Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H0r5WfKvbkN103JcTVvfuRRAFTE.roa
File: H0r5WfKvbkN103JcTVvfuRRAFTE.roa (raw, json)
Hash identifier: DJL6uvXtVteQegcqqJgSrCWx4D14mu4U7gLNE+YqOdE=
Subject key identifier: 1F:4A:F9:59:F2:AF:6E:43:75:D3:72:5C:4D:5B:DF:B9:14:40:15:31
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 018830B47B3AFA28F7D3E03FF82EECF3924A
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H0r5WfKvbkN103JcTVvfuRRAFTE.roa
Signing time: Thu 18 May 2023 21:11:54 +0000
ROA not before: Thu 18 May 2023 21:11:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9206
IP address blocks: 85.143.224.0/22 maxlen: 22
85.143.228.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 11 Nov 2023 10:22:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:30:b4:7b:3a:fa:28:f7:d3:e0:3f:f8:2e:ec:f3:92:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: May 18 21:11:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f4af959f2af6e4375d3725c4d5bdfb914401531
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c2:e1:8b:37:28:5b:7c:e9:fb:58:62:b4:c5:
71:2e:bd:43:06:09:13:ee:f8:73:0e:19:af:1f:f1:
35:b0:cc:58:a1:b7:0c:a8:e5:fc:25:85:77:e0:21:
cb:6b:57:0b:7f:65:79:22:d8:c8:8f:ff:1d:a3:e8:
2b:d0:04:f8:50:20:3d:79:99:9e:7a:21:a1:31:e9:
6e:93:31:eb:5b:40:99:89:a2:1c:95:20:ec:dc:a4:
f2:20:3a:73:97:46:36:90:6c:2f:be:18:af:9f:b9:
25:77:75:e3:be:85:83:fb:e6:fd:29:0c:63:82:ac:
42:a5:e7:b4:a1:9e:79:dc:bb:79:98:fd:68:80:75:
a6:03:63:7a:dc:54:da:9b:89:5f:38:d1:84:19:3d:
32:a7:d0:4d:25:3f:34:37:7c:0d:ff:69:6c:b1:0c:
1b:6e:70:51:79:5f:d6:13:b5:47:4d:31:92:cf:75:
b3:94:08:d9:9a:5a:d7:0f:6c:52:b7:33:ab:a9:b0:
49:13:69:2f:30:6d:7e:8d:c6:d0:9e:c1:fd:43:e2:
a3:90:7c:38:02:05:c6:35:7d:76:7f:e5:1b:71:78:
4f:46:80:e1:94:9d:a3:9e:40:f5:5f:c7:6a:3c:92:
6e:d6:e9:7f:26:f1:dc:9b:11:a8:58:d1:5f:03:84:
f7:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:4A:F9:59:F2:AF:6E:43:75:D3:72:5C:4D:5B:DF:B9:14:40:15:31
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/H0r5WfKvbkN103JcTVvfuRRAFTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.224.0/21
Signature Algorithm: sha256WithRSAEncryption
16:95:13:82:5d:53:15:e5:30:a2:aa:b6:a6:3a:69:1d:9e:52:
b9:35:ff:ce:13:e5:a2:1b:2f:2b:c3:aa:0e:26:24:3a:46:d4:
2a:98:83:45:9c:69:ef:1c:73:24:6e:f5:90:70:44:15:59:bb:
ec:0e:1e:2d:17:41:88:73:d8:09:2d:2f:37:b2:48:ff:f4:e2:
72:5f:a5:33:3d:fe:a8:fe:d0:e2:6c:77:43:70:0d:da:bc:74:
da:11:cb:95:22:1d:02:16:f9:97:c5:75:a7:3e:2c:80:ac:10:
ec:44:f1:c9:e1:a2:97:07:a6:25:b7:63:fd:87:a7:5e:b7:f7:
4f:c0:b4:93:a0:88:b3:1b:fc:8c:40:dc:ef:29:d0:b3:27:6a:
08:ac:52:32:f3:5a:6c:5e:7b:94:83:f3:40:c6:28:c6:be:05:
d3:2d:6c:a7:28:ea:ec:4b:35:94:dc:8b:f5:aa:45:e3:35:2b:
11:6c:a7:e2:56:38:08:a5:f0:74:ce:5f:16:f7:26:f4:60:0f:
c6:c3:34:c1:83:53:6b:c9:f3:8f:cd:09:b8:f1:2e:02:f6:d3:
70:9d:a8:47:33:67:93:63:9f:a8:cc:05:ee:8b:b0:72:a4:17:
73:9a:65:51:c0:b0:24:11:7d:04:41:fd:1d:c2:2b:63:aa:43:
ae:7b:5b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org