Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/wuRuyu2uNTQvIKHVYGfwLiVqIkk.roa
File: wuRuyu2uNTQvIKHVYGfwLiVqIkk.roa (raw, json)
Hash identifier: opFMSGsF0Xc/IanSKSXkZ65n6GIjJ2SZ53uF3u3+2T0=
Subject key identifier: C2:E4:6E:CA:ED:AE:35:34:2F:20:A1:D5:60:67:F0:2E:25:6A:22:49
Certificate issuer: /CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Certificate serial: 01856F5DD9573EEDEAFEFE06EE6F2CCE3464
Authority key identifier: E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/wuRuyu2uNTQvIKHVYGfwLiVqIkk.roa
Signing time: Sun 01 Jan 2023 22:04:59 +0000
ROA not before: Sun 01 Jan 2023 22:04:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34443
IP address blocks: 85.248.235.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:5d:d9:57:3e:ed:ea:fe:fe:06:ee:6f:2c:ce:34:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e7f881401abacc88c941fdf740f1ab1536f05dba
Validity
Not Before: Jan 1 22:04:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c2e46ecaedae35342f20a1d56067f02e256a2249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c3:ce:71:37:2d:c3:b5:b6:90:f7:4c:ed:ee:
43:ad:5e:11:b0:7c:13:7d:e9:6b:34:b8:81:a3:ca:
e3:16:d1:66:ff:2a:f8:26:f7:80:37:eb:03:60:32:
31:98:e1:00:47:26:92:35:59:90:27:74:87:38:24:
d4:4c:ed:76:0c:7c:01:46:63:dc:10:e7:5d:cd:0b:
f6:a0:8b:f7:2d:14:e4:a4:c4:50:22:4f:27:c6:1b:
2b:6e:48:53:2b:b5:51:95:e6:0f:c1:f5:c8:54:58:
87:4d:1b:c0:4d:f6:44:c5:54:bd:b4:aa:08:3a:ca:
17:8f:8f:df:67:68:3c:30:74:b9:a0:b2:1f:91:1d:
9b:b4:41:d0:66:fb:f9:44:19:dd:b0:df:bf:47:5b:
d1:55:a0:f5:cd:ee:c1:c5:e7:e2:dd:fa:d7:a4:cc:
8b:7c:d1:23:73:9d:88:79:f0:ba:43:9f:b0:e2:53:
bd:c3:a8:f4:9f:47:4b:d2:fb:1a:58:6b:2b:14:54:
9c:ac:81:d2:c8:bc:c9:7b:d2:17:ac:fa:fc:0f:9a:
28:f3:de:5b:f1:99:fc:7e:f3:bf:a2:07:cd:53:78:
f7:50:87:81:fe:83:6e:7f:af:af:16:ae:ce:06:44:
24:cd:98:21:e1:a1:69:1e:3b:a5:2d:83:48:25:ec:
f9:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:E4:6E:CA:ED:AE:35:34:2F:20:A1:D5:60:67:F0:2E:25:6A:22:49
X509v3 Authority Key Identifier:
keyid:E7:F8:81:40:1A:BA:CC:88:C9:41:FD:F7:40:F1:AB:15:36:F0:5D:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5_iBQBq6zIjJQf33QPGrFTbwXbo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/wuRuyu2uNTQvIKHVYGfwLiVqIkk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/f5534a-a613-47be-b42b-e2fbc3a68800/1/5_iBQBq6zIjJQf33QPGrFTbwXbo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.248.235.0/24
Signature Algorithm: sha256WithRSAEncryption
49:c4:3b:f1:76:27:14:36:61:39:5c:d2:7b:c6:da:98:f4:92:
c6:0e:f2:e1:93:b4:ba:71:9b:b4:e2:bb:b0:3b:90:6e:e0:94:
3f:36:b0:08:36:a5:5b:47:5b:54:70:b3:5e:dd:32:97:98:ea:
e0:a2:31:88:be:10:53:81:cb:2e:db:bc:ab:ea:de:ca:ab:44:
a3:46:4b:93:4e:d6:2d:85:d2:16:51:38:b3:dd:43:d6:49:69:
8f:a7:d4:e5:7d:14:dd:27:2d:e5:d3:9e:a6:76:45:5e:56:e7:
b4:e4:36:31:52:69:75:96:1b:eb:08:fc:02:78:6d:e7:60:0c:
6f:73:d6:c2:05:e5:51:fa:5c:90:85:84:c6:b2:bf:d8:47:7b:
2b:51:5f:cf:7f:61:12:e9:81:e5:f8:c8:bd:e2:7a:2e:e8:47:
42:39:6c:98:9e:6a:f9:fb:ce:09:55:e7:23:70:01:04:08:e1:
60:69:37:6e:e2:b6:e9:34:92:2d:7e:b7:ba:92:c3:03:48:99:
37:0b:3a:29:a5:af:0a:91:f5:9f:da:26:0c:37:1a:fd:16:47:
b5:a8:60:ff:ff:8f:02:c3:e0:7b:c1:7a:20:b3:a6:a4:35:6c:
c4:98:74:11:0a:53:2d:11:b7:b3:30:d9:c0:0f:92:0c:04:c4:
90:e4:fe:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 15:21:18 2024 by rpki-client on console-ams.rpki-client.org