Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8kFPpC5UQJMMZ_LWubFjRiet-vY.roa
File: 8kFPpC5UQJMMZ_LWubFjRiet-vY.roa (raw, json)
Hash identifier: BClFeUvJ89GyYlLT5peSIHEWUkAh/IA6wHYqnw8Iv4Q=
Subject key identifier: F2:41:4F:A4:2E:54:40:93:0C:67:F2:D6:B9:B1:63:46:27:AD:FA:F6
Certificate issuer: /CN=3af09ba33b5ae581b0d29323249314f76aa10511
Certificate serial: 01856CB8584ED2387F7D5696EDB018E50702
Authority key identifier: 3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8kFPpC5UQJMMZ_LWubFjRiet-vY.roa
Signing time: Sun 01 Jan 2023 09:44:58 +0000
ROA not before: Sun 01 Jan 2023 09:44:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209092
IP address blocks: 90.85.36.0/24 maxlen: 24
217.108.85.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 03 Mar 2023 06:52:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6c:b8:58:4e:d2:38:7f:7d:56:96:ed:b0:18:e5:07:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3af09ba33b5ae581b0d29323249314f76aa10511
Validity
Not Before: Jan 1 09:44:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2414fa42e5440930c67f2d6b9b1634627adfaf6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:b1:93:81:59:eb:24:82:e0:0d:79:35:ab:
82:46:a8:78:9e:2f:a7:a4:7d:30:ae:81:b9:19:cf:
4a:05:c0:33:d5:26:30:f9:50:58:3b:37:db:b0:5c:
f5:ad:af:e1:1f:a2:76:ac:45:40:4e:57:0f:62:92:
80:0a:ec:e7:3b:ba:7b:a3:09:72:6f:d5:08:ae:06:
51:3b:23:c6:d1:b2:e3:3d:14:61:b6:9e:13:2e:f6:
bf:75:ca:74:a3:3c:69:f9:41:03:84:2c:7d:6e:94:
18:fd:a3:cc:6f:46:f8:10:a3:b4:40:71:d2:76:49:
7f:18:47:b3:10:14:a0:bc:6b:26:29:a2:ee:d6:f9:
5c:0e:09:d4:6d:ae:6d:ec:fc:46:7b:b3:bd:e4:55:
32:cb:6b:83:98:4d:2d:1b:4b:85:5b:9e:bf:8f:67:
f1:8d:95:a0:0e:2d:5d:56:90:01:3f:b8:db:b4:35:
09:b4:bc:dd:c5:24:6c:5b:7b:94:22:1b:50:69:d9:
3a:db:60:ac:15:15:db:18:01:56:e6:c9:9c:af:4e:
e5:cf:a5:95:7d:cf:08:49:9a:fe:38:ae:80:3e:fd:
49:45:48:e8:90:ab:d6:3f:0a:46:bf:81:ff:4a:92:
43:d0:28:43:3e:fb:93:6b:c6:b0:cf:55:50:26:ff:
57:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:41:4F:A4:2E:54:40:93:0C:67:F2:D6:B9:B1:63:46:27:AD:FA:F6
X509v3 Authority Key Identifier:
keyid:3A:F0:9B:A3:3B:5A:E5:81:B0:D2:93:23:24:93:14:F7:6A:A1:05:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OvCbozta5YGw0pMjJJMU92qhBRE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/8kFPpC5UQJMMZ_LWubFjRiet-vY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/33d5d1-c450-413b-afe4-45935f506a12/1/OvCbozta5YGw0pMjJJMU92qhBRE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
90.85.36.0/24
217.108.85.0/24
Signature Algorithm: sha256WithRSAEncryption
65:33:2d:c2:01:1e:f5:b1:38:5a:89:51:ea:d5:b4:e9:bf:e9:
37:f7:b4:45:f0:97:25:b3:37:92:04:6e:30:f9:a2:41:7c:79:
d3:6a:dc:05:41:7c:b6:21:77:de:ae:98:44:a4:b6:d9:f5:71:
8d:b7:ed:71:6f:4a:09:d4:04:46:5b:f5:b4:30:5e:63:ff:6d:
ad:73:d4:ad:39:bc:41:c0:48:23:2a:9a:6f:0c:01:0f:21:64:
4a:8e:c2:12:c4:f1:44:9d:2c:67:7f:84:9e:57:d4:7f:cf:56:
f3:61:18:5a:98:7e:d4:3c:d9:42:ab:c1:8e:33:4d:be:75:e7:
29:20:33:54:de:be:a5:bd:35:09:dc:84:00:60:c5:f0:2f:a6:
ff:ca:fb:d6:aa:33:7e:0d:d4:d9:0d:80:0c:a1:6b:b7:04:0a:
8c:25:1c:44:57:60:d9:02:9d:7e:f2:76:6f:d5:20:2a:bf:8e:
81:1a:e3:83:2e:0a:f4:3d:2e:a8:af:7b:8f:93:2d:78:8b:29:
c3:74:fc:e2:fd:43:f2:d7:ec:4d:19:b0:07:0b:70:fd:31:f9:
20:60:47:a3:24:28:e9:c5:7d:85:db:e8:d2:e4:15:17:b7:db:
3a:87:60:c6:5f:59:a4:c6:95:be:8e:05:70:e6:09:f6:49:04:
73:21:61:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:19 2024 by rpki-client on console-ams.rpki-client.org