Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iFETOs-26sn0u_oXa4qDQg3f1SI.roa
File: iFETOs-26sn0u_oXa4qDQg3f1SI.roa (raw, json)
Hash identifier: aD9qb3ZSTYw+eMxEtT0FVyilt8JnFhGaJaHav512BSc=
Subject key identifier: 88:51:13:3A:CF:B6:EA:C9:F4:BB:FA:17:6B:8A:83:42:0D:DF:D5:22
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 01890250C86FA8A5059201BC6BD5E1B7D8BE
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iFETOs-26sn0u_oXa4qDQg3f1SI.roa
Signing time: Wed 28 Jun 2023 14:03:15 +0000
ROA not before: Wed 28 Jun 2023 14:03:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48453
IP address blocks: 85.122.55.0/24 maxlen: 24
85.122.54.0/24 maxlen: 24
85.122.52.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 18:30:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:02:50:c8:6f:a8:a5:05:92:01:bc:6b:d5:e1:b7:d8:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jun 28 14:03:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8851133acfb6eac9f4bbfa176b8a83420ddfd522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:21:bb:8d:f1:3a:ae:71:00:dd:69:16:2f:cb:
22:eb:be:05:94:a1:93:c4:be:4f:cc:df:76:e7:e7:
6f:f1:46:d6:93:17:f9:47:57:14:46:50:5e:fb:c9:
97:b9:d0:87:26:07:9b:0c:51:da:44:24:14:4d:60:
62:13:80:c1:0f:06:31:72:05:a9:61:3b:58:05:9b:
e3:33:0c:4f:1a:6b:78:34:41:ad:68:25:76:6d:cb:
e3:a0:ba:08:10:58:1e:68:f6:94:06:31:8c:56:54:
1d:15:f8:62:53:85:e3:d3:5a:29:7f:c0:11:a9:09:
5f:ba:fc:95:d8:5b:6f:91:c7:d7:4b:19:77:5c:55:
5f:dd:61:e6:89:30:5a:cd:ce:57:17:e0:a4:63:4b:
3c:b2:74:2d:f9:d2:0c:01:ba:b4:40:71:58:b6:2e:
4e:05:6f:41:32:3c:23:fa:88:a9:2c:89:fb:df:10:
b6:ae:36:00:7a:dc:fd:10:f2:55:f5:a9:5e:1d:ae:
87:fc:72:69:27:f0:a6:d9:af:24:4d:68:1e:c5:90:
a5:72:5e:27:b4:be:8c:15:e6:66:39:41:99:f8:5e:
11:d7:86:3e:02:2c:4f:ff:fc:a8:02:d4:6d:8b:aa:
f2:ff:78:c6:c6:23:89:c4:8e:f8:55:d9:32:2f:4e:
2e:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:51:13:3A:CF:B6:EA:C9:F4:BB:FA:17:6B:8A:83:42:0D:DF:D5:22
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/iFETOs-26sn0u_oXa4qDQg3f1SI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.122.52.0/22
Signature Algorithm: sha256WithRSAEncryption
12:a4:2d:bb:67:26:ce:27:9b:5a:3f:0a:56:eb:5f:3d:ce:0b:
68:30:23:4d:d2:72:fc:23:b9:16:da:91:ee:01:39:76:84:b3:
e0:fd:ab:95:22:49:1a:7d:71:ad:6d:0f:ad:42:d0:7b:24:d2:
bc:59:da:cf:10:c7:6b:00:4d:b7:6b:92:66:16:85:cc:49:67:
8c:ce:a9:77:15:fd:ba:fd:bb:ec:e5:8d:ec:4d:45:65:80:64:
32:f8:b2:41:82:38:28:03:67:b6:46:bc:ef:a4:87:3a:80:ec:
5f:29:86:70:04:c9:22:53:9a:3a:74:40:c7:72:0e:88:2a:a1:
d3:fe:9f:2e:e7:bc:55:83:c3:20:45:23:4d:54:63:20:d9:c5:
ce:fe:ff:ed:2d:dc:21:21:45:79:fb:cf:04:fa:30:5f:98:8a:
ed:b4:d1:23:38:f6:c5:50:42:64:24:85:5b:09:a3:4f:e6:cd:
59:88:83:5f:b6:2c:52:c0:ce:f0:c8:6e:11:52:3a:81:1b:f3:
97:ab:b8:c6:9a:cc:00:a4:75:01:1f:70:11:4a:d0:8c:0d:5a:
f8:80:db:81:65:45:0f:da:fa:70:52:18:8d:43:c8:51:37:a2:
85:2b:b2:a6:90:7e:a2:e0:f8:3d:72:c9:b1:dc:e0:18:4f:b2:
bd:c8:78:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:20:22 2024 by rpki-client on console-fra.rpki-client.org