Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yHB_1_B7Wid9kjwyBbz8Ei9R9F4.roa
File: yHB_1_B7Wid9kjwyBbz8Ei9R9F4.roa (raw, json)
Hash identifier: 2w2KbIacTwo69EgC/dMaVSS35RipgdtOpWRUUtrwOM8=
Subject key identifier: C8:70:7F:D7:F0:7B:5A:27:7D:92:3C:32:05:BC:FC:12:2F:51:F4:5E
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF912536FDA5D2B1B155603609344
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yHB_1_B7Wid9kjwyBbz8Ei9R9F4.roa
Signing time: Sun 01 Jan 2023 11:15:13 +0000
ROA not before: Sun 01 Jan 2023 11:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210276
IP address blocks: 85.143.238.0/24 maxlen: 24
86.110.100.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f9:12:53:6f:da:5d:2b:1b:15:56:03:60:93:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c8707fd7f07b5a277d923c3205bcfc122f51f45e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:58:f3:a4:0f:20:06:20:8a:f9:87:53:bd:
01:03:42:7c:fb:64:d0:21:e3:35:cb:65:67:54:b8:
48:ff:fb:7b:a2:64:4a:63:c1:cb:8f:0f:b1:e6:dd:
4b:a0:76:d6:3a:6d:86:f5:4e:fc:46:2f:02:5c:8c:
d2:34:bd:da:55:93:b7:83:92:3f:bc:a5:a1:02:c9:
79:52:18:09:bb:c8:bf:90:41:d0:81:6c:8b:b3:6e:
39:92:5f:88:a5:a5:cb:3d:11:9d:bc:40:64:21:82:
8e:14:56:1a:d1:20:54:78:75:15:2b:79:e6:1a:a7:
a1:7e:fe:96:1a:d0:98:a2:72:32:52:b0:9e:e2:cc:
fb:37:3a:92:45:d8:c8:7e:f9:13:72:90:e1:36:df:
66:b2:69:c0:75:07:5b:b7:c1:2a:d6:71:55:ff:d7:
78:f1:c2:cd:00:bd:70:7e:e9:b1:cc:2a:0f:d5:93:
38:ba:54:8b:c9:17:28:0a:78:47:30:22:f3:40:f8:
46:7f:da:dc:fa:40:8b:c1:97:6e:3c:5d:93:c4:2d:
53:3c:b3:91:45:c4:26:5d:05:ad:c3:45:23:1b:d6:
73:7c:0d:91:10:6c:1b:38:b0:a6:da:6f:d4:90:0d:
5d:98:d5:a3:41:ea:76:dc:d2:ba:f5:99:46:73:74:
b3:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:70:7F:D7:F0:7B:5A:27:7D:92:3C:32:05:BC:FC:12:2F:51:F4:5E
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/yHB_1_B7Wid9kjwyBbz8Ei9R9F4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.238.0/24
86.110.100.0/24
Signature Algorithm: sha256WithRSAEncryption
84:c2:6e:a8:00:02:a0:cd:de:c2:0f:67:b9:41:ca:9f:70:58:
98:7e:d7:36:7f:60:b8:ad:09:28:63:49:bd:42:5f:c0:59:bb:
d6:34:d0:b2:6f:35:88:8a:94:5f:e9:4c:9f:b3:b3:ff:cd:59:
42:d7:a4:03:01:67:85:2e:45:c7:22:fb:f8:ad:ac:ef:1b:3c:
fd:28:8c:db:3b:0f:05:b3:f8:2e:3b:9e:7e:ff:80:96:90:30:
a6:41:10:53:0c:7e:67:8d:e9:71:69:c0:30:99:4f:4e:a8:13:
a8:d0:a4:2b:82:ec:bf:2b:c7:e9:a3:67:e5:5f:3b:bc:36:9e:
f2:4e:f3:96:91:b4:a6:0b:71:13:37:4a:37:c1:f8:17:88:40:
65:1f:35:92:d9:a7:61:3d:f1:4d:52:d4:39:fe:45:38:48:2b:
ec:20:72:12:61:7e:1d:37:a3:2a:fd:d7:fe:60:6c:c5:62:0c:
83:77:31:e7:dc:03:56:de:85:77:e7:ae:8a:41:0d:ee:1b:67:
8e:9f:32:83:a9:d1:d3:a7:ac:63:5a:f3:7e:29:d6:74:00:80:
d7:cc:ed:1f:c6:72:5e:2e:16:c0:98:ce:c7:23:c8:69:af:6e:
00:39:fa:f9:29:c3:3d:02:75:36:ab:5f:c7:d0:ba:ff:57:4f:
21:28:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:37:01 2024 by rpki-client on console-ams.rpki-client.org