB:2F:C0:9C:8B:D1:D5:BD:9B:A4:A7:C8:69:6A:CD:ED:E3:99
X509v3 Authority Key Identifier:
keyid:25:9E:95:2E:44:8B:82:FF:45:78:EC:EB:64:48:E6:FB:FC:61:13:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/s5L7L8Cci9HVvZukp8hpas3t45k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2cf8da-4b4e-44d1-8b10-08c06b768c2e/1/JZ6VLkSLgv9FeOzrZEjm-_xhE-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.40.0/22
Signature Algorithm: sha256WithRSAEncryption
5c:10:55:5b:d9:c6:98:d7:01:f3:13:48:e0:6c:67:d1:5d:84:
ac:20:3f:9a:e8:74:e4:b6:31:cc:a8:9c:9b:fd:9f:eb:12:7a:
9a:51:b0:b9:e3:48:aa:4a:1d:4e:4d:41:cd:30:3a:13:f5:34:
0f:68:61:99:2e:a9:e5:cd:d6:2f:ab:67:14:47:54:14:2f:66:
0f:49:26:1b:f7:a9:ec:25:6d:2f:c3:94:cc:7b:0d:a6:b3:ae:
40:ba:91:f8:01:16:eb:38:1c:01:d2:e0:49:5d:24:ad:f9:63:
d5:be:19:7f:16:bd:03:78:37:cb:b4:d1:d5:c8:e7:46:62:7d:
69:aa:ff:4f:20:34:08:db:4b:58:8e:d1:4e:cc:1f:8a:d9:ac:
b4:f7:a6:d1:68:e4:5f:e4:44:ed:63:89:ad:7a:b1:f3:ab:3c:
40:a4:d4:82:6f:3c:85:4a:2d:d4:a6:ec:af:ef:b9:88:78:4c:
42:0f:0e:f3:43:af:55:f5:52:4f:af:42:91:ad:52:a7:2c:ef:
dc:d9:a3:1d:33:86:0e:4b:8a:2b:35:39:6a:f9:5d:b6:e4:15:
b9:c1:5d:8e:71:b5:43:61:c2:65:9d:d7:61:64:53:2d:95:9b:
f6:1e:0a:a1:ee:18:84:d0:05:ed:7f:cd:d2:d7:80:aa:82:e5:
9f:48:38:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:18:05 2024 by rpki-client on console-fra.rpki-client.org