Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/np3BhtJtMMKdvy-oVEfyEuL_zzc.roa
File: np3BhtJtMMKdvy-oVEfyEuL_zzc.roa (raw, json)
Hash identifier: ouclvKCAfUoD4b87JQXSlR+LFFvSPH07uAUESbi9osg=
Subject key identifier: 9E:9D:C1:86:D2:6D:30:C2:9D:BF:2F:A8:54:47:F2:12:E2:FF:CF:37
Certificate issuer: /CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Certificate serial: 01856EC1FA15F789BCAA011F8FB868D3C181
Authority key identifier: AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/np3BhtJtMMKdvy-oVEfyEuL_zzc.roa
Signing time: Sun 01 Jan 2023 19:14:44 +0000
ROA not before: Sun 01 Jan 2023 19:14:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24982
IP address blocks: 85.112.68.0/24 maxlen: 24
5.57.2.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:c1:fa:15:f7:89:bc:aa:01:1f:8f:b8:68:d3:c1:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aecd64c97837d7bfac06637dd952bdede0c25d85
Validity
Not Before: Jan 1 19:14:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9e9dc186d26d30c29dbf2fa85447f212e2ffcf37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:96:6f:61:58:f7:3c:64:68:fe:cc:17:31:44:
46:a5:03:45:f4:ef:36:95:75:4d:6f:23:4e:d1:20:
84:28:58:f0:e6:6d:a0:d6:41:7a:dc:75:e5:c4:ab:
2d:cc:53:e4:3b:a0:8c:57:0b:b7:4f:5f:11:54:65:
f4:db:89:ee:5c:72:7f:56:8b:a0:1c:74:58:1d:5d:
39:c7:7d:f0:65:6e:64:6d:17:c9:c6:64:78:d9:79:
fc:d3:9a:1c:59:2e:8e:c9:cf:b8:85:f2:31:3a:f7:
1c:68:de:b5:a5:ba:6a:2e:8e:da:a9:75:66:dd:63:
1c:de:fa:0b:73:f9:5e:ec:c4:17:31:18:42:b5:7b:
b9:df:ec:05:25:53:10:fd:e3:f4:b1:ad:ed:22:37:
cd:76:7f:c8:a1:b6:00:35:87:05:84:1a:61:a5:3d:
ad:f9:43:c3:17:63:c9:82:ed:3e:69:fc:cb:e1:e2:
7e:1b:be:52:2c:cb:f8:6b:aa:7d:c6:05:b9:77:b8:
6c:0f:ae:ec:5e:a9:03:09:80:48:32:f3:73:4b:92:
e4:c3:9b:82:3d:ba:48:3e:d6:f4:da:d4:c3:40:1a:
1f:6c:1e:10:2a:19:54:c0:a4:93:88:f1:03:49:b0:
18:31:3e:e0:80:25:a1:86:6b:ad:3d:17:4f:f5:63:
d4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9D:C1:86:D2:6D:30:C2:9D:BF:2F:A8:54:47:F2:12:E2:FF:CF:37
X509v3 Authority Key Identifier:
keyid:AE:CD:64:C9:78:37:D7:BF:AC:06:63:7D:D9:52:BD:ED:E0:C2:5D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rs1kyXg317-sBmN92VK97eDCXYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/np3BhtJtMMKdvy-oVEfyEuL_zzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/592d4f-d71e-4e8b-a632-1ecde1791511/1/rs1kyXg317-sBmN92VK97eDCXYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.2.0/24
85.112.68.0/24
Signature Algorithm: sha256WithRSAEncryption
61:4d:5c:36:4f:e6:95:8e:7c:f5:85:a1:1b:38:59:e5:d1:e5:
3e:fa:db:7b:c9:16:8d:a3:01:a0:69:cf:46:48:6b:6b:16:02:
14:3f:4a:82:7a:f0:60:c1:7c:86:08:40:53:f7:35:46:7d:7e:
6b:44:99:5c:aa:a3:4b:25:bc:a7:16:9c:b1:17:8d:f9:42:11:
6c:54:fa:51:5f:8e:56:e0:f7:7e:c4:2b:e5:1b:67:e4:29:e6:
dd:f5:15:f8:a6:3b:bc:a9:20:d3:62:7c:96:2b:5f:dc:87:e0:
2a:55:09:8f:38:01:cc:c9:68:88:a0:18:32:33:ae:b2:c5:77:
8d:f4:a8:0f:30:a7:57:80:1c:b2:24:64:25:74:34:f2:b6:e6:
45:26:95:b1:ef:7c:5b:72:ad:e0:76:08:46:ac:3c:db:03:76:
13:eb:86:02:6c:12:26:ed:ca:b9:ba:3c:13:92:f6:fd:8a:47:
3e:ea:21:a3:d6:2b:ea:d0:af:0f:5a:b6:6a:a0:d0:32:56:f7:
29:16:e6:62:8d:a8:2c:5e:f7:83:0a:72:a0:62:6a:e7:b7:e3:
ea:c3:bb:9c:5b:42:65:bf:36:06:2d:33:88:fc:5b:c6:d1:90:
97:72:49:23:e4:52:ce:fe:98:a0:da:41:69:e3:4f:81:2a:6c:
09:b6:34:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:08:24 2024 by rpki-client on console-ams.rpki-client.org