Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/irdAWQonKmTLeis3ufKpQzcB4ss.roa
File: irdAWQonKmTLeis3ufKpQzcB4ss.roa (raw, json)
Hash identifier: XC3mqPJ/u7AAm1O4yQsLImRNHSXKchqvkVa+KvtkLjM=
Subject key identifier: 8A:B7:40:59:0A:27:2A:64:CB:7A:2B:37:B9:F2:A9:43:37:01:E2:CB
Certificate issuer: /CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Certificate serial: 018572CC9D28F23DB0F3F31C430C02722A20
Authority key identifier: D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/irdAWQonKmTLeis3ufKpQzcB4ss.roa
Signing time: Mon 02 Jan 2023 14:04:49 +0000
ROA not before: Mon 02 Jan 2023 14:04:49 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39855
IP address blocks: 85.203.9.0/24 maxlen: 24
85.203.16.0/24 maxlen: 24
85.203.25.0/24 maxlen: 24
85.203.38.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:cc:9d:28:f2:3d:b0:f3:f3:1c:43:0c:02:72:2a:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d45bdf6eec08370ae1f67e83f99b5ac1fe26872c
Validity
Not Before: Jan 2 14:04:49 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8ab740590a272a64cb7a2b37b9f2a9433701e2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:38:b4:26:e3:7c:00:b3:ef:00:dd:ab:f7:63:
e5:e8:7c:af:36:11:97:9b:cf:00:d7:b4:e9:37:bc:
c1:e9:85:fd:c7:e3:bb:e2:bb:a7:0b:06:0d:0e:af:
91:5a:f0:b6:0c:84:45:6a:6e:d9:71:97:14:f7:82:
ae:47:a8:52:4a:69:52:5a:c3:e7:db:8c:e4:d4:10:
e3:5b:8a:5e:29:7f:ba:61:43:c5:21:c3:07:81:da:
7c:13:f7:8d:dc:06:a8:30:b0:a6:86:fd:64:d5:9e:
4e:e9:b1:fa:1b:b8:51:47:ac:b1:f1:c5:00:a3:64:
c1:1b:28:e3:0e:6e:48:4d:a5:cf:e6:33:d4:b7:60:
f2:f0:fa:af:c6:73:22:44:9d:de:86:a5:fb:33:4a:
ad:9f:51:41:53:9f:6b:b4:96:9b:a3:d3:73:17:fe:
cf:5a:6e:d7:01:43:b1:30:09:6e:79:a3:c7:54:e7:
cc:9f:48:e1:e2:40:ad:c5:26:ce:e1:87:57:81:69:
80:4f:0f:58:a9:6e:16:44:86:c2:88:18:fb:03:cc:
cf:c7:fa:55:15:b1:04:89:4d:b9:7c:8a:2d:1c:6d:
0e:c0:35:e4:e5:b6:93:ed:ed:da:82:c2:01:4b:af:
11:a5:e7:aa:3f:ca:62:1b:72:a0:02:e1:98:0f:66:
73:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:B7:40:59:0A:27:2A:64:CB:7A:2B:37:B9:F2:A9:43:37:01:E2:CB
X509v3 Authority Key Identifier:
keyid:D4:5B:DF:6E:EC:08:37:0A:E1:F6:7E:83:F9:9B:5A:C1:FE:26:87:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1FvfbuwINwrh9n6D-Ztawf4mhyw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/irdAWQonKmTLeis3ufKpQzcB4ss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/e2dfff-8ba8-4bcf-ac31-98463859ecc1/1/1FvfbuwINwrh9n6D-Ztawf4mhyw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.9.0/24
85.203.16.0/24
85.203.25.0/24
85.203.38.0/24
Signature Algorithm: sha256WithRSAEncryption
40:29:1b:10:73:9a:ec:88:ec:0d:e4:a3:8a:8d:d4:44:e0:5a:
e9:30:d3:ee:46:15:9f:7f:5d:a2:60:43:1a:f9:38:2a:7a:26:
5b:60:46:ca:65:cc:f7:71:fa:48:88:a3:4b:cc:3e:eb:03:72:
bb:d4:33:09:97:bd:8d:49:27:29:62:f8:b3:69:8b:2d:46:1c:
05:de:b1:3b:ae:f1:1f:ee:28:d8:94:54:25:86:b1:b9:d3:22:
03:c9:ea:20:24:0d:0f:07:38:35:dd:97:ad:b1:34:a2:24:32:
87:8b:22:ac:00:04:84:c1:a2:37:44:92:9a:b5:dd:9c:30:84:
9d:d0:2c:82:c8:2c:32:23:47:3d:b6:e4:63:c8:47:04:28:eb:
94:73:0f:fb:2c:d9:69:2b:5d:18:b8:84:4c:8f:d3:e2:9a:7a:
b4:e1:3f:f8:cc:a2:ed:84:00:40:fe:70:2d:c3:c9:b9:c0:bd:
f5:c1:57:c3:52:46:50:88:08:ab:64:fc:ec:5c:7c:0f:9e:42:
78:cb:2e:d0:10:4b:09:c9:6c:3b:0a:15:1a:02:8e:f6:3b:55:
e5:10:d0:c8:a3:7f:d7:a9:72:e4:a5:b9:c7:d1:b1:2f:25:4a:
29:41:ea:75:7a:c4:89:ea:06:ad:ca:25:73:aa:76:42:7f:0e:
a2:fa:2c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:47:07 2023 by rpki-client on console-fra.rpki-client.org