Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zs2egDSnYstZn38sxcpyezNVugM.roa
File: zs2egDSnYstZn38sxcpyezNVugM.roa (raw, json)
Hash identifier: lT6Z4yd5M+2XiRdk5mT+BJEkH351+OPY24+zlgcDoeo=
Subject key identifier: CE:CD:9E:80:34:A7:62:CB:59:9F:7F:2C:C5:CA:72:7B:33:55:BA:03
Certificate issuer: /CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Certificate serial: 01856D0AF7061C5211171D44270B89A74B4B
Authority key identifier: 38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zs2egDSnYstZn38sxcpyezNVugM.roa
Signing time: Sun 01 Jan 2023 11:15:13 +0000
ROA not before: Sun 01 Jan 2023 11:15:13 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207259
IP address blocks: 85.143.246.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 22:31:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:0a:f7:06:1c:52:11:17:1d:44:27:0b:89:a7:4b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=38b22023b6ead4c29683a9fed4493d03dee2c685
Validity
Not Before: Jan 1 11:15:13 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cecd9e8034a762cb599f7f2cc5ca727b3355ba03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:09:7e:00:f0:1f:6f:9c:a4:a5:bc:b1:89:56:
fb:39:0a:0b:d3:f9:60:dc:0c:20:bd:5b:a3:3e:45:
00:d0:08:9f:e8:49:4d:29:68:6e:e8:b8:38:49:1b:
03:17:60:70:ee:ef:30:f0:52:bf:37:9b:5a:e2:eb:
14:f9:9c:99:d6:a6:92:08:e9:2e:26:cb:6f:e7:1c:
da:b6:54:b9:05:fc:e9:d4:63:45:c7:cd:9c:72:9a:
44:4f:65:4e:f2:b9:e5:e4:15:fa:2e:2f:ff:8f:1b:
ab:b5:a4:18:54:0b:29:a2:a0:31:3a:49:49:1f:0a:
6b:64:fc:8a:ce:2e:57:97:40:7c:e8:ed:f9:c8:2a:
4a:3a:76:f1:b1:1c:7d:b3:95:03:0a:56:97:b7:04:
53:cb:1a:ff:f0:57:95:f6:2b:03:41:dc:c5:0f:78:
ba:df:7a:f1:ce:f3:ad:7d:f6:9c:65:3e:f1:57:f0:
96:da:7c:f5:e2:ac:92:b9:4b:e4:33:0f:79:42:41:
90:e9:5e:95:b0:79:ca:7d:c6:eb:fa:fc:00:a9:7b:
0c:1a:43:6a:94:43:ba:d5:14:c7:28:e1:01:cf:8b:
fe:fc:b2:8f:e7:b4:bf:09:df:28:9b:95:87:a5:81:
9d:c6:c1:f3:04:e3:0e:b4:2b:52:ed:36:50:de:67:
51:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:CD:9E:80:34:A7:62:CB:59:9F:7F:2C:C5:CA:72:7B:33:55:BA:03
X509v3 Authority Key Identifier:
keyid:38:B2:20:23:B6:EA:D4:C2:96:83:A9:FE:D4:49:3D:03:DE:E2:C6:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OLIgI7bq1MKWg6n-1Ek9A97ixoU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/zs2egDSnYstZn38sxcpyezNVugM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/8813f5-4e7b-4d51-b5f3-40d95bd33fcb/1/OLIgI7bq1MKWg6n-1Ek9A97ixoU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.143.246.0/24
Signature Algorithm: sha256WithRSAEncryption
49:a3:c1:51:42:d3:2d:41:f7:0f:8b:7c:fa:8f:de:c4:c0:13:
7b:4f:7d:17:6b:a0:5f:cd:e2:83:34:c6:09:d9:2a:90:bf:b2:
92:b9:b5:a4:ea:02:4f:42:32:20:6d:4c:81:79:3a:d1:5d:ed:
2a:48:12:4c:15:ba:f2:13:6c:03:a9:77:06:72:7d:98:a5:3c:
68:4b:e8:d6:ad:c8:8d:1a:96:1c:8f:b3:14:d7:a9:29:ed:74:
15:86:4d:c0:e1:eb:d8:18:d1:b7:ea:9d:85:1a:4c:89:41:68:
3f:b6:64:96:3d:4d:95:c9:d2:e0:5e:7c:20:d5:70:6a:79:af:
d7:83:3b:97:40:41:b6:bf:96:d0:4d:f8:f9:36:44:71:82:bc:
8c:3a:13:ed:e9:d4:6a:7d:b8:1f:49:25:dc:fb:26:38:9a:7f:
8a:e9:b9:84:8c:ba:45:f9:50:54:e3:b8:66:95:bf:ac:1d:f0:
0c:5c:d2:12:28:9a:8f:a5:71:b1:4e:ab:17:a2:87:c2:2c:89:
71:3e:6d:23:8d:ef:9c:c6:c6:46:62:17:43:5f:1f:b6:68:49:
91:0c:11:b3:58:98:9c:1f:e3:b2:13:62:1d:c1:13:de:dc:7d:
29:64:6e:b1:b1:78:1a:f2:8f:cb:cf:fe:39:29:02:19:d6:2f:
d4:e8:e1:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:48:46 2024 by rpki-client on console-fra.rpki-client.org