Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/y06Ko-5A3akzSofFaCGJGHFz0rM.roa
File: y06Ko-5A3akzSofFaCGJGHFz0rM.roa (raw, json)
Hash identifier: BTIzrOmG6O/4RWORMT9QNvZTHakbpH9PsVirDSA4Hco=
Subject key identifier: CB:4E:8A:A3:EE:40:DD:A9:33:4A:87:C5:68:21:89:18:71:73:D2:B3
Certificate issuer: /CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Certificate serial: 01856DEF67FAB551C798765187484CF48801
Authority key identifier: FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/y06Ko-5A3akzSofFaCGJGHFz0rM.roa
Signing time: Sun 01 Jan 2023 15:24:44 +0000
ROA not before: Sun 01 Jan 2023 15:24:44 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2116
IP address blocks: 85.194.254.0/23 maxlen: 23
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:ef:67:fa:b5:51:c7:98:76:51:87:48:4c:f4:88:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb236b213d56493f3b077e6b41f42e4f3df8cdce
Validity
Not Before: Jan 1 15:24:44 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb4e8aa3ee40dda9334a87c5682189187173d2b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:62:6a:fb:e1:5e:b9:f7:0a:ac:e3:ed:26:5a:
99:ad:d8:4e:63:73:c5:f8:3b:d0:ee:fa:ce:01:b1:
86:4f:88:52:0c:fc:f2:b6:55:f8:a9:d6:5b:cb:d4:
1c:57:02:b1:ac:e4:e8:ec:cd:42:af:fa:7b:c8:28:
e0:41:28:e7:c0:7b:e1:d6:44:4c:15:c8:1f:1a:fb:
9a:f6:97:93:31:02:15:64:b5:46:dd:60:70:c3:c2:
59:3e:12:df:3c:e2:2b:b2:14:72:3f:66:b9:79:f1:
97:63:4a:6e:a3:02:80:df:34:92:79:dd:19:4b:7c:
cf:3e:32:e2:83:f8:dd:16:35:65:77:51:a3:c0:7a:
78:4e:91:66:aa:e4:c2:ec:5f:cf:da:f2:9e:90:b6:
99:05:28:92:38:7c:6b:6f:52:c1:de:d6:79:39:35:
40:63:56:1b:88:b3:09:24:50:d7:a6:c2:b5:e1:35:
4c:2f:89:9e:7f:65:ec:b1:09:6d:cb:e6:67:b0:8a:
85:83:f2:99:a8:e3:ba:ba:da:32:9f:91:0e:0e:4c:
79:b8:71:ec:85:f1:34:bd:fd:ac:f2:2c:6b:55:57:
b4:2f:9f:10:40:79:03:35:a0:cb:ff:18:e5:24:c9:
bb:32:e8:4d:01:02:ee:b1:e1:38:61:e7:d6:7d:22:
a4:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:4E:8A:A3:EE:40:DD:A9:33:4A:87:C5:68:21:89:18:71:73:D2:B3
X509v3 Authority Key Identifier:
keyid:FB:23:6B:21:3D:56:49:3F:3B:07:7E:6B:41:F4:2E:4F:3D:F8:CD:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-yNrIT1WST87B35rQfQuTz34zc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/y06Ko-5A3akzSofFaCGJGHFz0rM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/20f4ac-80d9-40e2-a9e6-1c88eebeb293/1/1-yNrIT1WST87B35rQfQuTz34zc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.194.254.0/23
Signature Algorithm: sha256WithRSAEncryption
86:89:0b:55:db:71:6a:28:38:6a:9f:ed:af:d7:fd:cd:62:be:
3a:1d:9d:e8:5d:8a:1e:22:cd:0d:f8:bf:08:64:c4:7f:a9:a2:
f3:46:d4:2f:b0:ab:64:d4:f3:0b:b3:3a:be:6c:ea:2e:ce:7f:
f0:d0:26:62:42:77:60:c6:39:31:d6:9e:95:79:c7:31:ad:6f:
ba:be:e1:27:24:5b:53:99:c8:b4:af:d4:bd:02:31:b6:11:ea:
2e:64:c7:88:3c:17:f2:90:59:59:bc:95:67:49:16:c7:f7:da:
51:95:50:6d:4f:f7:31:25:23:b4:7f:75:eb:1b:e6:46:13:c4:
a0:f9:ea:a5:fb:94:a7:a0:69:4a:7b:8d:f7:cf:ec:46:ce:05:
b1:a9:0c:bd:57:34:2b:02:ff:09:d7:ce:65:2f:1e:ce:c2:ea:
83:e6:54:2e:97:53:d1:14:22:ef:2a:a8:99:5b:ac:0f:11:81:
35:79:2b:c4:19:50:3d:9e:ea:94:2b:2b:51:55:f3:21:1e:e2:
16:9b:c1:9d:59:dc:5a:5f:89:d4:13:5a:25:ab:a9:c2:48:4b:
e3:e7:46:96:df:5d:7b:c5:4a:0a:96:ea:72:67:a3:3c:f7:f8:
99:38:21:5f:f7:57:9e:bc:52:17:70:fc:21:39:00:a0:0a:3a:
6d:6e:60:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:20 2024 by rpki-client on console-ams.rpki-client.org