Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/C0R0B-oH3MFfcaJu9O21uKSADdg.roa
File: C0R0B-oH3MFfcaJu9O21uKSADdg.roa (raw, json)
Hash identifier: x3ymnro+NZKKun9nhoB+X27EvsWUA7Z2LKwtacxrveA=
Subject key identifier: 0B:44:74:07:EA:07:DC:C1:5F:71:A2:6E:F4:ED:B5:B8:A4:80:0D:D8
Certificate issuer: /CN=8f3818554a51808eefb829ec7465a3222f270123
Certificate serial: 01856C53CA43C7BC465F60E4D41F2E4AF4ED
Authority key identifier: 8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/C0R0B-oH3MFfcaJu9O21uKSADdg.roa
Signing time: Sun 01 Jan 2023 07:55:08 +0000
ROA not before: Sun 01 Jan 2023 07:55:08 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 28809
IP address blocks: 85.91.104.0/24 maxlen: 24
85.91.115.0/24 maxlen: 24
81.26.157.0/24 maxlen: 24
85.91.120.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 25 Apr 2023 09:47:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:53:ca:43:c7:bc:46:5f:60:e4:d4:1f:2e:4a:f4:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f3818554a51808eefb829ec7465a3222f270123
Validity
Not Before: Jan 1 07:55:08 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=0b447407ea07dcc15f71a26ef4edb5b8a4800dd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:75:41:14:c3:08:e4:f4:1d:13:55:d1:c5:a2:
58:d2:b1:2e:4e:46:fe:51:4f:a9:ad:9e:11:a7:b6:
2c:46:89:fe:cf:ed:e4:ce:92:ef:99:7f:aa:83:93:
09:3e:de:12:76:dd:8e:08:cd:e5:99:63:c4:64:2a:
f6:9c:bb:5a:b7:55:45:66:8f:d5:ef:99:69:4e:49:
0c:e8:d2:6b:b9:45:4b:2f:59:a2:e4:14:a4:66:f7:
09:6e:65:0f:c7:a7:c7:a3:17:98:61:ad:e6:49:69:
4a:3d:1e:d6:b4:29:b5:a9:02:5c:c9:21:79:50:20:
37:59:85:6f:dc:c5:c7:ab:57:3e:43:70:10:ea:85:
2e:fd:5a:dd:95:f4:bd:93:fe:99:08:7e:40:1f:54:
72:ac:4a:10:a5:38:07:6c:fd:48:1c:d2:93:f2:ef:
27:6e:53:de:03:cd:ab:eb:82:c1:1c:f0:a2:8f:ca:
7a:39:f5:d0:78:8c:b6:23:b7:67:10:d5:35:d6:ca:
03:6a:30:e3:fa:ac:00:98:b1:ae:0a:e2:38:bc:6d:
93:53:fe:0c:5a:44:a8:82:ac:3e:df:ad:1f:1a:65:
5b:1e:19:56:55:10:b5:22:07:3f:82:96:01:ec:09:
26:7a:49:5d:e7:b6:ea:8c:75:cc:8e:91:0f:c8:0b:
90:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:44:74:07:EA:07:DC:C1:5F:71:A2:6E:F4:ED:B5:B8:A4:80:0D:D8
X509v3 Authority Key Identifier:
keyid:8F:38:18:55:4A:51:80:8E:EF:B8:29:EC:74:65:A3:22:2F:27:01:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jzgYVUpRgI7vuCnsdGWjIi8nASM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/C0R0B-oH3MFfcaJu9O21uKSADdg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/09dba4-1c93-49d6-8888-bfb4ba30e45a/1/jzgYVUpRgI7vuCnsdGWjIi8nASM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.26.157.0/24
85.91.104.0/24
85.91.115.0/24
85.91.120.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:fc:eb:0c:28:3a:0b:a4:0b:5c:ad:72:e5:e2:56:03:53:c2:
7a:c1:64:42:7e:09:b4:00:b2:64:69:3b:23:56:2e:46:7e:46:
aa:9a:e4:f8:0c:53:8b:49:c0:3d:58:fc:a7:29:f5:5c:cd:6a:
d7:03:f1:f2:72:3d:84:90:c6:9a:57:d4:dd:af:e6:dd:f4:49:
df:1e:19:cc:69:35:93:0e:7b:38:56:4f:f2:06:02:af:0c:09:
d8:31:1d:0c:0c:9c:96:15:78:89:de:d0:38:48:85:c4:f3:bf:
9a:91:8e:bd:da:87:29:c8:15:cc:d4:f9:7f:11:15:f8:ae:de:
10:9a:09:32:34:a2:2d:78:ab:c2:a8:73:b1:bf:16:31:7d:b9:
e4:f7:1f:4a:0f:c7:bf:17:67:bf:0f:31:64:e1:7b:98:dc:a9:
0e:e4:c6:a5:c5:16:1b:06:71:d9:2a:fd:0c:96:e2:b0:43:fb:
3c:86:fe:40:2b:53:f9:a6:c1:2c:81:ea:4e:fa:a6:d4:13:4a:
6c:db:81:dc:0d:e4:e8:72:fc:a7:9e:2c:25:96:61:e2:32:d9:
94:15:18:77:22:3b:70:3c:e1:86:ad:21:e7:0e:93:4c:b6:9e:
cf:49:07:b2:40:6c:6a:17:9f:8a:3c:fd:35:9d:b7:f3:e8:2e:
08:40:44:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:36 2024 by rpki-client on console-fra.rpki-client.org