Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/P72Dtu97wlFQJq8V33iW-chTFi8.roa
File: P72Dtu97wlFQJq8V33iW-chTFi8.roa (raw, json)
Hash identifier: YWxs5mB/jXqsw9Wd/UxxVMIkFHED7tXmjTEcXKbj7+Y=
Subject key identifier: 3F:BD:83:B6:EF:7B:C2:51:50:26:AF:15:DF:78:96:F9:C8:53:16:2F
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01856F14F9830BD64DCF7B4DF577CB34A342
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/P72Dtu97wlFQJq8V33iW-chTFi8.roa
Signing time: Sun 01 Jan 2023 20:45:23 +0000
ROA not before: Sun 01 Jan 2023 20:45:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 41461
IP address blocks: 85.120.216.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:14:f9:83:0b:d6:4d:cf:7b:4d:f5:77:cb:34:a3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jan 1 20:45:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fbd83b6ef7bc2515026af15df7896f9c853162f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:2b:e0:af:05:f6:51:e2:09:f6:e4:02:05:ce:
fa:d9:4f:04:c5:9b:e5:e1:bd:0b:e4:70:a9:67:f6:
b9:6b:3a:3b:85:9a:98:87:3f:99:f0:da:f4:e7:ed:
b2:35:64:67:f0:96:7e:b1:14:a9:fc:f9:46:63:c2:
df:65:12:19:b8:5d:70:f3:de:3f:ed:ba:65:20:3a:
2f:fe:4a:77:bc:e8:7c:02:c1:01:72:8c:74:94:dc:
74:c2:43:be:c8:b6:82:5d:fc:7d:2c:db:72:e3:c4:
46:17:97:b5:83:7d:07:09:d7:0e:90:8a:ab:60:e8:
6b:1d:db:e4:73:55:d4:9c:93:1f:b7:1c:8e:dd:59:
93:36:77:96:10:95:95:b4:74:78:e7:4b:b4:c8:aa:
3a:dc:14:07:c5:6f:16:90:21:50:c0:1d:18:2d:36:
89:ea:b2:d2:9c:4e:ad:d1:22:c1:80:8d:f8:71:e6:
51:5c:c2:54:c8:d8:f3:7e:f7:ca:c9:e5:db:02:b0:
0c:ac:38:2d:0e:e2:70:1f:92:11:2b:a4:ae:5f:92:
5d:2b:b3:83:82:90:68:64:ab:5f:1d:32:98:25:c4:
e8:be:2d:4d:e2:9d:1a:b2:d3:de:73:04:00:e2:15:
5f:2c:83:90:8e:b7:0e:b4:91:65:00:a9:9d:34:ac:
8d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:BD:83:B6:EF:7B:C2:51:50:26:AF:15:DF:78:96:F9:C8:53:16:2F
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/P72Dtu97wlFQJq8V33iW-chTFi8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.120.216.0/23
Signature Algorithm: sha256WithRSAEncryption
9d:b1:b1:aa:d9:96:a3:be:3c:b6:5d:73:d0:be:de:e3:0a:81:
07:21:56:63:06:f4:6c:cb:a1:d4:b5:0b:e5:c3:4b:a4:b7:fd:
3e:3e:4b:20:52:96:f4:bb:33:a1:6d:be:4a:2b:d9:a6:18:ef:
a7:91:c0:41:c1:1c:b8:b5:f2:70:51:fb:22:25:de:c9:87:66:
19:77:6a:e7:fd:b0:e5:77:09:5a:1a:f5:2f:99:5b:98:ba:0b:
01:0f:73:29:7f:1c:3f:ab:77:8e:80:aa:26:18:6d:75:ed:07:
10:b7:51:b3:b3:8a:d9:ec:08:b5:9e:16:f4:2b:ed:26:9c:f5:
bd:64:98:d6:2a:2b:13:e7:4e:62:d8:a6:d3:86:03:c8:6e:b5:
05:b2:88:1f:95:9f:41:36:34:7d:ad:99:aa:2a:29:e3:6f:df:
cc:02:3c:dd:ff:03:0c:2b:7e:1e:6e:b7:d2:8b:4d:ab:04:a6:
8f:ca:5a:d1:55:86:24:54:30:11:61:96:f2:05:14:d3:31:3f:
a7:04:c0:fd:b3:7b:61:63:ba:5e:62:d1:2e:15:e1:91:8d:7a:
38:5d:5f:46:dc:cd:c4:5c:f9:09:4e:83:c1:d2:22:2a:57:c3:
24:44:fd:e9:e5:26:02:82:22:b9:10:0d:e0:d4:c5:70:0d:46:
5c:75:b5:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:04 2024 by rpki-client on console-ams.rpki-client.org