Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0YVinJNnPQ35jzP702jEA11CxKQ.roa
File: 0YVinJNnPQ35jzP702jEA11CxKQ.roa (raw, json)
Hash identifier: laEFpdHXSn3MbTg4UYjNtRkFK6655403kQQ+3h4n34Y=
Subject key identifier: D1:85:62:9C:93:67:3D:0D:F9:8F:33:FB:D3:68:C4:03:5D:42:C4:A4
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018CC64ADB53140120A9B9D62584AF90519D
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0YVinJNnPQ35jzP702jEA11CxKQ.roa
Signing time: Mon 01 Jan 2024 18:30:43 +0000
ROA not before: Mon 01 Jan 2024 18:30:43 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 12310
IP address blocks: 85.121.14.0/23 maxlen: 23
85.120.152.0/23 maxlen: 23
Validation: Failed, certificate revoked on Wed 13 Mar 2024 13:59:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:4a:db:53:14:01:20:a9:b9:d6:25:84:af:90:51:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 18:30:43 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d185629c93673d0df98f33fbd368c4035d42c4a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:af:6a:b6:55:1c:40:39:51:12:41:7e:0a:d0:
8e:f1:ae:a6:12:ea:da:64:76:b2:ee:4a:87:04:83:
54:7b:c5:5e:b1:d0:2a:2b:72:e9:c7:ed:ba:53:d5:
71:a8:19:e2:ad:0e:cc:af:e3:6a:70:41:8b:ca:8f:
27:53:9f:cd:7c:9a:a8:ec:d1:6f:a4:83:d0:6a:2c:
98:4a:2e:61:d6:18:9b:78:17:13:cb:22:84:ee:d6:
14:d0:68:2f:6b:d8:79:3f:7d:36:1b:9c:71:7f:b5:
fe:29:87:7f:a6:ba:90:e1:35:6f:48:d8:22:98:b0:
bb:8c:54:4e:70:6e:45:a8:c3:bc:18:8e:60:28:c6:
8a:40:55:6a:bf:67:6e:cf:e9:82:51:47:c0:f2:ca:
0c:4a:9f:74:18:08:a3:5c:19:aa:78:7e:da:f0:aa:
c4:d8:a2:d4:f8:8c:39:81:30:bc:18:f1:ce:4f:bc:
5b:c2:76:8e:6a:20:f5:8d:e9:fa:98:73:fa:0a:69:
eb:59:12:9a:6b:99:ca:70:58:c3:4a:82:34:8b:3c:
b0:47:f6:56:c7:e6:53:b7:eb:38:e8:6b:df:9a:39:
d7:d1:cb:b9:ca:c6:aa:ab:31:b0:5b:ee:a4:da:da:
8b:66:b1:b4:4c:fc:1c:6b:a4:71:16:dc:01:f4:96:
ba:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:85:62:9C:93:67:3D:0D:F9:8F:33:FB:D3:68:C4:03:5D:42:C4:A4
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/0YVinJNnPQ35jzP702jEA11CxKQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.152.0/23
85.121.14.0/23
Signature Algorithm: sha256WithRSAEncryption
03:6f:5b:c6:f3:ae:aa:71:c8:f1:c6:f0:c2:bc:e6:bd:33:82:
4b:27:d4:6b:3b:72:cd:1d:01:08:e3:cb:8f:bd:9c:31:24:c8:
8d:1d:e5:31:22:7d:88:1b:05:c9:1e:9e:78:8a:0e:84:ca:1b:
b1:62:35:db:19:2d:b2:82:38:65:da:dd:d4:2d:2d:39:8b:a7:
12:f1:41:a6:86:12:1f:23:a9:04:b3:51:e7:50:f0:ae:e6:3e:
5f:ab:09:c1:47:ff:0f:6b:40:a7:93:fa:ff:7e:59:5e:f7:ef:
80:fd:b9:5c:bf:ed:b1:d9:b2:20:dc:b3:eb:8a:6d:24:b2:f7:
27:22:0c:71:23:8d:15:92:6e:7d:8e:aa:44:99:88:43:77:5e:
9d:52:76:c0:8e:35:40:3b:40:5b:f1:41:e2:dc:0e:7f:d6:b6:
4e:96:0d:85:80:88:44:01:5e:3d:30:ea:b7:86:44:ef:86:80:
b7:10:f6:1a:c9:ee:c4:43:cb:7a:b1:d7:f8:86:46:59:fe:73:
b9:00:b9:31:c2:10:72:a7:ed:11:5e:39:1b:e1:32:20:3d:45:
5b:09:54:24:45:cd:84:62:bd:43:31:7e:33:71:2c:e4:74:99:
d4:95:96:e7:e0:26:a6:07:11:ae:dc:10:ff:f4:a7:52:9d:78:
eb:69:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 13 17:00:28 2024 by rpki-client on console-ams.rpki-client.org