Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/W4hW1mK8DnNMfUKF-HBOUzP6yjE.roa
File: W4hW1mK8DnNMfUKF-HBOUzP6yjE.roa (raw, json)
Hash identifier: ZIxbUu1NXzavuFGIkLVgZo1sVf1ugUAJOsX15wVYvSE=
Subject key identifier: 5B:88:56:D6:62:BC:0E:73:4C:7D:42:85:F8:70:4E:53:33:FA:CA:31
Certificate issuer: /CN=5975d519de239cf164cb94a6660c2530ceaef254
Certificate serial: 018C20984F572D6772B3798E14204D60B948
Authority key identifier: 59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/W4hW1mK8DnNMfUKF-HBOUzP6yjE.roa
Signing time: Thu 30 Nov 2023 14:18:21 +0000
ROA not before: Thu 30 Nov 2023 14:18:21 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25211
IP address blocks: 85.11.163.0/24 maxlen: 24
85.11.161.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 07 Dec 2023 12:18:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:20:98:4f:57:2d:67:72:b3:79:8e:14:20:4d:60:b9:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5975d519de239cf164cb94a6660c2530ceaef254
Validity
Not Before: Nov 30 14:18:21 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5b8856d662bc0e734c7d4285f8704e5333faca31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fa:71:44:4b:4f:ea:35:7a:a5:fa:aa:90:f1:14:
9f:6f:92:65:33:de:34:7d:92:f0:ff:a1:3e:01:ee:
61:a5:2d:e8:8a:4f:d8:d9:11:46:33:85:28:bd:08:
8b:8c:d5:86:80:9b:90:02:ba:45:5f:c7:df:dc:d3:
dc:ee:7d:9d:26:40:5e:ca:9b:3b:85:be:75:58:b6:
37:2c:c1:cf:d3:1c:99:69:7c:db:96:08:fc:84:50:
31:4a:6e:89:8b:4f:be:dd:66:50:8a:33:69:7a:e9:
1d:9d:bf:0b:e6:28:36:f0:4b:9b:13:78:4f:b5:32:
73:9d:3f:52:98:5e:03:e9:74:db:82:86:2b:71:83:
cd:24:ec:ee:4d:3e:3f:46:55:c8:b0:31:60:6b:42:
b9:0d:31:ba:df:b2:ca:16:9a:bb:0a:fb:82:a3:dc:
8a:0f:0c:f0:ba:15:ea:14:7c:c2:b8:f5:11:41:cc:
b0:ca:aa:1b:4f:c1:4d:88:25:6b:4a:16:b8:b9:bc:
3c:86:a6:a3:3e:6f:1c:d0:f7:b2:b9:82:02:c9:4c:
c6:ee:38:1c:a4:74:fc:f1:18:28:ac:24:72:3b:a8:
97:5a:8f:16:2a:86:bc:af:60:50:39:f2:1a:b7:2c:
5f:a0:2c:ae:19:77:70:d5:9e:0e:2e:f1:5a:4b:38:
f2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:88:56:D6:62:BC:0E:73:4C:7D:42:85:F8:70:4E:53:33:FA:CA:31
X509v3 Authority Key Identifier:
keyid:59:75:D5:19:DE:23:9C:F1:64:CB:94:A6:66:0C:25:30:CE:AE:F2:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WXXVGd4jnPFky5SmZgwlMM6u8lQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/W4hW1mK8DnNMfUKF-HBOUzP6yjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/0c0c37-b401-401b-aa65-2cc675726975/1/WXXVGd4jnPFky5SmZgwlMM6u8lQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.11.161.0/24
85.11.163.0/24
Signature Algorithm: sha256WithRSAEncryption
64:5c:21:d0:30:47:f2:d2:99:57:5e:f1:87:f8:6b:9b:91:e1:
6f:1f:94:8f:85:85:a2:98:21:e8:3d:37:36:50:0d:ad:07:26:
03:34:d9:5d:a3:d2:cc:ac:fb:ef:24:dc:ae:7f:6f:f0:97:1f:
32:fd:1f:a8:7a:43:fb:3b:36:a1:93:92:df:b2:9a:79:3f:ee:
ea:97:b2:d2:1d:6d:7e:e8:4a:a4:8b:d7:0a:be:dd:cb:61:e7:
54:62:a6:0b:15:8c:7e:d4:32:2b:cb:54:57:7f:2f:fa:ea:c0:
80:49:7f:dd:36:cb:82:31:f3:ae:73:5a:81:d0:49:f1:15:52:
a1:9d:e0:3d:97:b5:4a:d6:83:2f:d1:f4:3b:e4:ec:6a:f7:e6:
6a:1c:df:79:a3:44:d7:ed:ff:02:37:16:cb:19:89:51:0a:14:
42:1d:eb:2c:92:07:1c:ea:db:d7:be:39:fc:72:c3:a5:30:d5:
48:88:2f:2b:cc:56:bd:e5:dd:1f:a1:81:3f:9d:b7:21:55:67:
e6:7b:81:1e:25:4e:04:61:9b:2a:11:5f:8a:3c:64:c2:e6:69:
00:fc:16:3a:e8:7d:96:b0:49:64:fa:8d:28:7d:19:1d:c5:4f:
67:88:08:ab:fa:20:74:3b:85:35:04:4e:f1:63:23:9a:8a:06:
ba:17:bd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:27 2024 by rpki-client on console-fra.rpki-client.org