Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IvBYKbYvcFDyH9RnBHMA_wIRMoM.roa
File: IvBYKbYvcFDyH9RnBHMA_wIRMoM.roa (raw, json)
Hash identifier: DAsykZC3Bwlf3vC1VGu8chrE6HEAoM3dhb34mws9P70=
Subject key identifier: 22:F0:58:29:B6:2F:70:50:F2:1F:D4:67:04:73:00:FF:02:11:32:83
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 018A3B8052E866274F9AA9F56B27FD136F34
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IvBYKbYvcFDyH9RnBHMA_wIRMoM.roa
Signing time: Mon 28 Aug 2023 09:36:20 +0000
ROA not before: Mon 28 Aug 2023 09:36:20 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41496
IP address blocks: 85.122.88.0/21 maxlen: 21
85.122.136.0/21 maxlen: 21
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:3b:80:52:e8:66:27:4f:9a:a9:f5:6b:27:fd:13:6f:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Aug 28 09:36:20 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=22f05829b62f7050f21fd467047300ff02113283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8d:2c:b2:cd:0b:97:0c:7f:2e:66:ce:10:6e:
8a:23:10:ea:da:af:d6:bd:38:83:e7:ee:57:69:16:
e4:9b:eb:31:28:1e:03:db:fb:f4:95:2b:4d:c3:21:
8a:26:38:d7:2f:1c:8f:ab:1c:6e:01:8e:46:f6:49:
79:c0:20:f6:aa:10:d4:d8:64:c8:5c:3c:39:6b:82:
90:ed:f1:9f:8c:da:43:f7:d7:62:05:1c:1e:88:1a:
95:8d:65:16:18:e5:1c:09:49:59:b6:c0:23:ee:0f:
0a:dc:c0:d3:db:18:8e:da:ac:61:87:dc:af:89:d5:
18:d6:d6:7c:c0:26:95:18:4d:13:2c:08:30:d4:4a:
8a:53:19:ce:86:d9:ed:f8:cc:c6:63:f3:41:fd:5f:
3c:18:13:ae:60:68:92:f0:e7:90:8b:af:50:d2:24:
da:2a:a2:31:94:ad:94:6c:3c:ac:60:dd:d9:bd:e8:
c2:75:26:66:16:5d:32:b4:f0:4e:24:63:68:7f:bd:
24:6b:16:84:7f:7a:57:4b:14:df:e1:29:44:07:dd:
6f:4e:6c:25:65:74:1b:7a:c9:31:4c:fc:e8:33:1c:
1d:ac:2c:ae:75:e7:8f:8c:86:5d:fe:98:32:8f:dd:
7f:a5:e6:a6:5a:a2:5e:63:79:5a:16:34:38:52:c8:
15:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:F0:58:29:B6:2F:70:50:F2:1F:D4:67:04:73:00:FF:02:11:32:83
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/IvBYKbYvcFDyH9RnBHMA_wIRMoM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.88.0/21
85.122.136.0/21
Signature Algorithm: sha256WithRSAEncryption
2d:8c:14:67:6e:a0:b2:84:f9:ca:b6:47:e8:b7:ee:56:32:86:
c9:56:46:f2:f1:63:42:30:e2:07:db:38:b7:cb:d8:ca:d7:67:
b3:ea:ed:54:0e:17:11:5f:3c:94:81:d7:9b:11:2b:bf:c6:9c:
2f:fc:e9:ee:14:88:cc:15:8e:cb:db:55:5d:12:2e:a8:9e:33:
85:3c:21:c6:86:e9:64:fd:34:c2:51:7f:a1:01:23:5c:23:6f:
7c:4a:0b:3a:6f:2f:e4:40:9d:c0:61:67:d9:59:43:6e:45:8d:
ca:57:73:9f:67:9c:e7:a5:1b:97:5c:b9:48:2b:99:cf:84:bb:
37:39:da:61:c1:fa:f8:a5:d2:c9:f1:75:d7:32:92:e9:a3:e4:
55:3f:96:3f:85:95:7d:f5:cc:53:2b:b0:1f:97:0d:26:88:b2:
9f:13:15:8b:09:10:09:4e:4c:3c:66:2f:69:69:8a:9d:57:15:
cd:ae:ce:ee:7d:76:c1:65:20:70:8d:6a:8d:e1:0a:6e:10:d3:
39:1f:16:ee:d5:7b:be:99:ab:23:e5:31:17:8c:ba:ad:b1:89:
db:84:31:c1:64:13:b3:81:10:29:67:bc:8b:11:83:e3:c6:98:
d5:65:be:06:c2:2c:22:ee:1d:84:2d:30:8f:9a:f4:e1:9b:9b:
d4:08:9f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 21:27:06 2024 by rpki-client on console-fra.rpki-client.org