Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bWfLDXzy3zpqswqttptcRQKaf8I.roa
File: bWfLDXzy3zpqswqttptcRQKaf8I.roa (raw, json)
Hash identifier: CehJpSoTi0DbCEQmg80BaoQapzn+JkqMXGTTRM0KGfo=
Subject key identifier: 6D:67:CB:0D:7C:F2:DF:3A:6A:B3:0A:AD:B6:9B:5C:45:02:9A:7F:C2
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF4970A3361397E78E19CF1338111
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bWfLDXzy3zpqswqttptcRQKaf8I.roa
Signing time: Sun 01 Jan 2023 11:15:12 +0000
ROA not before: Sun 01 Jan 2023 11:15:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203004
IP address blocks: 85.143.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f4:97:0a:33:61:39:7e:78:e1:9c:f1:33:81:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6d67cb0d7cf2df3a6ab30aadb69b5c45029a7fc2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:c1:4f:be:07:04:88:29:64:9b:96:03:9f:36:
9d:fb:87:9f:55:c2:92:55:97:d1:f3:0d:14:24:73:
18:62:26:22:f8:ff:a3:02:71:a9:b4:77:fa:64:30:
b6:2d:87:c1:de:97:24:d5:c0:ad:cc:5e:80:e4:44:
9e:f6:65:1f:13:ae:d2:2d:f8:a7:ba:b8:8d:ad:03:
31:da:f9:61:bc:c9:17:35:bc:37:44:19:ad:30:a5:
14:a6:86:43:3d:b2:d2:ac:99:27:a6:de:9a:c1:3e:
f3:d1:00:e9:28:e6:85:f1:08:cb:fe:f7:4d:af:78:
2c:e0:2b:ae:d4:f3:75:3b:bb:01:bb:c1:a8:e0:f8:
2f:89:5f:c4:7e:d1:6a:af:ab:31:45:0b:18:11:48:
df:f7:13:f0:73:4d:55:01:c2:28:6d:bb:24:83:b2:
de:a4:55:32:f0:15:04:3e:3e:8a:c7:9c:62:fb:ce:
c7:3c:e4:2d:fe:e2:f4:09:68:39:da:3e:9d:b5:a4:
01:0f:45:bd:4b:c2:8b:21:b3:3b:35:2e:bf:72:50:
78:ad:c0:6b:0a:2a:b3:cb:3f:54:46:80:70:73:a9:
95:46:c1:7d:f7:a0:14:67:e5:e0:3d:c7:74:2e:cf:
19:31:96:09:8e:8f:c3:bb:95:36:26:6c:e3:79:4d:
37:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:67:CB:0D:7C:F2:DF:3A:6A:B3:0A:AD:B6:9B:5C:45:02:9A:7F:C2
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/bWfLDXzy3zpqswqttptcRQKaf8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:38:b2:b9:b3:f4:aa:22:0d:2a:18:7b:4a:54:12:88:20:36:
70:3b:c9:87:9f:b3:0c:c7:1b:1b:06:1c:6e:08:fe:ec:2c:30:
6c:cb:ab:04:88:22:03:3a:60:bc:0b:e6:96:00:6c:34:41:fa:
39:7d:d0:fe:98:a4:c7:0b:a1:57:a3:8a:41:c3:4b:bd:04:97:
ff:f1:f4:73:c5:67:8c:2a:24:58:ee:6b:ba:1e:64:ff:82:af:
d1:d6:f7:eb:d2:8d:43:b8:00:75:11:c1:d0:b0:2a:9e:ba:39:
b5:05:22:53:62:ba:4c:8c:fa:88:52:51:58:3a:04:11:40:2e:
48:fd:c2:85:d1:cd:90:99:0b:74:06:44:a2:57:70:f3:3c:b7:
8e:ca:8b:7c:c3:1c:86:9c:d8:93:4d:31:a5:5f:21:22:9c:91:
64:7b:eb:87:0f:c3:d6:18:5b:bb:51:24:70:5d:eb:fe:c6:c8:
24:84:97:39:5a:3b:93:95:7e:1c:2d:bb:a7:e2:f7:8c:68:c4:
50:76:5b:eb:d1:55:d0:a2:d5:7e:58:f7:a0:df:de:46:0c:77:
d8:38:e4:ed:d8:f0:da:c0:c8:de:76:be:05:15:66:ad:51:7e:
31:65:70:a1:b5:38:5c:48:25:90:48:6e:84:74:6c:dd:03:b1:
d8:3d:d5:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org