Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/svZjZaxCEH7DbhsNZ8HS8Tozm4I.roa
File: svZjZaxCEH7DbhsNZ8HS8Tozm4I.roa (raw, json)
Hash identifier: Zx0apGmQOT2ZDSXsnKlf61JCfiDb6cy9NGltByYIXzI=
Subject key identifier: B2:F6:63:65:AC:42:10:7E:C3:6E:1B:0D:67:C1:D2:F1:3A:33:9B:82
Certificate issuer: /CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Certificate serial: 01856F8242C09B13D2984935222C719236D8
Authority key identifier: AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/svZjZaxCEH7DbhsNZ8HS8Tozm4I.roa
Signing time: Sun 01 Jan 2023 22:44:45 +0000
ROA not before: Sun 01 Jan 2023 22:44:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49040
IP address blocks: 85.217.239.0/24 maxlen: 24
85.217.238.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 10:30:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:82:42:c0:9b:13:d2:98:49:35:22:2c:71:92:36:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac1f721b7b7e6d049fbfe520e1ca89c1ca256813
Validity
Not Before: Jan 1 22:44:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b2f66365ac42107ec36e1b0d67c1d2f13a339b82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:40:07:6a:a8:b1:17:28:b3:49:fb:23:87:d2:
8f:59:59:38:c5:a7:b8:42:bb:80:96:63:63:7a:51:
35:82:8f:4a:89:5b:d6:00:30:05:af:ef:89:d0:28:
8f:39:2f:f1:67:bd:d1:01:13:e7:92:0b:9e:70:59:
24:af:19:36:b8:e4:cc:19:13:83:d0:d1:54:d4:e7:
d5:a7:58:c3:27:37:6e:c1:17:73:a0:16:43:2d:70:
9f:52:9e:3f:dd:1f:f5:8d:13:15:88:0a:56:e2:f6:
83:bd:30:9c:b3:6b:b9:b8:06:e6:8e:12:2f:d5:e8:
3b:80:a1:9b:7c:b4:99:c0:57:23:aa:73:0b:e6:75:
8f:e2:5b:bc:e7:63:3e:9c:a7:4e:0e:70:c5:fb:76:
38:ff:0d:8f:16:2e:20:d3:de:2a:19:53:95:45:d3:
ff:43:4f:c9:5f:26:50:f2:db:6d:5d:66:5d:a9:67:
54:70:28:43:b8:15:79:74:90:73:9c:a1:8a:81:a1:
7a:60:47:6c:cb:5a:8c:5e:89:68:6b:e1:0b:5f:9d:
bf:9a:c4:24:13:55:8d:12:4c:43:1f:1b:4d:32:06:
39:9b:db:8a:26:da:ba:38:03:34:a1:ff:a3:4f:22:
81:6a:8b:12:7e:ee:38:0e:b7:d3:e1:b8:fb:71:5b:
fb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:F6:63:65:AC:42:10:7E:C3:6E:1B:0D:67:C1:D2:F1:3A:33:9B:82
X509v3 Authority Key Identifier:
keyid:AC:1F:72:1B:7B:7E:6D:04:9F:BF:E5:20:E1:CA:89:C1:CA:25:68:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB9yG3t-bQSfv-Ug4cqJwcolaBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/svZjZaxCEH7DbhsNZ8HS8Tozm4I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/56d267-1c43-47c8-afb2-64d29c86bf3e/1/rB9yG3t-bQSfv-Ug4cqJwcolaBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.217.238.0/23
Signature Algorithm: sha256WithRSAEncryption
53:d3:06:93:60:d7:77:99:3f:a7:0a:46:80:3b:8a:f8:de:66:
9d:65:9b:4d:7c:fe:ea:4b:66:53:6b:09:15:5f:16:07:fa:99:
c0:a2:49:48:e6:34:a7:e7:a1:20:01:18:4b:1c:81:1a:81:e4:
74:83:d6:07:14:bb:fa:0a:cc:47:61:27:2a:eb:40:ae:37:24:
67:57:1c:37:ee:bf:14:6b:02:7c:cf:e2:d0:65:6f:af:ef:3b:
31:c1:91:66:a0:02:29:ef:f1:24:17:66:25:0f:05:59:eb:50:
41:a6:5c:e9:45:2e:fc:38:c1:56:42:b1:fc:63:ba:50:66:36:
25:46:cc:08:89:8a:ec:24:1a:70:3f:6c:6a:2d:a8:41:a0:e6:
e2:2e:9c:ac:50:e8:d7:8e:f4:38:c5:53:bb:5e:bb:7b:8b:5d:
0b:70:6e:cb:68:20:08:6b:e8:f4:fd:7e:8e:91:c3:20:a3:86:
9e:aa:6a:a6:83:60:2f:bc:cc:be:12:5b:d0:18:3b:90:29:64:
e9:2e:dd:79:bb:6f:04:c7:d1:cb:c9:c3:3f:3c:97:68:67:79:
d7:62:92:f4:90:8d:96:77:d7:b3:81:e2:e9:f1:5d:2a:dd:a7:
9f:01:8c:ad:72:d5:b2:87:fe:81:dc:a6:4d:b4:bf:06:76:2d:
48:ca:f4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:16:39 2024 by rpki-client on console-ams.rpki-client.org