Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/eVcKxdnFTtloR6KHlmXiZ0j8oxk.roa
File: eVcKxdnFTtloR6KHlmXiZ0j8oxk.roa (raw, json)
Hash identifier: rC+PpjYftvrHlTgiuVcTAnEQiqw0ql3lMcCmmbbuZqo=
Subject key identifier: 79:57:0A:C5:D9:C5:4E:D9:68:47:A2:87:96:65:E2:67:48:FC:A3:19
Certificate issuer: /CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Certificate serial: 01856FF9740E5A15EE97BF21AB8D6B0CB190
Authority key identifier: 05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/eVcKxdnFTtloR6KHlmXiZ0j8oxk.roa
Signing time: Mon 02 Jan 2023 00:54:57 +0000
ROA not before: Mon 02 Jan 2023 00:54:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47453
IP address blocks: 85.118.94.0/24 maxlen: 24
85.118.95.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:74:0e:5a:15:ee:97:bf:21:ab:8d:6b:0c:b1:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0548cedf17029ed98a108113c6c109ecaccd82ec
Validity
Not Before: Jan 2 00:54:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=79570ac5d9c54ed96847a2879665e26748fca319
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:71:bc:52:41:39:23:ad:bf:ec:d9:80:df:ec:
78:fc:2b:6a:9f:0c:05:44:3e:67:5b:b8:86:2c:9a:
99:2a:7b:12:c6:3b:44:76:23:fb:90:ea:3d:55:78:
b3:de:8c:12:5a:e5:6d:23:60:de:27:bc:af:27:ab:
2a:33:a7:89:5a:35:e8:42:4e:5e:6b:7d:48:b5:6d:
26:80:8a:21:8c:f3:b9:f4:41:42:43:9a:44:dd:b8:
5a:7f:10:07:0a:5e:d1:a0:34:3b:db:06:c9:ce:08:
b3:5e:74:cc:f9:c9:47:1c:36:87:06:fa:71:c8:2c:
bc:22:46:05:3f:ce:5c:16:11:52:8c:11:04:42:e7:
98:e3:da:22:9f:77:29:32:92:e4:e2:f6:98:d6:98:
4b:e0:11:93:96:a9:71:cb:34:b0:03:b5:00:0f:fc:
5b:da:c1:32:cd:84:cd:cf:1f:a5:7e:af:7a:96:d6:
83:69:8b:ec:69:d3:c2:f4:34:9d:e8:e3:02:c1:2c:
4f:1d:67:58:66:ee:e0:d0:72:7b:37:14:6b:dd:4a:
62:73:ba:7c:20:96:2e:62:dd:f6:95:93:c1:ed:d9:
fc:a8:04:01:4d:14:07:03:a2:3b:74:3c:31:41:d7:
45:35:e8:51:34:5c:dc:17:83:97:1f:17:6c:39:0b:
ef:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:57:0A:C5:D9:C5:4E:D9:68:47:A2:87:96:65:E2:67:48:FC:A3:19
X509v3 Authority Key Identifier:
keyid:05:48:CE:DF:17:02:9E:D9:8A:10:81:13:C6:C1:09:EC:AC:CD:82:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUjO3xcCntmKEIETxsEJ7KzNguw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/eVcKxdnFTtloR6KHlmXiZ0j8oxk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/541c05-8d7d-42b8-ab00-7fbbae6f9437/1/BUjO3xcCntmKEIETxsEJ7KzNguw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.118.94.0/23
Signature Algorithm: sha256WithRSAEncryption
45:ad:c6:8d:4b:c1:9c:12:96:fb:07:aa:4b:b0:04:71:34:ab:
81:91:b6:99:9e:65:71:7e:e8:75:6b:d9:e4:55:11:f9:a9:3a:
30:4e:f3:f0:bd:a0:0c:11:3f:a9:47:d1:7e:ca:92:74:4d:7f:
f2:9c:3f:66:95:14:fa:54:3b:50:38:94:8f:e6:be:4a:1a:03:
5c:59:49:12:53:bc:78:53:33:a7:29:39:aa:f6:82:07:9e:4e:
fe:e9:34:1c:bb:fc:2a:9e:e3:86:5e:87:3f:1e:d5:8f:dd:98:
08:b1:b5:f4:33:30:70:72:05:c7:4f:2c:de:bc:b2:aa:1f:61:
ed:e4:76:62:cc:94:d9:54:ef:09:89:49:ef:97:3d:a6:d8:da:
26:e4:4d:b3:b4:fe:40:7a:a8:ed:75:07:3c:c2:ce:31:16:8c:
15:f8:a3:d4:e5:40:4f:65:20:43:94:13:f0:58:7d:f9:d7:d9:
a2:d3:1f:90:48:80:ae:f7:bb:f8:b1:c1:19:5d:22:cd:f4:d2:
15:9e:81:75:b2:b1:e7:e3:d7:82:8f:dc:d2:8f:ce:ab:f7:21:
64:a4:0f:36:4d:93:27:85:34:60:b4:12:74:bb:2d:61:f9:36:
bc:9a:23:a4:d8:34:25:cc:ea:fe:f2:7a:fd:3f:2a:c9:1d:36:
b0:a3:60:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:01 2024 by rpki-client on console-fra.rpki-client.org