Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/FnI0_ZVj94jsR4tSZbhMO11IqIc.roa
File: FnI0_ZVj94jsR4tSZbhMO11IqIc.roa (raw, json)
Hash identifier: jM5sHBcXF06ZYk2WwFTssC7vfHjIMmVtQqlZKKBauKE=
Subject key identifier: 16:72:34:FD:95:63:F7:88:EC:47:8B:52:65:B8:4C:3B:5D:48:A8:87
Certificate issuer: /CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Certificate serial: 01856F66EB1D9DDF09B216480EF64608B6F4
Authority key identifier: 13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/FnI0_ZVj94jsR4tSZbhMO11IqIc.roa
Signing time: Sun 01 Jan 2023 22:14:53 +0000
ROA not before: Sun 01 Jan 2023 22:14:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210095
IP address blocks: 85.31.42.0/24 maxlen: 24
85.31.41.0/24 maxlen: 24
85.31.40.0/24 maxlen: 24
85.31.43.0/24 maxlen: 24
2a0d:da40::/29 maxlen: 29
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:66:eb:1d:9d:df:09:b2:16:48:0e:f6:46:08:b6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13b4f6b90167b71bd663fa0391e038a0155bb939
Validity
Not Before: Jan 1 22:14:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=167234fd9563f788ec478b5265b84c3b5d48a887
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:72:2e:98:84:5d:55:71:d4:04:31:d2:46:0c:
78:f9:d9:6d:32:24:57:da:2b:82:d3:e8:26:fb:59:
a0:ff:7f:34:a5:21:08:84:f0:a7:42:1a:e2:ad:7a:
53:d3:c3:25:3e:0c:c7:5f:20:9b:40:b3:55:bb:f8:
21:08:b4:ad:e0:1c:97:47:f4:78:35:f3:6f:9b:47:
a4:d9:6c:f4:9a:69:98:15:07:43:12:2f:cd:27:e9:
71:0b:19:44:f2:09:45:8d:bf:6d:66:87:71:9c:7f:
f6:f7:62:cf:8f:19:7d:a3:54:2f:75:0a:80:ff:af:
19:6b:50:da:5a:97:11:b6:c2:37:48:20:71:a8:19:
ab:f1:6b:26:3c:7e:ef:ae:6a:2a:eb:f2:47:41:ef:
49:d7:35:63:21:b1:3f:a4:97:0e:12:5e:9c:31:95:
6f:3a:ad:43:ce:90:0c:9c:a4:de:10:dd:4b:ed:60:
c8:c9:ea:cc:ea:5f:c9:48:c7:e5:cd:d4:68:1b:3b:
72:b9:d5:c7:21:44:22:3e:2c:66:29:f4:4c:f1:c3:
b7:a1:8f:03:2a:8a:18:db:5f:ac:19:73:10:54:04:
74:4b:9e:83:15:2b:5e:3e:40:ae:06:c6:35:5d:72:
5c:de:41:a9:73:de:fd:5f:43:3d:a5:a5:53:5f:a6:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:72:34:FD:95:63:F7:88:EC:47:8B:52:65:B8:4C:3B:5D:48:A8:87
X509v3 Authority Key Identifier:
keyid:13:B4:F6:B9:01:67:B7:1B:D6:63:FA:03:91:E0:38:A0:15:5B:B9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E7T2uQFntxvWY_oDkeA4oBVbuTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/FnI0_ZVj94jsR4tSZbhMO11IqIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/9e884e-17e4-4271-ac89-cb3fa407e0f4/1/E7T2uQFntxvWY_oDkeA4oBVbuTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.31.40.0/22
IPv6:
2a0d:da40::/29
Signature Algorithm: sha256WithRSAEncryption
2f:cc:ed:a8:55:fe:56:6b:52:df:50:d8:26:93:6b:5e:68:f6:
3f:9b:ba:81:74:d3:5b:cb:df:cc:28:7d:08:2b:3b:42:b4:05:
5c:bd:95:de:4d:5a:9a:e9:73:82:ed:d4:bc:f5:76:cd:12:af:
a3:32:87:6f:1f:1c:59:4f:46:85:5d:95:9e:e9:cb:da:4d:a1:
5b:8a:5b:8f:bb:fc:db:bc:81:56:4f:5b:c6:d3:9a:52:09:a4:
46:97:d7:56:c0:c4:c2:15:4c:ae:b4:7e:a7:6f:df:f4:85:a5:
7c:0a:53:57:bb:7d:2b:4c:07:8d:0c:50:70:9e:b8:49:3b:a8:
76:85:b7:21:88:17:ec:ba:8f:ab:70:cf:f2:22:6a:e3:c5:7a:
00:6c:cf:22:a0:34:60:22:e8:1b:93:c7:97:bf:7c:63:2f:3d:
ce:95:1e:08:71:ad:7c:e1:7c:7b:cd:b0:bd:71:68:b8:4c:49:
35:9e:48:bd:29:68:a9:5b:e7:6c:a7:ab:64:ec:ba:56:64:47:
94:64:e5:38:99:4e:d8:0c:c9:d6:b0:88:72:bc:70:88:a4:b7:
58:07:63:b9:bc:4f:c7:2d:45:18:c6:b0:b4:c7:b2:57:ea:aa:
86:6c:b0:0e:2d:ea:0a:61:b6:c8:80:98:84:65:01:a3:7c:1e:
3a:8b:0a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 14:36:17 2024 by rpki-client on console-fra.rpki-client.org