Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Xr6obxm_M1x1d3BWX1n4EbFhKlg.roa
File: Xr6obxm_M1x1d3BWX1n4EbFhKlg.roa (raw, json)
Hash identifier: DvT2dmp4ODfTA07o2vAIXBCQcnU2FVox3+QPbZtRETk=
Subject key identifier: 5E:BE:A8:6F:19:BF:33:5C:75:77:70:56:5F:59:F8:11:B1:61:2A:58
Certificate issuer: /CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Certificate serial: 01856FD526EF18727E2348FA55C8F1F61832
Authority key identifier: 52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Xr6obxm_M1x1d3BWX1n4EbFhKlg.roa
Signing time: Mon 02 Jan 2023 00:15:18 +0000
ROA not before: Mon 02 Jan 2023 00:15:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35050
IP address blocks: 85.223.136.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 16:29:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:d5:26:ef:18:72:7e:23:48:fa:55:c8:f1:f6:18:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b9b9e256580c4344bb241445b4d52e54fdd50b
Validity
Not Before: Jan 2 00:15:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5ebea86f19bf335c757770565f59f811b1612a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:1d:56:58:66:82:5f:83:7d:09:ec:42:dd:
6a:33:28:fd:a2:35:4c:0b:1a:f8:02:07:b5:96:29:
d2:77:ce:90:ea:70:c3:c0:f3:9e:c1:11:26:09:05:
0f:94:f3:9a:70:32:99:b0:b8:9c:84:d5:ac:3e:87:
47:57:0d:9b:b9:74:3e:e0:bf:38:98:40:92:84:f8:
28:54:50:59:f7:ea:2b:e0:39:27:84:a4:dc:44:c8:
bb:38:d8:3d:fa:28:a3:b2:06:0f:4e:99:7c:38:96:
31:a3:47:4d:f1:64:80:5f:a5:8b:0e:8a:33:70:d6:
3c:78:11:98:e4:af:0d:11:93:48:d5:b8:69:54:12:
27:74:d8:15:5f:83:70:0e:1b:b3:a6:91:43:04:7f:
19:d4:d5:46:14:e3:cd:3e:4e:ec:01:05:f1:d3:2e:
55:3f:02:f4:52:3a:ab:88:e8:bb:c0:b3:15:a9:4b:
b1:fa:ac:24:79:78:4b:bb:9d:ca:25:ac:e6:36:f8:
d1:05:70:1a:32:e9:77:30:cc:ad:cd:52:de:ca:fe:
71:d1:23:67:4d:29:73:a6:52:52:36:21:b0:34:f2:
5d:e5:ae:07:17:8a:fa:83:b4:91:74:59:e8:43:a5:
4d:1d:af:8f:2f:c7:ea:a3:9d:2e:a6:c8:81:36:6f:
db:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BE:A8:6F:19:BF:33:5C:75:77:70:56:5F:59:F8:11:B1:61:2A:58
X509v3 Authority Key Identifier:
keyid:52:B9:B9:E2:56:58:0C:43:44:BB:24:14:45:B4:D5:2E:54:FD:D5:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Urm54lZYDENEuyQURbTVLlT91Qs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Xr6obxm_M1x1d3BWX1n4EbFhKlg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/Urm54lZYDENEuyQURbTVLlT91Qs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.223.136.0/24
Signature Algorithm: sha256WithRSAEncryption
31:82:78:61:d0:61:7f:09:b7:d4:27:30:5b:d1:9b:7f:5c:80:
66:39:25:26:fc:71:36:96:b3:1a:d7:8e:c0:dc:f7:f0:85:3c:
24:e0:81:cb:00:38:3e:04:3f:41:f2:e4:99:f8:a1:15:c5:6f:
c6:7f:23:fe:df:42:14:9d:9d:e2:27:30:e2:63:c4:41:b7:ff:
17:d8:3f:0c:0c:0e:24:80:ed:16:e2:cb:d8:cc:b9:07:5a:d0:
c2:0e:07:cf:64:f7:ca:2b:c1:96:5f:4f:35:0b:11:b1:1e:85:
54:28:c5:95:c6:8c:c1:c1:73:10:79:99:08:9f:ee:0b:92:46:
69:81:1f:e9:b5:94:50:52:26:50:a6:54:5f:de:5b:3c:3f:e4:
1d:84:fe:bd:6d:dd:42:0c:a5:3b:23:59:36:05:63:ff:a1:5e:
56:0b:46:22:01:6b:b7:ad:cf:71:d3:96:9a:90:de:1e:ec:3e:
fb:c4:cc:11:a0:38:cc:e7:7f:3b:e7:fa:50:24:2c:a0:c3:ae:
24:41:07:4b:42:aa:dc:dd:d7:80:ae:d6:3e:2a:19:ba:c5:a8:
08:2f:64:cd:2b:d5:ab:da:78:53:60:21:03:d5:64:64:dd:b0:
64:36:04:05:8d:f2:39:88:57:c1:f6:4d:a9:c1:e7:d2:64:e8:
05:eb:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:55:52 2024 by rpki-client on console-ams.rpki-client.org