Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/iplPBamLXsZOyJeMFWh637OY3H4.roa
File: iplPBamLXsZOyJeMFWh637OY3H4.roa (raw, json)
Hash identifier: Col5YD9gyuvH2CZRUsRyZlJyfE47NiNgLn5uA1VclmM=
Subject key identifier: 8A:99:4F:05:A9:8B:5E:C6:4E:C8:97:8C:15:68:7A:DF:B3:98:DC:7E
Certificate issuer: /CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Certificate serial: 018CC794694E0421C74B5A5DF437A7245E49
Authority key identifier: 31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/iplPBamLXsZOyJeMFWh637OY3H4.roa
Signing time: Tue 02 Jan 2024 00:30:41 +0000
ROA not before: Tue 02 Jan 2024 00:30:41 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 1239
IP address blocks: 85.153.56.0/24 maxlen: 24
85.153.75.0/24 maxlen: 24
85.153.74.0/24 maxlen: 24
85.153.7.0/24 maxlen: 24
85.153.6.0/24 maxlen: 24
85.153.8.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 22 Feb 2024 12:49:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:94:69:4e:04:21:c7:4b:5a:5d:f4:37:a7:24:5e:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31a185d0eb0ca7811c586425de0e960e1cfeb61b
Validity
Not Before: Jan 2 00:30:41 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a994f05a98b5ec64ec8978c15687adfb398dc7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:37:ef:59:19:32:24:0e:11:33:20:b3:82:2e:
01:39:90:5a:e3:68:a1:44:0f:55:13:f3:cc:32:4f:
8d:10:4c:c6:4d:c7:f8:f7:b9:3e:82:92:6c:8d:a9:
30:a6:51:e9:6c:f5:00:f5:ba:85:f8:44:f2:46:23:
1a:b5:2d:fe:35:14:66:db:c5:54:c4:9f:ed:32:af:
bd:fe:bf:7f:75:93:24:7a:33:f3:60:2b:ef:df:af:
db:34:5f:19:57:ce:14:78:bd:1e:92:d3:80:67:db:
ae:81:80:6d:e0:d0:bc:78:b2:36:bc:81:bf:e9:8e:
67:0b:4c:f6:e4:01:ee:ab:40:20:70:36:9e:d3:7e:
f8:bf:4f:d9:d8:28:fc:39:86:eb:53:13:ff:cb:32:
81:ec:01:6d:67:97:b1:b1:21:28:15:dc:e9:fc:c2:
4b:16:90:fd:ca:e3:a3:c6:6f:79:62:74:35:22:b0:
ea:db:0a:e5:41:c4:2d:92:38:d2:54:a8:8f:6e:ff:
dd:d6:3b:4f:fe:4f:7c:f9:15:a0:ce:71:7d:d8:6a:
e9:59:8b:5b:a2:be:48:83:4b:6d:99:a9:7d:49:a3:
0b:27:b8:39:26:4f:54:d4:16:2d:71:0d:3d:ea:37:
4e:f9:b3:d7:9a:b0:9e:f4:a0:08:8e:b7:4e:cb:07:
c4:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:99:4F:05:A9:8B:5E:C6:4E:C8:97:8C:15:68:7A:DF:B3:98:DC:7E
X509v3 Authority Key Identifier:
keyid:31:A1:85:D0:EB:0C:A7:81:1C:58:64:25:DE:0E:96:0E:1C:FE:B6:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MaGF0OsMp4EcWGQl3g6WDhz-ths.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/iplPBamLXsZOyJeMFWh637OY3H4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/081c6e-1d65-4ccd-96f5-1dcc86c11e74/1/MaGF0OsMp4EcWGQl3g6WDhz-ths.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.153.6.0-85.153.8.255
85.153.56.0/24
85.153.74.0/23
Signature Algorithm: sha256WithRSAEncryption
2f:f7:de:c5:16:41:1b:de:a1:d3:38:88:d2:f6:10:1e:23:ab:
96:9a:c0:43:01:c7:66:45:ce:1b:20:aa:dc:e3:95:59:f2:39:
04:c0:80:fd:77:8c:7b:30:63:02:7c:7f:d9:b9:e0:00:3e:8d:
42:74:9b:51:b2:4c:55:ae:c5:43:44:5a:50:ec:da:ae:67:62:
4f:88:b7:29:63:f7:61:74:e2:a6:46:d8:31:64:65:78:ad:e7:
a7:b5:87:22:48:68:f7:9d:15:58:7b:d0:40:cf:b0:c1:a4:45:
5b:f9:bd:56:0e:91:fd:72:ac:3e:00:83:36:be:61:3a:08:51:
ab:eb:c4:29:34:0e:62:1c:09:2d:3e:b3:7e:e9:0b:66:51:74:
3a:fb:91:11:96:02:e1:f8:f0:e0:c5:7f:7b:a8:53:08:a4:33:
b4:ba:77:7e:d5:8d:45:4e:fd:6b:af:06:f3:be:41:fa:08:60:
c7:58:55:92:9b:13:4b:59:c7:94:19:4b:ac:20:f7:b3:27:50:
8a:4d:91:77:9f:3f:0d:9e:5e:98:bc:df:04:53:d9:b6:56:74:
d8:db:b3:9e:f8:40:5f:2e:cb:f2:5c:dc:6b:40:18:f8:f7:5b:
22:38:13:08:e0:44:3f:d0:3d:18:bb:8f:ff:7f:e4:f4:3c:ac:
82:4f:4e:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:21:40 2024 by rpki-client on console-ams.rpki-client.org