Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rbsv3_YCzAwcaWLaafEoaewNmyg.roa
File: rbsv3_YCzAwcaWLaafEoaewNmyg.roa (raw, json)
Hash identifier: cUbHgl4o842aPUe2YiQxPRqL4FpWiqM0zdUU8AkEsV0=
Subject key identifier: AD:BB:2F:DF:F6:02:CC:0C:1C:69:62:DA:69:F1:28:69:EC:0D:9B:28
Certificate issuer: /CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Certificate serial: 018C40D64EA7BA1B111C3DF494C28A962641
Authority key identifier: AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rbsv3_YCzAwcaWLaafEoaewNmyg.roa
Signing time: Wed 06 Dec 2023 20:33:55 +0000
ROA not before: Wed 06 Dec 2023 20:33:55 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 48124
IP address blocks: 85.140.112.0/22 maxlen: 22
85.140.112.0/23 maxlen: 23
85.140.114.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:40:d6:4e:a7:ba:1b:11:1c:3d:f4:94:c2:8a:96:26:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefe1c859409ac5de7414c48f86739913be6b7e5
Validity
Not Before: Dec 6 20:33:55 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=adbb2fdff602cc0c1c6962da69f12869ec0d9b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4d:2e:f8:2a:78:1e:2f:5f:e2:79:45:d1:09:
69:2e:a3:b0:a2:b0:b9:b5:ab:7c:72:2f:87:74:9e:
90:62:1a:4a:75:9d:25:b6:87:28:43:87:d7:87:28:
5e:69:17:3e:d3:b1:9f:b9:bc:f8:e0:95:77:41:83:
9e:fb:3e:43:b7:3c:af:e6:e9:41:0f:48:9b:2c:03:
cf:9b:fd:3a:f7:a9:1b:fc:fb:95:71:a2:b0:2b:bf:
8e:2a:55:00:e5:7b:af:d8:b7:a6:a7:c5:c8:c9:ec:
1c:3a:1d:c7:ab:1c:52:61:d1:a8:07:cc:4b:78:60:
ae:2f:03:09:b8:c6:d8:f4:df:c9:13:0e:13:0c:47:
36:67:fd:eb:2b:22:91:5c:a2:67:7a:c9:97:08:a3:
7e:1a:16:9f:21:c8:be:94:ae:2c:0b:56:bd:3d:86:
6e:43:0a:20:d2:a3:e5:cf:6d:17:7e:2f:f7:e3:1b:
53:2d:e1:6d:bc:8b:12:e5:81:3a:be:d4:7e:0d:ff:
3b:20:62:9c:bd:cb:56:e7:9a:df:d4:ff:48:fd:10:
69:18:7e:3e:b9:83:ba:c1:28:d6:ab:df:1e:61:d5:
e4:62:05:5e:c6:b3:e3:50:5c:bd:0d:10:42:f9:42:
dd:56:b8:a4:11:bf:71:07:d0:87:60:b7:97:f9:dd:
a8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:BB:2F:DF:F6:02:CC:0C:1C:69:62:DA:69:F1:28:69:EC:0D:9B:28
X509v3 Authority Key Identifier:
keyid:AE:FE:1C:85:94:09:AC:5D:E7:41:4C:48:F8:67:39:91:3B:E6:B7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rv4chZQJrF3nQUxI-Gc5kTvmt-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rbsv3_YCzAwcaWLaafEoaewNmyg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/39/451f04-e3c9-44ea-a6a1-428458679ce4/1/rv4chZQJrF3nQUxI-Gc5kTvmt-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.140.112.0/22
Signature Algorithm: sha256WithRSAEncryption
37:b9:7e:6c:95:ea:a2:da:dd:8b:83:85:a9:b7:24:ee:03:f2:
97:03:43:1c:44:3a:7e:82:15:30:14:2c:85:2a:be:dd:ef:ec:
37:9a:72:21:f6:af:32:ec:68:f4:54:c6:5c:42:ed:e9:0a:45:
a5:bd:45:5f:1d:98:87:f1:97:3b:0b:72:ab:59:0c:21:aa:e5:
56:b2:fd:62:c3:1a:19:f5:7d:64:62:c2:e5:22:c2:e4:a8:37:
0a:5a:7c:43:17:3d:78:b4:b7:e9:12:11:a3:d3:6c:be:c6:57:
d9:59:10:2d:86:40:42:a9:9a:54:15:ee:e8:70:b1:d9:24:47:
aa:91:cb:2e:e6:45:eb:8c:d6:f7:e8:a8:f1:80:f5:41:11:3d:
49:a7:d8:e0:62:f1:f1:90:7f:ff:05:db:66:ba:2b:89:12:ea:
cc:79:8c:3f:5c:4a:5b:a4:ad:7a:6b:87:6f:33:ae:a5:f4:44:
4a:f7:ce:c3:a8:f2:84:51:9f:58:59:37:08:c2:dc:61:96:34:
5b:33:f9:a8:0f:50:c6:3d:23:5e:93:03:f4:c6:42:e8:ea:17:
c3:96:b4:e3:8b:c2:b7:f3:b3:4b:6e:d9:f4:a6:6d:d5:25:c7:
11:a9:c4:7f:7d:b4:eb:68:ff:83:95:06:54:e8:f3:e5:03:dd:
33:1a:02:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 23:29:41 2024 by rpki-client on console-ams.rpki-client.org