Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/R8UJoL1Uo3rfB7IU4zXA47-Zs-g.roa
File: R8UJoL1Uo3rfB7IU4zXA47-Zs-g.roa (raw, json)
Hash identifier: 9ObghIPFBUeJsrfX2m5mIXdn+vNl1kY/rcG9Gz5fiNQ=
Subject key identifier: 47:C5:09:A0:BD:54:A3:7A:DF:07:B2:14:E3:35:C0:E3:BF:99:B3:E8
Certificate issuer: /CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Certificate serial: 0185723101429D9921A0B3A6449D3C70A3C9
Authority key identifier: 3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/R8UJoL1Uo3rfB7IU4zXA47-Zs-g.roa
Signing time: Mon 02 Jan 2023 11:14:52 +0000
ROA not before: Mon 02 Jan 2023 11:14:52 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34469
IP address blocks: 85.158.222.0/23 maxlen: 23
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:01:42:9d:99:21:a0:b3:a6:44:9d:3c:70:a3:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b477a62607fb94c8e23b5a062c78d93df9cbd69
Validity
Not Before: Jan 2 11:14:52 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=47c509a0bd54a37adf07b214e335c0e3bf99b3e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ab:83:2d:61:b0:e8:b8:5c:b3:1e:0c:ba:78:
40:1f:d5:e2:68:66:42:de:70:e9:97:ed:11:64:48:
d3:f7:17:28:c3:52:fa:d2:ae:67:85:37:83:80:99:
db:7b:5f:8f:ba:6e:75:df:9d:c7:18:b4:df:9c:04:
ba:67:9c:3c:94:e5:2d:ce:00:43:63:c5:18:c5:9a:
d4:ba:57:1c:20:b5:00:b7:9c:bc:2f:65:86:1f:b0:
0f:12:53:2e:a4:5b:e4:81:88:a7:5a:1f:2a:14:4d:
a3:37:91:50:44:e4:3f:ab:67:73:27:ad:92:7d:7d:
7b:49:84:3c:d9:91:f4:6c:f6:a8:b0:14:b5:e3:ad:
53:a0:ec:60:f3:a2:56:20:52:70:4b:c8:d8:02:ec:
41:c7:bb:7b:3a:eb:42:a5:90:7b:47:f3:8a:85:d0:
74:c8:25:a8:b6:c5:bb:b4:a2:12:56:80:77:72:34:
cf:37:b3:75:cb:66:b1:95:fe:c5:9d:5e:b6:30:9c:
fb:bc:e1:be:52:5a:28:e6:c1:4c:1b:ea:10:66:b5:
21:6d:2f:82:a9:4e:b2:03:3e:4c:f1:74:3d:2c:c0:
2d:db:ce:65:2c:be:14:ba:be:8e:01:22:d4:00:65:
2a:38:5d:24:6c:ff:ac:fd:7b:6e:21:8c:85:6c:13:
be:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:C5:09:A0:BD:54:A3:7A:DF:07:B2:14:E3:35:C0:E3:BF:99:B3:E8
X509v3 Authority Key Identifier:
keyid:3B:47:7A:62:60:7F:B9:4C:8E:23:B5:A0:62:C7:8D:93:DF:9C:BD:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O0d6YmB_uUyOI7WgYseNk9-cvWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/R8UJoL1Uo3rfB7IU4zXA47-Zs-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/f33379-63d9-4f2b-8e65-30a6c3af9095/1/O0d6YmB_uUyOI7WgYseNk9-cvWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.158.222.0/23
Signature Algorithm: sha256WithRSAEncryption
76:08:b4:b2:5b:73:3d:e6:2f:d1:5d:61:88:a0:2c:8f:62:a7:
8a:03:5c:11:ca:e3:21:fa:08:ce:da:b0:81:26:62:fc:fb:47:
89:d7:e3:b1:b5:f8:3d:52:a4:ce:9f:58:93:94:fe:05:53:65:
ac:21:a9:69:12:f2:3a:1c:88:49:52:e4:38:0b:f8:af:ba:3e:
e9:72:f4:34:a7:0c:98:7f:58:ff:e9:ca:69:ee:66:84:ab:bf:
70:8f:01:96:b3:5e:fe:e8:14:7d:cb:bd:e9:3c:39:a2:6e:58:
11:47:9b:8c:9d:d5:1a:c7:7b:4c:21:9d:02:77:0d:ce:44:60:
41:45:05:7c:a1:6f:6a:50:02:84:61:d5:ea:06:e7:4c:98:2d:
9d:fe:93:83:12:4a:6c:dc:5a:16:03:ba:c7:a3:37:d5:fe:59:
84:ab:f4:a8:1b:00:4c:ba:64:24:e8:04:d2:b2:89:2c:60:14:
2e:e5:d9:44:86:ba:90:a4:40:6b:78:84:d2:07:0a:ca:e2:28:
d7:a6:ff:dd:0d:a4:c3:74:08:8d:e9:0e:1e:9b:3e:b3:06:46:
83:75:6b:c4:05:b5:01:3b:13:45:76:d7:c2:70:22:f9:80:06:
75:de:a3:8e:ff:3a:e2:e0:4c:19:e3:a3:7b:20:27:c7:4e:7d:
4b:bd:da:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 03:23:23 2024 by rpki-client on console-fra.rpki-client.org