Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/JxBYxecv0R7XyVtKNdOZMU1q0kQ.roa
File: JxBYxecv0R7XyVtKNdOZMU1q0kQ.roa (raw, json)
Hash identifier: JCoc4ZclKFjq5jAAMWwMjmZ2/1pS0nFhCcdV0zeHXSA=
Subject key identifier: 27:10:58:C5:E7:2F:D1:1E:D7:C9:5B:4A:35:D3:99:31:4D:6A:D2:44
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 0188BD674CF57DB4D3CED065EF538ADDA7B5
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/JxBYxecv0R7XyVtKNdOZMU1q0kQ.roa
Signing time: Thu 15 Jun 2023 04:54:03 +0000
ROA not before: Thu 15 Jun 2023 04:54:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.46.0/24 maxlen: 24
85.203.22.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:bd:67:4c:f5:7d:b4:d3:ce:d0:65:ef:53:8a:dd:a7:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jun 15 04:54:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=271058c5e72fd11ed7c95b4a35d399314d6ad244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:f2:29:d9:26:7f:d4:54:2a:a2:75:49:ca:
e5:8f:b5:63:0e:2e:19:4f:fc:bb:de:4b:5a:41:0a:
a0:6e:0c:4d:95:3c:1b:ca:18:47:a2:39:5f:47:e8:
4e:a0:23:81:d4:23:64:54:e5:83:92:94:d6:88:02:
27:5d:23:e1:8e:39:4a:47:2d:af:9f:88:81:aa:9e:
b9:87:cc:81:56:72:03:4d:a7:94:6e:d4:12:39:19:
bb:81:06:b3:3f:52:50:be:33:7f:c1:e0:0b:ba:46:
6b:8f:05:d7:cd:0e:fd:26:9d:6e:78:5b:b5:90:80:
41:f4:1a:2c:93:a8:c1:44:01:f5:ba:49:cd:00:d1:
77:97:db:44:ff:fc:55:67:f2:10:92:43:71:df:4b:
a0:b9:e7:04:54:06:e0:ab:a2:19:54:1b:2d:fe:2e:
12:8b:93:90:b4:5d:c5:c3:ff:b2:56:0e:cf:08:87:
4e:0d:00:37:3a:e9:d1:12:10:8a:c7:b8:b3:2c:7b:
44:f5:af:28:af:3b:30:78:bf:60:bb:94:1e:f7:c9:
df:7c:78:8c:c9:5b:eb:fa:81:0e:63:f0:be:c8:8e:
40:cd:6e:a1:b1:79:91:08:d4:49:a9:c9:b6:a3:bd:
fd:5d:30:3a:b2:65:da:b4:36:a6:c0:62:c4:ba:3b:
b5:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:10:58:C5:E7:2F:D1:1E:D7:C9:5B:4A:35:D3:99:31:4D:6A:D2:44
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/JxBYxecv0R7XyVtKNdOZMU1q0kQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
85.203.46.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:b1:98:5b:07:a7:a4:1f:0f:d3:f1:31:79:28:60:73:96:6a:
ce:f1:17:57:ef:dc:91:7f:9d:74:2c:c5:22:f2:c0:fd:87:80:
b4:cf:c3:1f:36:57:5b:8b:94:71:d9:f8:81:a6:61:8b:1c:a7:
58:60:b4:86:69:35:d7:42:ae:7f:8a:36:ee:cb:0e:f0:d8:54:
9c:cd:b9:84:d0:07:4f:7d:de:b4:a3:0f:1d:f2:79:55:6f:f6:
ab:eb:b2:86:91:f5:c1:f0:23:f2:db:c6:c5:20:51:d5:26:79:
d7:25:7c:0b:1c:41:30:64:28:57:c0:e6:cb:06:d1:e7:15:10:
83:19:4f:0f:44:4b:2d:29:9a:c6:04:86:3f:b1:d0:5b:c1:bf:
1e:35:4c:52:aa:31:d4:18:d7:c1:c7:8b:0d:7f:6c:27:e5:d4:
f2:20:98:d6:fa:41:63:84:8d:05:1e:42:e7:68:9c:9f:7d:4c:
7e:a5:76:53:3b:62:20:5d:b0:12:57:82:ff:61:43:e6:44:48:
54:1d:ec:d6:09:0b:2f:a6:67:03:26:c4:f3:be:17:62:db:d1:
b8:ca:54:5b:31:fc:e8:37:0b:03:23:5d:c5:4a:9c:66:95:61:
cc:34:4e:d1:f0:cf:f2:3b:c4:89:c9:50:d0:42:4f:5b:8c:f8:
2e:d5:5e:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 5 05:16:46 2023 by rpki-client on console-fra.rpki-client.org