Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/H8fu-tQKVi_x4js7GaDf08akt7s.roa
File: H8fu-tQKVi_x4js7GaDf08akt7s.roa (raw, json)
Hash identifier: 3BaSONdVraai+zm0x9cMvcDInFsEjQGlEo57xlF5txw=
Subject key identifier: 1F:C7:EE:FA:D4:0A:56:2F:F1:E2:3B:3B:19:A0:DF:D3:C6:A4:B7:BB
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DD758E8BA89A971021B7C59E53BBB
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/H8fu-tQKVi_x4js7GaDf08akt7s.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 24980
IP address blocks: 85.248.249.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d7:58:e8:ba:89:a9:71:02:1b:7c:59:e5:3b:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1fc7eefad40a562ff1e23b3b19a0dfd3c6a4b7bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:d1:80:8b:5d:31:15:d9:70:73:8b:37:e0:1b:
30:d9:f8:70:a8:55:57:68:5a:d4:50:1c:d0:ee:79:
f3:62:c6:c4:aa:98:70:72:0d:61:3e:47:79:a3:98:
7a:0c:46:72:fb:bc:b6:95:5a:a3:dc:c4:60:a9:b7:
b7:fa:28:a2:ec:d8:b2:6c:1e:41:e7:bb:a1:09:ea:
1f:78:87:66:d3:25:9d:0a:b5:80:52:c9:e7:a5:6f:
c9:1b:4a:cd:ef:68:24:7b:ec:ce:9a:fe:f0:34:6e:
3c:f8:36:91:3a:a8:32:d7:e0:c3:d5:cb:31:43:4a:
fa:05:a9:ed:9a:06:a7:8c:e3:ea:ea:8e:fb:6d:81:
76:d2:df:84:68:42:f8:12:b5:32:e1:40:18:91:2d:
d7:e6:bb:4b:c4:8b:a7:c2:ce:2a:8b:1d:52:3b:f5:
47:89:f0:30:b5:78:48:31:bb:2f:71:74:d0:73:86:
c8:80:64:4d:b5:8d:4b:0b:bc:4e:27:40:c3:49:63:
22:7d:8c:58:ef:04:77:89:a6:94:99:22:19:ba:28:
79:5e:22:92:96:70:b8:3f:1f:69:93:a6:ec:22:81:
73:6b:42:64:94:f6:d2:01:28:26:2c:ea:54:e3:00:
c3:7e:1a:fc:8f:f6:97:9e:0e:77:1e:84:02:7e:bd:
b3:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:C7:EE:FA:D4:0A:56:2F:F1:E2:3B:3B:19:A0:DF:D3:C6:A4:B7:BB
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/H8fu-tQKVi_x4js7GaDf08akt7s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.249.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c8:13:b5:89:25:e6:85:57:e4:81:5f:18:af:b7:b9:9f:a7:
ff:a9:86:da:ee:ef:a7:ef:88:30:70:58:07:ea:37:6c:ad:90:
0e:b2:e8:36:7c:9e:97:64:8e:29:09:63:3a:01:b8:e4:82:4f:
85:8c:d8:32:45:62:82:a0:17:36:a7:fe:51:6b:8d:8d:c9:c1:
e0:24:6f:87:7a:c7:5b:36:ad:5c:7d:17:f3:24:02:fb:86:58:
23:31:a4:41:81:56:db:55:26:ae:71:3a:2b:33:9b:67:ec:83:
ca:f2:c4:a4:6e:99:62:42:fc:1e:07:b2:e2:d0:c4:6c:0e:26:
15:7f:92:0c:12:c5:c0:f3:00:76:31:c9:72:1b:f9:58:bf:c6:
5d:7e:ba:b6:25:ea:10:6a:94:ac:48:01:a4:39:6a:23:8a:78:
7f:ed:70:ac:4a:98:ad:15:27:f4:32:0e:a1:93:de:c3:e5:54:
65:dd:b4:c1:3d:08:95:12:c0:dd:9f:fa:c8:4b:66:ff:c6:9d:
18:2e:50:19:ff:84:89:5a:1e:f6:17:2a:78:8e:91:76:3c:4e:
a7:a8:18:e6:49:61:dd:4c:e9:22:c2:12:98:93:56:3a:5b:16:
53:e7:d0:d5:c2:de:2c:69:2c:26:1b:ff:fb:8f:12:c5:d0:6a:
1d:fc:bc:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org