Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/9lBa9ivD8Yzwn8_gEwdqgVIzhqk.roa
File: 9lBa9ivD8Yzwn8_gEwdqgVIzhqk.roa (raw, json)
Hash identifier: TPLvwX2K/Juob7e3O/wlscKAJb5gHomfzVqo8Ozou2g=
Subject key identifier: F6:50:5A:F6:2B:C3:F1:8C:F0:9F:CF:E0:13:07:6A:81:52:33:86:A9
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 0188943DB4E4483BDC87A7B575496F982ECA
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/9lBa9ivD8Yzwn8_gEwdqgVIzhqk.roa
Signing time: Wed 07 Jun 2023 05:04:11 +0000
ROA not before: Wed 07 Jun 2023 05:04:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 198497
IP address blocks: 85.153.178.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 04:30:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:94:3d:b4:e4:48:3b:dc:87:a7:b5:75:49:6f:98:2e:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Jun 7 05:04:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f6505af62bc3f18cf09fcfe013076a81523386a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:19:1d:e7:0f:09:bd:77:ac:53:33:d1:16:
73:d5:4e:94:6e:e2:c3:8b:38:54:34:91:4c:48:f9:
48:a9:7d:6c:27:9d:1a:6e:7c:d6:ab:11:ad:76:f6:
83:3e:7f:06:46:14:95:1e:2a:b9:01:e5:fb:e4:47:
24:e4:1e:22:00:d8:91:2f:d5:2f:fb:84:cb:41:b2:
30:5d:b5:d5:e5:8a:f7:de:78:4d:0e:74:c5:d0:a6:
40:d0:fc:e3:b5:56:c6:87:b6:f7:09:93:61:68:1a:
db:13:a0:4b:7a:fd:01:dd:08:26:44:8c:cd:4f:18:
f4:2a:09:52:62:3f:ba:97:60:91:a6:51:f8:77:ce:
bd:54:ec:f3:2b:96:4c:16:55:e3:38:85:c6:68:18:
78:bf:60:43:13:51:62:ec:9d:1f:8f:ce:87:ca:a4:
88:e6:ad:96:2e:74:65:06:57:e0:c4:41:05:a7:2d:
5a:f2:fb:ac:1f:8a:48:af:25:18:48:f8:08:c1:82:
02:e0:c9:04:6d:63:c8:57:35:e3:70:a5:6c:9e:56:
cb:a8:8a:8a:ed:3b:4b:92:33:ab:39:da:20:c7:3e:
e5:37:66:c1:8e:b5:2f:e9:02:7e:4b:9e:71:b2:61:
7c:6f:de:ef:46:7e:af:da:d9:10:3d:2b:33:26:5e:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:50:5A:F6:2B:C3:F1:8C:F0:9F:CF:E0:13:07:6A:81:52:33:86:A9
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/9lBa9ivD8Yzwn8_gEwdqgVIzhqk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.178.0/24
Signature Algorithm: sha256WithRSAEncryption
08:f1:08:be:d0:44:5f:46:4a:98:42:57:38:6b:f7:8b:b3:3d:
4d:70:50:13:b0:1e:68:2a:48:9f:31:88:0b:52:48:d8:2b:05:
f1:90:ef:de:bd:f0:6d:b5:db:ef:79:98:02:72:f0:f3:2c:35:
37:c2:b9:4d:e8:92:c4:a2:59:62:a0:e3:97:25:63:8d:73:1e:
f4:59:93:f5:69:22:4e:a6:52:13:8d:69:46:f1:a5:1a:7a:2c:
de:f0:43:75:46:92:00:47:69:31:e1:dc:7d:67:e6:71:3d:e2:
c8:f2:54:aa:e2:01:e3:98:9e:8b:2b:3f:84:1c:8a:ef:25:13:
8c:7f:2e:1a:3c:90:cf:9a:3e:42:c4:3e:f4:96:61:72:12:fc:
ed:80:42:a2:13:ec:fb:92:45:ac:6c:35:b2:55:7d:9a:c8:d8:
f0:36:bd:5d:30:dc:14:e8:96:a6:44:02:7a:82:b7:92:33:8d:
e1:de:30:80:99:0a:5a:54:32:ab:6b:38:08:ce:8f:4a:ca:89:
87:e6:ae:8c:94:8e:79:ce:78:8e:7a:7f:cd:4f:ff:a5:01:d0:
ca:ef:88:ac:b9:75:7b:e1:b1:4e:74:9f:9a:34:e1:26:65:71:
76:3d:cd:b2:db:d3:99:cb:5c:24:ae:ef:6e:4e:74:56:d5:18:
ee:d2:54:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org