Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4ePmQHkQRQ93vgdVdgpw8kszgp8.roa
File: 4ePmQHkQRQ93vgdVdgpw8kszgp8.roa (raw, json)
Hash identifier: TkLsZsaEvaB3xjlxQf97tktPG6K8QH42o5uK1xl1LHY=
Subject key identifier: E1:E3:E6:40:79:10:45:0F:77:BE:07:55:76:0A:70:F2:4B:33:82:9F
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 01856F9DD0023460D7FC325BDD75DC7C05C3
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4ePmQHkQRQ93vgdVdgpw8kszgp8.roa
Signing time: Sun 01 Jan 2023 23:14:51 +0000
ROA not before: Sun 01 Jan 2023 23:14:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 206192
IP address blocks: 85.153.155.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:9d:d0:02:34:60:d7:fc:32:5b:dd:75:dc:7c:05:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jan 1 23:14:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e1e3e6407910450f77be0755760a70f24b33829f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4d:bf:63:76:a5:ba:85:4d:fb:b6:1c:86:ce:
d4:a5:98:52:29:32:17:18:19:a3:14:81:b8:bf:e4:
68:01:1c:ca:2f:62:90:4a:b4:30:04:34:9f:91:4c:
f9:13:79:6e:42:f3:79:01:da:04:06:3d:f1:5b:d6:
8f:3c:17:94:96:e5:ea:be:fd:a3:68:60:be:7b:3b:
98:45:c1:50:2e:47:ff:fc:16:85:50:b3:6d:34:3c:
a6:2d:02:5c:26:78:6a:c4:39:82:4f:cf:e0:77:23:
fd:47:4d:99:6c:21:aa:d5:5c:79:1d:f3:70:25:08:
03:20:9a:ed:d3:30:4a:b6:ae:b7:b6:e0:96:03:e1:
5d:1a:6d:76:b7:9a:d1:6f:3b:bf:7a:68:61:d2:fc:
3a:93:50:3f:14:9c:d0:bf:41:50:66:00:8c:42:4b:
31:12:ea:26:b9:3a:1f:c7:62:d5:a3:04:65:dc:c0:
09:5e:36:59:d2:08:59:46:75:03:e7:28:91:3b:fb:
4a:4d:86:90:ec:51:e5:7a:5e:a2:70:79:ff:27:7c:
48:cc:95:ce:87:f1:c9:c4:dd:57:b5:cf:eb:51:78:
bd:ed:66:0c:8f:e3:0a:67:f1:41:6d:0a:65:b6:34:
e0:b4:f5:20:bf:5e:b8:7d:5b:82:95:8f:54:f1:56:
0f:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:E3:E6:40:79:10:45:0F:77:BE:07:55:76:0A:70:F2:4B:33:82:9F
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/4ePmQHkQRQ93vgdVdgpw8kszgp8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.155.0/24
Signature Algorithm: sha256WithRSAEncryption
74:4c:fe:61:2c:a1:59:d7:1c:63:9a:e7:e2:88:df:dd:07:ee:
e6:72:34:f3:d2:31:06:c4:f4:30:37:77:88:09:1e:33:ce:2f:
4f:25:43:54:75:0a:5c:63:3f:c7:8b:1b:df:6c:28:6b:98:56:
b5:96:8a:d1:70:b7:eb:2b:5d:24:bf:4d:d8:55:d0:cc:95:2b:
f4:ce:1c:4f:fd:cb:b6:b0:b5:19:d6:d4:b7:b5:9d:0b:d1:bf:
2c:91:11:ea:90:a2:ad:8a:49:fb:d1:59:db:4d:1a:9c:8d:41:
27:c6:9e:8e:6d:34:48:61:9a:cc:5a:dd:b1:09:e8:6d:aa:54:
91:35:a4:6c:2b:ed:44:2f:28:fc:69:85:47:03:d8:0e:91:b3:
1d:8c:d5:4c:78:d1:8e:9b:0c:f0:db:44:98:fc:e8:6a:ca:b5:
f8:08:40:9b:30:46:bd:bc:ac:f2:ac:1c:2c:c6:ab:dd:23:4d:
f4:8d:ab:f6:01:6a:b6:5e:90:e6:82:19:68:3d:c7:b3:94:81:
44:6d:e4:dc:26:86:36:85:04:0f:27:e7:f5:ff:ba:f2:43:b1:
81:57:98:4a:31:0e:c0:5f:26:05:5e:18:05:aa:27:df:63:6f:
6d:1d:b3:68:7c:0e:e0:93:de:95:95:b7:27:cb:97:ba:bb:07:
60:e8:dc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org