Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/D5ztFfufx0YTIYbKbNtRpM-S4l8.roa
File: D5ztFfufx0YTIYbKbNtRpM-S4l8.roa (raw, json)
Hash identifier: aa2uBm1E7fvphEB3mX+/IsMqBOmExCn8wGPhHnxiayQ=
Subject key identifier: 0F:9C:ED:15:FB:9F:C7:46:13:21:86:CA:6C:DB:51:A4:CF:92:E2:5F
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 0193077B9C02C064F3EDFDA979A4FC09CB36
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/D5ztFfufx0YTIYbKbNtRpM-S4l8.roa
Signing time: Thu 07 Nov 2024 16:36:01 +0000
ROA not before: Thu 07 Nov 2024 16:36:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 49505
IP address blocks: 85.142.0.0/21 maxlen: 24
85.142.40.0/21 maxlen: 24
85.142.48.0/22 maxlen: 24
85.142.64.0/22 maxlen: 24
85.142.72.0/21 maxlen: 24
85.142.80.0/20 maxlen: 24
85.142.96.0/22 maxlen: 24
85.142.100.0/23 maxlen: 24
85.142.112.0/22 maxlen: 24
85.142.128.0/20 maxlen: 24
85.142.212.0/23 maxlen: 24
85.142.215.0/24 maxlen: 24
85.142.240.0/23 maxlen: 24
85.142.242.0/24 maxlen: 24
85.142.244.0/23 maxlen: 24
85.142.246.0/24 maxlen: 24
85.142.250.0/24 maxlen: 24
85.142.252.0/22 maxlen: 24
85.143.40.0/21 maxlen: 24
85.143.48.0/22 maxlen: 24
Validation: Failed, certificate revoked on Fri 08 Nov 2024 10:39:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:07:7b:9c:02:c0:64:f3:ed:fd:a9:79:a4:fc:09:cb:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Nov 7 16:36:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0f9ced15fb9fc746132186ca6cdb51a4cf92e25f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:24:08:3f:b9:d4:bf:d1:16:9b:87:90:09:3f:
6b:69:3f:1a:2e:6e:f9:2e:a8:ef:b9:75:53:fb:76:
53:89:6e:be:18:41:7f:cb:d9:22:9a:b9:d3:15:0e:
cd:48:27:9d:59:34:7e:0f:8c:b8:3f:06:80:52:49:
54:dc:be:20:23:e9:e4:bd:67:7c:93:c0:d2:97:ee:
82:b3:f3:bb:70:9b:d0:86:09:5e:19:c2:d0:10:97:
72:ee:bf:a5:22:14:18:97:31:4c:4e:7e:1f:b7:7d:
4e:1e:b3:93:ed:20:da:9e:b2:53:ad:eb:67:05:98:
65:34:4d:70:c7:d8:ed:2e:ae:4e:4f:f2:f3:b1:d9:
d5:de:90:12:65:56:d2:0c:3a:2c:32:5c:e0:88:3d:
40:a5:bc:ea:72:d6:fa:0f:01:be:3d:d1:f1:d1:d6:
f5:ee:21:55:90:dc:48:02:5c:a1:51:a1:80:68:a5:
e3:63:8c:6d:4a:f4:00:e2:6c:20:2e:f1:33:3b:fc:
0f:cc:5d:37:11:ba:7b:69:a9:0e:af:98:b1:70:d7:
d3:43:db:85:ba:74:a7:ce:8f:29:43:23:3f:de:7e:
b0:09:59:dd:23:77:e7:e9:84:09:5b:5d:f7:6e:31:
82:80:e4:56:88:85:d0:49:06:f7:15:0f:81:86:3d:
f1:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:9C:ED:15:FB:9F:C7:46:13:21:86:CA:6C:DB:51:A4:CF:92:E2:5F
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/D5ztFfufx0YTIYbKbNtRpM-S4l8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.142.0.0/21
85.142.40.0-85.142.51.255
85.142.64.0/22
85.142.72.0-85.142.101.255
85.142.112.0/22
85.142.128.0/20
85.142.212.0/23
85.142.215.0/24
85.142.240.0-85.142.242.255
85.142.244.0-85.142.246.255
85.142.250.0/24
85.142.252.0/22
85.143.40.0-85.143.51.255
Signature Algorithm: sha256WithRSAEncryption
5d:08:22:8b:0e:7e:5c:b1:fe:d4:cc:00:0a:4a:7d:25:e9:2f:
13:a9:83:e1:9f:c2:de:a7:13:ae:35:db:52:52:0c:33:06:60:
16:19:39:65:3c:cf:57:27:1f:ac:b8:d5:67:7f:52:8c:b3:a9:
7e:e4:a8:76:55:b5:07:3c:58:a3:94:fb:c3:6d:82:49:11:22:
64:35:b7:94:50:6f:e7:ba:a6:c8:1c:2d:39:91:f5:ca:a3:1f:
3c:5e:24:df:7c:82:02:04:81:78:f8:16:ed:35:de:3d:c9:62:
29:b0:77:77:7f:ec:6c:ec:84:2a:ee:6c:42:d7:47:a5:38:e9:
bc:ab:86:66:4e:3e:e7:27:31:eb:00:ec:0b:ae:01:c7:0d:1c:
cf:f5:e1:9a:a5:68:8b:8c:3b:1e:98:5e:06:aa:5c:24:44:6f:
b4:89:c3:67:dd:a0:7b:5c:05:ef:e8:c2:11:89:5e:5f:c0:3d:
fe:29:80:a8:b7:42:09:a7:cd:36:ac:5e:57:3b:75:9e:91:c7:
60:92:dd:b8:7f:71:b4:7b:d0:63:72:04:4a:45:95:8a:c5:e9:
00:70:7d:6a:dd:27:0a:69:8c:6a:4b:6e:51:a6:44:3b:1a:f0:
11:a1:9d:1a:8c:15:ed:6f:c3:ba:60:d0:e8:80:6b:81:b5:b1:
1f:44:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 13:24:13 2024 by rpki-client on console-ams.rpki-client.org