Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9vWY49LHSQUBjPrstYQTzCmqlRY.roa
File: 9vWY49LHSQUBjPrstYQTzCmqlRY.roa (raw, json)
Hash identifier: l/uHMpL28JS+gMcxwBtiHBUg5DOvwMEi19PaCRiUXdw=
Subject key identifier: F6:F5:98:E3:D2:C7:49:05:01:8C:FA:EC:B5:84:13:CC:29:AA:95:16
Certificate issuer: /CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Certificate serial: 01856CAF082DDA52E9FA6F3350A56493DA6B
Authority key identifier: 05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9vWY49LHSQUBjPrstYQTzCmqlRY.roa
Signing time: Sun 01 Jan 2023 09:34:48 +0000
ROA not before: Sun 01 Jan 2023 09:34:48 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207459
IP address blocks: 85.208.47.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:af:08:2d:da:52:e9:fa:6f:33:50:a5:64:93:da:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0551605b675ece4e0fce7175ae31a93fa8272ba6
Validity
Not Before: Jan 1 09:34:48 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6f598e3d2c74905018cfaecb58413cc29aa9516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c8:c1:42:7f:77:48:ec:73:f8:38:84:20:37:
50:3a:ac:8a:80:22:87:e3:88:2c:81:72:48:d1:ed:
9b:0f:72:77:73:ef:53:cd:3c:32:ce:4a:ed:09:a5:
32:84:8a:03:1a:c8:2f:ca:06:c3:96:65:04:ce:08:
89:51:74:6f:f3:75:e1:4b:e0:5c:1b:4a:98:e0:26:
b9:5a:84:90:15:24:5e:e3:49:3e:83:f5:61:f5:37:
4a:56:f9:0f:98:1d:df:f8:d6:3b:16:69:c7:c1:5e:
8c:81:15:5f:81:e2:58:c6:d6:7c:ee:b7:e2:ec:39:
a9:65:d0:a9:02:b6:b8:0a:5e:a2:b8:ae:d0:23:ed:
89:9b:2b:9f:fe:0d:08:e5:98:09:53:8b:f9:f4:6e:
2a:9b:50:c2:8f:38:8a:8d:ac:2a:ae:cd:c5:6e:2d:
2c:19:2c:f8:13:ae:d0:19:d9:87:15:a8:30:e3:39:
91:b9:b0:9a:42:1f:a9:8d:17:b9:5c:90:8e:e4:de:
22:31:7b:50:5f:db:04:79:e4:76:e5:85:9f:30:f7:
fd:5a:0e:56:dd:02:1d:79:db:ce:e1:ba:16:39:6d:
34:bb:53:ba:01:72:71:c8:f6:75:47:f4:73:e0:36:
6c:7c:7c:2e:2c:28:18:e4:a9:f1:88:d2:b7:12:ba:
75:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F5:98:E3:D2:C7:49:05:01:8C:FA:EC:B5:84:13:CC:29:AA:95:16
X509v3 Authority Key Identifier:
keyid:05:51:60:5B:67:5E:CE:4E:0F:CE:71:75:AE:31:A9:3F:A8:27:2B:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BVFgW2dezk4PznF1rjGpP6gnK6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/9vWY49LHSQUBjPrstYQTzCmqlRY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/28ea45-7d30-46df-8f2a-0779f48ecea0/1/BVFgW2dezk4PznF1rjGpP6gnK6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.47.0/24
Signature Algorithm: sha256WithRSAEncryption
83:89:9c:97:d6:ca:b0:55:47:3c:73:35:5e:3b:fd:26:19:2a:
cb:4f:38:d6:2e:cf:06:47:95:c0:a5:28:e8:d8:d9:6e:33:b1:
a9:de:c2:c1:f0:b6:8e:fa:8b:35:95:ec:2b:e8:21:3e:d6:0c:
2f:ed:8b:8d:a3:0e:0b:1c:16:e5:ba:90:50:ea:55:44:96:e4:
30:f9:95:33:3c:ea:64:d8:01:4b:c1:0a:8f:8c:66:f9:d7:d4:
b1:30:9c:39:b4:5b:23:0b:9b:0e:53:1c:17:6f:22:91:be:01:
87:55:cb:8e:44:c6:7c:78:11:90:f2:0a:30:20:1a:cd:ec:d3:
b2:b5:62:ea:ac:29:91:ee:54:91:6d:49:57:20:95:d0:97:20:
e4:d2:d0:8e:4b:0b:ea:86:cc:2e:7e:24:f0:1c:d4:ca:3a:07:
0b:bc:aa:07:bb:61:74:25:2b:8a:56:fe:2e:fd:b0:e1:a1:50:
b2:3d:22:a0:99:c7:39:49:06:64:8b:8e:d1:65:7e:6f:8c:3c:
71:1f:70:88:f7:ff:92:37:e4:4f:0b:63:97:b2:86:e2:15:aa:
bb:f5:82:5d:90:1c:79:11:68:c7:72:7e:b3:60:80:fc:b8:7d:
60:79:ed:a2:e5:f6:47:8c:30:bc:26:21:41:6f:0d:d6:2f:2c:
f8:87:df:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:46:06 2023 by rpki-client on console-fra.rpki-client.org