Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IL6kwwKp64Li8Xed5KbTYOIEhLU.roa
File: IL6kwwKp64Li8Xed5KbTYOIEhLU.roa (raw, json)
Hash identifier: SFnk8Ul4SR/Dpcxa/TYodJ2S889NaaCic6wF/DflPUc=
Subject key identifier: 20:BE:A4:C3:02:A9:EB:82:E2:F1:77:9D:E4:A6:D3:60:E2:04:84:B5
Certificate issuer: /CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Certificate serial: 01856EA6B46B53B8267D1B25489CAE54687F
Authority key identifier: FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IL6kwwKp64Li8Xed5KbTYOIEhLU.roa
Signing time: Sun 01 Jan 2023 18:44:56 +0000
ROA not before: Sun 01 Jan 2023 18:44:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 12695
IP address blocks: 85.204.78.0/24 maxlen: 24
93.113.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 20 Jan 2023 12:35:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:a6:b4:6b:53:b8:26:7d:1b:25:48:9c:ae:54:68:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe58952d393935f0d3bce814fd9178d04693aeb9
Validity
Not Before: Jan 1 18:44:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=20bea4c302a9eb82e2f1779de4a6d360e20484b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:49:58:de:01:e4:12:16:97:58:c0:39:94:a9:
c1:93:5f:0f:0a:0e:0a:d5:5b:30:5a:d1:05:56:96:
fc:33:59:b2:61:b0:fe:61:c7:76:78:23:9d:20:c1:
a3:12:49:e6:5b:f8:17:3a:b0:59:d2:14:af:79:c9:
98:78:e8:39:54:34:2c:2c:fe:84:62:70:9d:fc:34:
fb:7b:d7:58:a9:1a:bb:45:f4:20:a8:5b:49:fa:58:
97:81:bc:76:74:d3:41:15:68:f0:86:04:bb:48:ec:
e5:a8:ea:2f:74:d8:43:91:94:e6:0d:35:c8:8a:00:
88:d0:5f:4a:9d:d5:8a:05:b8:59:d4:bd:39:cf:57:
9c:9c:72:5e:5f:90:d1:47:bd:74:fd:dd:d1:9c:b4:
84:b9:1a:6b:2c:1c:8b:52:48:26:76:e5:f7:58:a8:
da:19:57:69:ae:3d:49:6c:b5:fc:e4:98:aa:d5:27:
5c:e8:df:93:f1:5a:62:e5:56:a7:86:9f:3f:88:84:
fa:43:53:0b:e4:40:0d:12:26:d4:49:63:a2:e0:78:
ad:9a:23:3b:5b:1b:50:f3:37:2f:0b:91:13:26:50:
cd:ef:85:c1:1d:d5:3d:bc:ac:b2:a0:f8:10:3c:81:
1e:ac:df:5f:9c:c1:5c:3a:b4:98:84:02:32:d9:12:
03:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:BE:A4:C3:02:A9:EB:82:E2:F1:77:9D:E4:A6:D3:60:E2:04:84:B5
X509v3 Authority Key Identifier:
keyid:FE:58:95:2D:39:39:35:F0:D3:BC:E8:14:FD:91:78:D0:46:93:AE:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_liVLTk5NfDTvOgU_ZF40EaTrrk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/IL6kwwKp64Li8Xed5KbTYOIEhLU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/b26aa8-ace7-4fa6-9e8e-5d48b65ce573/1/_liVLTk5NfDTvOgU_ZF40EaTrrk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.78.0/24
93.113.203.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:43:99:99:54:8d:33:41:ce:cc:18:01:d3:6d:72:44:a1:ef:
15:45:24:ca:cf:9a:49:87:c0:7e:92:3b:2d:47:d2:c3:05:f4:
78:96:cb:c9:2a:4c:59:f1:01:97:a7:1b:5f:ce:0a:9e:a3:b5:
fc:52:46:71:23:63:62:9b:6a:bb:c9:86:3a:11:d8:02:02:6d:
cc:93:6e:f5:4a:e9:6c:5d:73:47:c2:0f:c5:4b:bf:86:9a:56:
41:f6:2f:a9:53:cc:bd:45:3c:cb:cf:2d:47:42:19:61:6e:a6:
5e:29:61:b8:2e:a6:0f:4b:1c:43:62:69:6a:7a:e3:0c:b9:f8:
ff:c6:3f:7f:b3:ce:61:60:12:de:43:61:00:a1:17:32:3e:52:
45:b3:a6:38:5c:b2:6e:ee:7b:28:60:79:f9:c4:62:45:41:82:
e4:2b:60:c8:e5:a2:19:50:86:a7:c2:0e:83:c2:5c:b6:83:18:
74:da:f4:df:e1:42:de:e2:05:bf:3a:82:0b:f2:9d:36:cd:20:
fd:b7:2c:6d:09:4c:f2:89:c8:b7:14:fe:28:41:b3:bd:6d:fe:
56:9d:f1:20:ce:3a:63:1a:98:4b:e7:15:a4:11:f8:31:ff:b8:
37:11:4f:6e:3a:d3:d9:8e:39:5b:fc:90:5d:9f:43:b4:41:b1:
ff:54:77:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:24:29 2024 by rpki-client on console-fra.rpki-client.org