Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/22bT7WoGPGfsrJXBGIcEE84mfLY.roa
File: 22bT7WoGPGfsrJXBGIcEE84mfLY.roa (raw, json)
Hash identifier: SucfMabzmN1xAb3Vq2Jru1J1imp874KIdTARU+rfNdo=
Subject key identifier: DB:66:D3:ED:6A:06:3C:67:EC:AC:95:C1:18:87:04:13:CE:26:7C:B6
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF08D871590C40B8251D047E7ABE47
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/22bT7WoGPGfsrJXBGIcEE84mfLY.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210439
IP address blocks: 85.208.44.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Jan 2023 20:41:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:08:d8:71:59:0c:40:b8:25:1d:04:7e:7a:be:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=db66d3ed6a063c67ecac95c118870413ce267cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4a:41:b6:ad:46:09:88:0e:c7:30:0a:98:0a:
e2:c1:ff:6e:02:48:d8:a0:e5:f8:8a:a1:12:1d:20:
97:6f:ae:75:21:fe:83:06:e0:94:2b:e1:1a:07:3b:
39:97:dd:fe:42:6e:ed:b3:a9:a8:03:bb:33:ae:48:
73:51:e0:8f:12:24:1c:af:8d:46:b2:fd:79:f5:11:
ad:b6:14:84:67:b4:24:70:99:70:ac:6e:3e:2a:46:
d3:e4:46:db:45:4a:33:d9:ea:f3:32:01:33:51:10:
dd:b2:e5:2f:dd:78:24:43:5e:73:68:d8:ff:cc:a0:
97:9c:a2:58:dd:f4:9c:20:8f:68:cf:2b:27:f1:68:
67:f3:8b:9e:5a:ee:e5:d2:bd:81:dc:44:fe:dc:87:
81:0f:3b:3e:e9:80:02:02:c5:01:02:21:60:2d:bb:
3d:d7:b7:59:f9:9d:52:c3:d7:79:57:aa:5d:44:93:
b2:c5:31:0e:93:9c:bc:a3:3b:9a:bf:35:f7:97:b0:
bb:ab:0e:c3:91:ff:85:4f:09:0f:48:cd:06:bd:47:
e0:9d:29:53:74:f5:31:96:8d:c5:eb:06:28:e3:c7:
c8:d9:22:32:8b:58:37:5b:40:a7:ac:28:ca:b8:a3:
f2:2f:e3:1c:07:2b:a1:06:fb:a7:93:a4:7a:73:19:
f8:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:66:D3:ED:6A:06:3C:67:EC:AC:95:C1:18:87:04:13:CE:26:7C:B6
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/22bT7WoGPGfsrJXBGIcEE84mfLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.44.0/24
Signature Algorithm: sha256WithRSAEncryption
43:0a:43:3b:9c:d1:0f:28:25:05:f9:27:aa:5b:4c:cd:43:b3:
25:db:9b:04:4f:93:05:5d:1c:c8:9e:11:15:47:e1:28:ed:28:
42:d8:aa:df:88:21:a5:e4:85:e9:dd:61:87:a5:a2:ad:fe:95:
49:59:f9:62:52:59:b3:43:96:52:cc:04:63:36:ad:68:dd:c9:
52:ad:17:99:3d:e3:d5:ac:a9:79:9b:e5:0c:17:68:55:42:6b:
a6:47:b7:32:dd:2a:06:cd:8c:2a:68:79:55:aa:2e:2a:50:f5:
a2:3d:53:b6:4d:99:c3:bc:82:41:47:de:b9:51:18:95:8f:c0:
23:4f:e5:06:bf:3f:e3:5a:f3:ff:3d:b6:fa:88:68:44:be:a0:
11:e2:b7:d8:5a:4b:03:73:4d:3b:bc:d0:3e:5f:65:75:8a:fc:
5d:5b:10:ae:7c:f3:f9:71:23:e0:fe:b8:79:38:9b:66:2a:4b:
b1:39:13:9f:27:b2:0b:72:09:df:f8:65:5c:99:67:d0:b2:8a:
2e:ce:19:f2:bf:bd:6a:25:ee:de:d7:15:b0:a4:cb:43:3e:b8:
05:af:2d:50:4b:a1:92:36:34:df:64:56:a8:33:3d:2c:98:f7:
4e:d6:49:96:ab:82:fe:db:4d:aa:8c:81:0c:85:bc:10:28:2d:
bd:8d:ad:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:01:23 2024 by rpki-client on console-ams.rpki-client.org