Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/7ZeLJI-W_CGsF-hcXgXgOnufv_k.roa
File: 7ZeLJI-W_CGsF-hcXgXgOnufv_k.roa (raw, json)
Hash identifier: qgkBcoJ1Jcas0AEfssNXhVxKTp6bgfIikoJB60ZNZjw=
Subject key identifier: ED:97:8B:24:8F:96:FC:21:AC:17:E8:5C:5E:05:E0:3A:7B:9F:BF:F9
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018AE7F0E97FF9F1BA9EEE8CA419FC3C63A1
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/7ZeLJI-W_CGsF-hcXgXgOnufv_k.roa
Signing time: Sat 30 Sep 2023 21:13:59 +0000
ROA not before: Sat 30 Sep 2023 21:13:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.161.0/24 maxlen: 24
85.11.167.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 30 Nov 2023 14:18:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:e7:f0:e9:7f:f9:f1:ba:9e:ee:8c:a4:19:fc:3c:63:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Sep 30 21:13:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ed978b248f96fc21ac17e85c5e05e03a7b9fbff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:32:14:b6:64:23:f3:84:86:42:07:df:b5:dc:
3a:e2:a2:c3:8c:fb:4c:0c:9e:b5:da:ad:43:03:10:
a8:49:55:1b:6d:3f:6a:87:eb:6d:e6:70:af:00:a1:
2b:88:55:37:33:c3:af:59:ef:a4:e4:7c:96:87:07:
9e:8a:66:a3:45:96:2d:70:f1:a6:44:2e:d4:95:81:
c5:05:b9:f4:6f:ab:6d:db:99:89:0d:36:79:1e:8a:
17:25:60:65:2b:a8:6c:f4:30:68:d9:36:d5:93:d0:
2c:ad:ee:c6:69:6a:b6:3b:c0:9d:76:7e:5c:22:bc:
fe:e6:87:96:81:df:ff:f1:32:a4:00:d2:a8:ca:82:
30:de:16:c8:50:cc:11:d5:25:4a:c8:c5:2e:7e:9a:
00:e0:1b:96:dc:b7:c5:a1:77:db:c0:e8:24:2a:9a:
58:7c:f4:a2:f9:c5:b7:03:57:4c:19:ab:f0:34:4a:
a5:69:8e:b0:26:10:a2:27:58:3f:5e:40:f4:02:30:
87:7d:48:33:f9:c6:b0:a6:f6:89:e8:5e:48:2b:46:
94:75:26:7f:c9:42:c6:a1:c1:64:e9:12:21:f3:da:
39:24:ab:01:fd:06:11:3e:75:12:aa:c5:e9:11:d3:
bd:62:76:03:8e:97:59:09:50:3e:8a:62:e3:58:de:
65:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:97:8B:24:8F:96:FC:21:AC:17:E8:5C:5E:05:E0:3A:7B:9F:BF:F9
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/7ZeLJI-W_CGsF-hcXgXgOnufv_k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
85.11.167.0/24
Signature Algorithm: sha256WithRSAEncryption
02:2d:24:27:68:a8:b1:0b:c9:9f:a7:0c:49:be:2d:6c:98:80:
f1:6e:a9:24:1c:42:ab:e7:01:72:4f:26:5d:6f:43:bc:e4:40:
eb:42:5d:99:3c:5b:c3:6c:e3:a4:c6:a0:93:bc:bb:b0:fb:0a:
2e:3c:98:c0:2e:19:c1:30:50:d7:96:0a:83:de:81:63:06:c4:
ec:b2:49:16:90:f9:0f:c5:14:b0:ff:16:84:47:56:20:4d:44:
ad:5d:c1:cb:81:35:8c:f7:6a:ac:29:9b:52:41:3e:9d:80:dd:
f0:28:5b:0a:d8:2d:1c:3a:9b:16:c1:6d:ec:c7:42:8d:27:67:
1e:78:42:52:42:96:cd:8c:3d:97:f1:59:eb:97:2a:12:5c:6b:
d3:1c:b4:31:ae:06:cd:d5:16:23:4f:25:8c:47:a2:fa:7f:cd:
69:31:ef:d4:dd:d8:9a:91:68:e8:6e:f7:e5:ef:12:45:4c:69:
99:29:4b:20:b9:b3:04:e3:7f:a9:b5:94:5d:83:b3:69:fa:02:
89:23:1d:85:bd:e7:d4:53:89:40:6c:c5:40:cb:a3:94:75:e4:
54:55:bb:73:21:22:13:a1:ec:3c:da:6b:94:10:08:ef:30:33:
d6:e5:e6:3f:64:6a:65:70:64:e7:69:6e:5e:e7:53:b9:b6:89:
02:89:e9:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org