Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzN7Y5MaHc8Y8kp7zXE9PbKFLlw.roa
File: JzN7Y5MaHc8Y8kp7zXE9PbKFLlw.roa (raw, json)
Hash identifier: j1IhLuP7kTLbfBrV3TBstSv1JTv33IKlzw2Sn0/bqHs=
Subject key identifier: 27:33:7B:63:93:1A:1D:CF:18:F2:4A:7B:CD:71:3D:3D:B2:85:2E:5C
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 018FD92B5C1F2B4062B2FE9C739913E7CEC9
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzN7Y5MaHc8Y8kp7zXE9PbKFLlw.roa
Signing time: Sun 02 Jun 2024 13:37:28 +0000
ROA not before: Sun 02 Jun 2024 13:37:28 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214966
IP address blocks: 85.202.203.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 05 Jun 2024 06:44:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:d9:2b:5c:1f:2b:40:62:b2:fe:9c:73:99:13:e7:ce:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Jun 2 13:37:28 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=27337b63931a1dcf18f24a7bcd713d3db2852e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:67:42:98:f5:d7:9d:f8:a5:4e:dc:85:5a:
be:eb:ff:3a:2a:e9:42:4c:37:16:8e:c4:dd:a8:84:
83:29:4e:b9:96:3a:19:4c:a1:a3:31:6f:76:94:28:
db:dd:1b:26:98:53:16:da:83:3c:0b:5e:bd:3a:16:
a3:23:7c:99:ab:17:4a:11:89:a8:bb:41:70:eb:53:
69:49:dd:bf:f7:70:0e:68:fb:90:40:1a:bf:e2:7b:
dd:bc:77:4f:d0:ad:a3:de:23:8a:57:13:43:68:ff:
52:ac:44:47:b8:e2:03:db:96:96:03:6d:11:91:09:
f2:76:ae:1c:73:af:69:a2:db:01:f9:48:6e:2c:22:
b6:ae:7f:1d:b3:11:1f:39:44:31:43:f1:21:f4:8b:
bf:93:b6:e8:7c:6d:c6:f3:8d:f5:37:50:b5:d8:04:
01:07:10:e0:95:6d:d0:dd:aa:c1:6e:d5:0f:eb:fc:
28:11:c1:ed:1d:23:45:38:5f:1a:5d:77:fc:f9:d1:
1e:12:de:d7:ea:3b:f8:c4:00:35:3c:b2:31:7d:8b:
c6:7b:bc:7d:b7:47:e8:a2:26:9a:7c:b9:cb:23:b3:
40:95:13:75:dd:a0:44:89:2d:64:be:25:24:3a:49:
cb:50:75:4e:2c:5a:fb:e4:57:70:5d:b2:82:e6:83:
0e:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:33:7B:63:93:1A:1D:CF:18:F2:4A:7B:CD:71:3D:3D:B2:85:2E:5C
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/JzN7Y5MaHc8Y8kp7zXE9PbKFLlw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.203.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3e:9c:36:56:54:15:ed:0d:b7:ce:f8:86:f9:67:7d:89:aa:
58:77:26:20:b7:27:f9:b7:86:7a:c3:80:c0:0f:e5:20:10:af:
e8:54:70:c3:73:7c:5a:f0:02:de:2d:43:af:2e:d5:a2:94:ac:
c0:37:82:58:f2:5a:82:cf:bd:53:a7:97:70:44:b9:be:20:62:
f2:4b:74:43:c2:00:6a:d0:27:1f:d6:ae:9c:bf:f1:d2:76:54:
c4:80:b8:a5:68:b8:97:2f:5e:81:35:b0:dd:dc:e8:1d:8c:1c:
44:01:20:f4:e8:8d:40:ad:f6:d5:54:1a:74:cb:b0:69:6b:10:
13:d8:52:ee:c7:a4:a6:b2:47:d9:19:1a:0e:72:c2:4f:d1:b8:
79:78:d9:3f:b9:ab:a9:5a:51:8c:80:da:cf:bf:b3:91:d4:40:
72:cc:bf:5e:35:fb:6d:d7:b1:89:4a:50:de:03:f8:e3:70:98:
b7:06:1d:dc:84:2f:84:c0:a1:f4:1e:08:2c:dd:02:46:ca:35:
5e:2b:26:b6:a6:8b:ab:cb:00:f3:1f:d7:7f:ad:77:27:0e:28:
40:23:7a:3b:87:93:a4:05:9b:39:fb:4a:72:5d:4c:71:41:97:
be:15:c8:1a:f5:f3:8a:4f:a5:e7:64:31:63:37:df:2f:0e:10:
55:8d:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:29 2024 by rpki-client on console-fra.rpki-client.org