Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvF2U6G3V4OAlF2Xchggqdj5mj8.roa
File: nvF2U6G3V4OAlF2Xchggqdj5mj8.roa (raw, json)
Hash identifier: CXRHR/iafLz3t6rBD/dc/xAriG1oR3RCv7/68VBYUcQ=
Subject key identifier: 9E:F1:76:53:A1:B7:57:83:80:94:5D:97:72:18:20:A9:D8:F9:9A:3F
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 01856ED4DA6F86DAFFBDB889770EEFC89425
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvF2U6G3V4OAlF2Xchggqdj5mj8.roa
Signing time: Sun 01 Jan 2023 19:35:21 +0000
ROA not before: Sun 01 Jan 2023 19:35:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209087
IP address blocks: 179.189.212.0/22 maxlen: 22
185.227.92.0/22 maxlen: 22
85.8.137.0/24 maxlen: 24
85.8.136.0/24 maxlen: 24
85.8.136.0/23 maxlen: 23
85.8.136.0/22 maxlen: 22
85.8.139.0/24 maxlen: 24
85.8.138.0/23 maxlen: 23
85.8.138.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:d4:da:6f:86:da:ff:bd:b8:89:77:0e:ef:c8:94:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jan 1 19:35:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9ef17653a1b7578380945d97721820a9d8f99a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ac:63:ff:e3:d7:a2:3b:7f:fb:e9:79:6b:90:
3d:b9:37:81:cc:4c:73:31:48:3d:af:1b:1a:15:36:
3b:9a:10:49:75:1e:ab:06:96:98:ab:24:5b:0f:77:
b6:4d:cd:64:e3:f1:79:83:db:8b:69:64:8e:ee:1b:
ab:44:04:cf:80:92:be:a5:c2:4d:b3:8e:a7:50:e5:
fa:ed:73:83:ee:3c:91:8f:4a:c0:31:04:ac:2c:13:
0c:bf:05:99:fc:e6:f6:20:2a:cc:e6:87:90:03:0f:
36:70:d2:86:9c:a4:8c:a1:73:72:f3:3f:4e:c5:9f:
83:22:35:67:61:69:90:6c:f8:83:b4:81:92:64:06:
b7:d1:d4:8f:56:eb:63:29:f4:b1:ea:91:06:e9:8b:
23:dc:1a:c4:c6:67:eb:f6:8e:21:79:44:79:1c:d2:
a8:12:82:46:37:3f:92:25:78:11:5a:7c:62:36:90:
3a:e7:06:cb:30:99:1f:df:23:20:68:de:ca:43:54:
65:3a:23:7c:52:08:b7:c0:13:04:5a:c5:10:26:9f:
5c:f5:8d:06:57:f9:6c:d2:99:81:5c:c2:40:38:3b:
0f:74:83:5b:f4:22:1a:fb:6f:65:86:d3:19:d1:45:
f6:26:c5:2e:7a:75:90:8a:48:c9:c6:48:c9:3b:3f:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F1:76:53:A1:B7:57:83:80:94:5D:97:72:18:20:A9:D8:F9:9A:3F
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/nvF2U6G3V4OAlF2Xchggqdj5mj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.8.136.0/22
179.189.212.0/22
185.227.92.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:6c:2d:3b:52:fd:7d:78:f8:d4:e1:df:ad:43:eb:e2:49:a1:
6b:2a:fb:f8:70:ad:f3:72:c4:61:7f:cb:c2:14:1e:80:ea:38:
37:f5:c1:1c:26:47:30:fd:fb:e7:21:d5:03:04:8a:6d:d4:c0:
41:1e:11:56:57:e5:76:37:f8:fb:a3:9a:0f:3d:6c:96:26:cd:
d2:e4:74:da:25:cf:c7:20:c0:6e:30:e0:72:99:d0:83:4b:7f:
d5:6a:73:c9:e5:e5:98:5d:ba:7e:58:6b:c6:9a:68:75:03:a2:
68:26:16:9d:0c:25:01:29:c3:ad:28:b5:c9:78:25:13:55:55:
36:2b:20:b5:41:e3:7f:e8:59:ea:c9:47:28:9b:42:ea:b1:50:
b7:30:e1:10:8b:a5:e6:a6:e2:6f:47:c6:65:32:e5:05:3d:cd:
4a:fe:1f:5b:46:fc:d0:a9:cc:58:cf:39:3c:ba:06:5a:3e:13:
43:e3:25:44:48:24:e8:19:d3:af:14:2b:69:d7:76:d6:8e:b2:
f5:33:b7:b2:34:0f:5e:a8:d1:c5:79:e7:42:a3:e0:e6:40:f4:
ef:20:32:bf:3d:15:7d:ca:f8:a4:05:3b:9c:af:e9:b3:e7:9b:
36:63:d0:15:77:bd:5c:8e:f7:8b:c2:38:9c:e6:12:40:b7:4d:
5c:bd:f7:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:25:47 2024 by rpki-client on console-fra.rpki-client.org