Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/P-jF-OgFNrmRkhkCQ5lC6Gc8Vjw.roa
File: P-jF-OgFNrmRkhkCQ5lC6Gc8Vjw.roa (raw, json)
Hash identifier: l3ylXQ7/14WmIW0AjrS1pbijxIYwRP43ogy+PWuc6hY=
Subject key identifier: 3F:E8:C5:F8:E8:05:36:B9:91:92:19:02:43:99:42:E8:67:3C:56:3C
Certificate issuer: /CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Certificate serial: 018571554864E66E1B2CF3AD1CFCA77C576D
Authority key identifier: 7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/P-jF-OgFNrmRkhkCQ5lC6Gc8Vjw.roa
Signing time: Mon 02 Jan 2023 07:14:52 +0000
ROA not before: Mon 02 Jan 2023 07:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43591
IP address blocks: 85.117.192.0/19 maxlen: 24
46.245.152.0/21 maxlen: 24
85.117.160.0/19 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 00:30:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:55:48:64:e6:6e:1b:2c:f3:ad:1c:fc:a7:7c:57:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b2a8ac3028b70911cb6111ffda3a2efe558862d
Validity
Not Before: Jan 2 07:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3fe8c5f8e80536b991921902439942e8673c563c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:21:58:54:db:92:f6:f4:13:01:59:a8:cd:98:
37:96:b3:65:a5:56:e9:3e:04:0d:e1:cf:e3:3b:b7:
89:42:e0:d6:93:a7:76:5f:56:57:b3:9c:ff:91:d0:
8a:7a:d9:ef:2e:87:96:33:82:7f:23:d8:d1:a1:54:
07:a8:5b:84:22:f8:17:58:f9:d3:72:1c:69:c1:24:
dd:30:ea:e9:81:ce:b6:c8:a2:4e:4f:b9:c4:cd:ad:
ee:b6:ae:af:3f:0d:82:80:a8:40:56:c1:15:cc:72:
51:92:c9:e9:d9:c3:47:00:6e:1b:4b:74:85:21:86:
02:8a:12:14:a6:23:e0:e9:e4:8e:49:f5:71:bb:4f:
b2:d7:a5:30:a2:5f:87:1c:9c:f8:60:d9:b9:e6:24:
3e:cb:f1:c4:e5:75:4c:cd:1a:38:09:5e:00:c6:e8:
c9:c3:28:06:58:d5:e4:13:4f:ca:a6:d7:56:03:51:
4d:02:75:51:98:ad:c4:b2:f9:1f:28:59:5c:e4:55:
3d:59:1a:33:64:5b:4d:68:4e:f8:42:00:87:d0:41:
73:d0:b6:11:f9:41:5c:2f:3e:35:5a:fc:8a:b9:19:
27:c3:0d:9c:d7:b9:50:dd:5f:14:af:56:7c:1c:34:
26:40:42:d8:65:46:e8:b5:e0:df:06:66:1b:db:0e:
aa:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E8:C5:F8:E8:05:36:B9:91:92:19:02:43:99:42:E8:67:3C:56:3C
X509v3 Authority Key Identifier:
keyid:7B:2A:8A:C3:02:8B:70:91:1C:B6:11:1F:FD:A3:A2:EF:E5:58:86:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eyqKwwKLcJEcthEf_aOi7-VYhi0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/P-jF-OgFNrmRkhkCQ5lC6Gc8Vjw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/867209-d35f-49c4-a6ea-858dd1b1617f/1/eyqKwwKLcJEcthEf_aOi7-VYhi0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.245.152.0/21
85.117.160.0-85.117.223.255
Signature Algorithm: sha256WithRSAEncryption
99:f3:f2:28:14:6f:36:10:6e:59:60:10:2f:ac:73:17:b8:4f:
a3:93:dd:89:b8:1e:1c:a5:f9:91:6d:45:ff:02:ba:50:cc:62:
c6:dc:25:84:f7:85:ae:06:e9:67:f6:78:09:6f:ca:2f:02:1c:
f1:d0:0e:66:38:85:65:37:d4:b4:28:ff:32:93:1e:96:fb:51:
a5:a1:c8:3b:da:5c:6d:91:a0:99:c3:74:2e:c5:f3:30:0f:2b:
1f:ec:8d:d4:c5:52:e7:53:1f:1f:d6:67:3e:03:3a:a6:c8:93:
15:55:1f:b1:b5:f5:f1:ae:b5:ea:63:cc:c3:b3:f5:10:28:a5:
58:b7:59:4c:da:04:0b:7c:05:1b:ad:99:83:89:d2:41:eb:c1:
06:2e:57:5f:64:09:74:41:c7:97:66:19:21:5c:51:8e:d1:3d:
31:fa:eb:93:c0:66:04:4e:3d:12:39:14:d0:11:3e:29:78:85:
a0:73:c9:ae:b8:3c:bd:55:fd:20:c1:ae:2e:14:81:ea:95:4a:
27:2d:32:2f:0e:73:3d:a1:e0:5d:4f:4e:30:f4:b4:29:aa:97:
2f:80:85:4a:64:1f:0f:08:0e:22:fb:a6:47:b4:e8:c3:54:35:
70:70:cc:c5:74:e2:b0:73:04:91:14:e5:44:7c:0d:22:53:8c:
b0:2e:e4:5b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:26:08 2024 by rpki-client on console-fra.rpki-client.org