Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eR52fIqWm0m_Df3HOM-i46oN8as.roa
File: eR52fIqWm0m_Df3HOM-i46oN8as.roa (raw, json)
Hash identifier: 6BmvsN2VKFiXmwghW47PcHN5Z+odtRi5ZvVdGVR3DSE=
Subject key identifier: 79:1E:76:7C:8A:96:9B:49:BF:0D:FD:C7:38:CF:A2:E3:AA:0D:F1:AB
Certificate issuer: /CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Certificate serial: 018AADC20E0B26C68662DCC6A1D6D2155B20
Authority key identifier: 8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eR52fIqWm0m_Df3HOM-i46oN8as.roa
Signing time: Tue 19 Sep 2023 14:04:50 +0000
ROA not before: Tue 19 Sep 2023 14:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 197428
IP address blocks: 85.153.185.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 12:44:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ad:c2:0e:0b:26:c6:86:62:dc:c6:a1:d6:d2:15:5b:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d59c4323f767ce4ffc85daad208b90c04fbd3e9
Validity
Not Before: Sep 19 14:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=791e767c8a969b49bf0dfdc738cfa2e3aa0df1ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:05:ac:af:73:49:25:2b:ea:41:9e:8b:b6:46:
93:48:05:17:ab:66:b8:0f:3a:c5:94:d6:7b:00:26:
56:a1:c7:b7:c9:45:5b:ae:2d:81:cd:1a:47:96:84:
46:b4:96:0b:ba:b0:10:6f:78:97:65:4d:c8:ed:00:
90:ef:fe:0b:ec:d1:04:84:08:24:4e:d3:7d:7d:70:
cf:f2:dc:d5:68:58:36:a1:73:23:7a:d7:c0:85:7f:
9c:2e:07:0a:44:b5:16:7d:9d:c7:02:97:e5:e4:21:
9a:c6:da:7a:ab:54:da:00:b2:b6:ee:f1:a5:9a:73:
0f:91:12:48:43:b4:19:6d:02:11:b5:73:a6:6a:72:
96:ed:f0:31:fc:5c:02:f1:fc:a1:05:ef:99:a7:70:
a9:8c:3d:15:6c:1f:46:03:60:4f:e9:2e:99:be:61:
b7:6a:2c:69:fd:72:fa:41:5d:c5:dc:b5:39:73:70:
6d:d0:9c:db:60:5c:fd:27:f2:70:a4:18:20:92:96:
28:c2:44:48:61:52:f8:a0:e8:c1:98:cd:d8:17:7c:
7b:c4:7d:bd:c0:2b:67:8e:a6:a6:d6:66:41:49:5e:
36:db:ff:ef:3e:18:5f:c4:43:95:ee:91:1a:cc:6c:
97:f9:a0:2b:58:89:5e:ab:06:ad:18:f2:02:e7:6e:
e8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:1E:76:7C:8A:96:9B:49:BF:0D:FD:C7:38:CF:A2:E3:AA:0D:F1:AB
X509v3 Authority Key Identifier:
keyid:8D:59:C4:32:3F:76:7C:E4:FF:C8:5D:AA:D2:08:B9:0C:04:FB:D3:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jVnEMj92fOT_yF2q0gi5DAT70-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/eR52fIqWm0m_Df3HOM-i46oN8as.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/f09ecf-e805-4158-b315-f2be9f6c664c/1/jVnEMj92fOT_yF2q0gi5DAT70-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.185.0/24
Signature Algorithm: sha256WithRSAEncryption
25:b3:dc:8d:fc:ed:67:b6:65:92:87:84:75:f8:d2:f4:0a:b8:
89:77:8d:1b:96:5c:a8:33:8a:cb:7f:47:d7:41:81:5f:66:ef:
2e:67:f0:12:dd:3e:34:08:cf:ed:b7:30:da:70:77:b8:cc:7d:
73:d4:37:e9:d4:aa:c9:a1:77:3d:e2:a6:cb:2c:dc:d2:e1:d4:
4f:c9:a8:a2:5f:81:98:47:69:38:ae:1c:df:86:9f:ff:cc:e5:
34:2a:61:db:b7:d9:51:55:03:e3:46:76:72:c1:5d:e2:b1:9f:
f9:f4:1e:58:2b:6a:ee:5f:2d:7e:3e:a0:b5:d4:51:20:b8:23:
5e:b9:c7:80:8c:db:12:7c:f4:85:8f:e9:d7:6a:aa:80:ef:90:
cb:1a:92:08:ed:ac:1e:bc:e5:7e:5d:70:73:89:e1:c8:fa:71:
ee:e9:9c:b5:dd:fe:9a:1b:35:c9:a5:18:c9:dd:86:93:79:31:
4e:e2:23:8d:a6:d0:19:7b:29:f9:b2:e2:ee:bb:ea:7e:e9:71:
eb:16:05:5b:83:dd:04:c0:1b:35:7b:95:8e:34:64:75:e6:76:
ba:ef:3e:9c:97:c3:0d:86:58:6e:72:c9:c4:5c:b0:f1:fe:4e:
59:e5:9d:67:9d:9f:87:5a:f7:f3:92:79:3c:49:a7:66:23:1a:
e5:da:a5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:33:16 2024 by rpki-client on console-fra.rpki-client.org