Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/7ihj3jZsxwQRf6IH9xvOBqqqzGs.roa
File: 7ihj3jZsxwQRf6IH9xvOBqqqzGs.roa (raw, json)
Hash identifier: sRLwViJKG0JXeMN1AXlpirk8Rv4Tm7DEhy3TIzIlyg4=
Subject key identifier: EE:28:63:DE:36:6C:C7:04:11:7F:A2:07:F7:1B:CE:06:AA:AA:CC:6B
Certificate issuer: /CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Certificate serial: 018618081AB2CBA90127DA4D7DA92D9C0DFA
Authority key identifier: 58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/7ihj3jZsxwQRf6IH9xvOBqqqzGs.roa
Signing time: Fri 03 Feb 2023 16:07:09 +0000
ROA not before: Fri 03 Feb 2023 16:07:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 8560
IP address blocks: 85.215.200.0/22 maxlen: 24
85.215.204.0/22 maxlen: 24
85.215.208.0/21 maxlen: 24
85.215.216.0/22 maxlen: 24
85.215.224.0/20 maxlen: 24
85.215.220.0/22 maxlen: 24
85.215.240.0/22 maxlen: 24
85.215.248.0/22 maxlen: 24
85.215.160.0/19 maxlen: 24
185.56.148.0/22 maxlen: 24
85.215.192.0/21 maxlen: 24
2a01:239:100::/40 maxlen: 48
Validation: Failed, certificate revoked on Tue 07 Feb 2023 11:04:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:18:08:1a:b2:cb:a9:01:27:da:4d:7d:a9:2d:9c:0d:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2d2715f43f747bea762dce166bca4b8e965eb
Validity
Not Before: Feb 3 16:07:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ee2863de366cc704117fa207f71bce06aaaacc6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:c2:05:65:cf:fc:bd:d1:db:ee:45:ae:de:
bd:9e:43:8c:4b:90:5b:5b:d3:e1:97:4c:d8:6e:56:
ed:d3:d7:17:73:53:56:bc:d8:62:13:17:0c:06:6d:
21:62:93:d5:3d:b4:9c:e5:2d:87:c2:c1:f0:62:8c:
e9:fe:eb:b1:c4:2a:ae:50:2a:7d:b4:62:34:d3:ce:
82:80:f5:27:6e:bc:1a:5b:95:f4:00:ba:21:d9:9a:
ef:0d:98:f3:67:13:7e:5a:c8:af:b3:2b:a8:55:2d:
c4:dd:ed:fc:8b:ba:76:e1:f6:28:96:fe:1d:2d:fe:
66:9f:8f:cd:44:7d:95:d2:4c:20:4c:c4:10:00:e5:
52:7c:7e:36:01:f6:c4:d6:f3:ef:f0:a3:54:12:dd:
16:91:75:24:fd:a0:9e:33:95:2e:a7:58:89:d8:01:
53:e9:04:78:c4:22:9c:91:12:4f:2d:0d:be:40:61:
ae:48:9c:4a:8e:a9:96:a2:38:1b:bc:5a:68:d0:2c:
53:78:b6:32:c6:7d:38:1c:c1:41:a6:28:99:a5:de:
50:1a:27:fb:51:05:b0:64:91:34:f1:9b:21:97:16:
18:09:91:4a:82:91:d6:4e:0d:bf:0b:c5:03:9f:41:
82:36:fc:4d:e4:53:f4:67:7c:7d:14:f9:a5:8d:ca:
8c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:28:63:DE:36:6C:C7:04:11:7F:A2:07:F7:1B:CE:06:AA:AA:CC:6B
X509v3 Authority Key Identifier:
keyid:58:D2:D2:71:5F:43:F7:47:BE:A7:62:DC:E1:66:BC:A4:B8:E9:65:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WNLScV9D90e-p2Lc4Wa8pLjpZes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/7ihj3jZsxwQRf6IH9xvOBqqqzGs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d67b7b-c798-4901-80f9-e3834516fc08/1/WNLScV9D90e-p2Lc4Wa8pLjpZes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.215.160.0-85.215.243.255
85.215.248.0/22
185.56.148.0/22
IPv6:
2a01:239:100::/40
Signature Algorithm: sha256WithRSAEncryption
7c:49:62:d0:df:8d:5c:70:94:ce:b2:70:0a:63:3c:fc:d5:9a:
91:86:29:8a:6b:44:c7:fd:73:78:5e:45:05:b4:a9:d4:9f:e9:
e3:bc:e0:a9:2a:39:82:b5:b6:cb:96:ca:2b:eb:b6:97:be:e8:
c4:9a:69:98:ac:c5:fb:84:0f:00:3d:e8:36:e8:3e:f4:a6:b0:
df:c0:49:00:67:c2:35:a7:c0:d8:dd:99:54:77:29:fe:65:9a:
4a:e1:ca:8f:bd:dc:b5:30:cc:e6:ca:1e:9c:b1:60:06:c8:65:
86:5b:6d:d8:41:a4:c0:f0:d4:71:a4:80:5c:3e:34:66:45:ac:
72:9b:85:c9:04:06:56:7d:49:3d:92:34:18:54:3a:8c:4a:da:
4b:1d:8c:d2:fc:81:c7:4b:01:38:1e:d7:51:6b:73:48:81:db:
ee:96:34:de:a3:c3:84:a4:a8:49:4b:74:9e:36:3e:84:5d:78:
43:69:2a:05:89:3e:1f:32:7b:34:14:8a:db:fd:c8:68:3f:70:
5b:fd:a5:99:af:bb:1f:e9:8d:19:0d:76:81:32:63:a4:d6:f3:
32:b5:75:03:50:26:90:c0:96:58:7e:7b:45:43:2b:fc:45:48:
a5:f3:e0:73:18:28:bc:0a:7a:d3:48:2f:a4:17:f1:1e:1c:f9:
7a:ed:48:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:22:37 2024 by rpki-client on console-ams.rpki-client.org