Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/xWpqSCAOamhaAX2Bv_oUUarBeDU.roa
File: xWpqSCAOamhaAX2Bv_oUUarBeDU.roa (raw, json)
Hash identifier: xWRTkJnoiTg8r25NT82PjRK+3axn8sf+pu2Ca/qdvak=
Subject key identifier: C5:6A:6A:48:20:0E:6A:68:5A:01:7D:81:BF:FA:14:51:AA:C1:78:35
Certificate issuer: /CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Certificate serial: 0185701536ED48D9C35981970C324F73E63E
Authority key identifier: DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/xWpqSCAOamhaAX2Bv_oUUarBeDU.roa
Signing time: Mon 02 Jan 2023 01:25:16 +0000
ROA not before: Mon 02 Jan 2023 01:25:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 44395
IP address blocks: 85.159.113.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 24 Jan 2023 08:34:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:70:15:36:ed:48:d9:c3:59:81:97:0c:32:4f:73:e6:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dff5cc4848943b4fe89d2ce71fdc1e4ff7d7f3e3
Validity
Not Before: Jan 2 01:25:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c56a6a48200e6a685a017d81bffa1451aac17835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:70:61:39:f5:f4:52:b5:7c:7f:5b:d8:4c:63:
47:f1:82:9a:2d:a8:27:05:68:ae:8f:6f:70:dd:a6:
da:48:11:07:53:ec:61:ba:bd:80:cb:c3:c1:b3:bb:
48:40:14:a2:3f:ba:7d:44:ab:68:d8:13:fd:6d:f5:
13:89:3b:cc:1e:fb:e7:39:fd:54:a5:83:40:3d:10:
a5:10:54:60:9a:1b:eb:e4:7f:33:23:b9:6c:f9:18:
c2:ed:01:c6:16:5f:9f:8c:14:9d:be:b7:15:e2:ad:
2b:49:32:f7:c7:f3:50:e2:37:3e:0a:96:39:c7:68:
74:95:c8:de:4c:dd:cd:6e:82:9e:f9:b0:fb:50:b3:
d0:dc:d2:62:cf:5b:06:7b:2a:36:8e:b4:25:71:82:
0a:c7:3e:9d:ca:79:b3:d3:cd:38:1f:77:bb:a6:82:
6f:17:58:83:1d:c2:94:bd:37:48:fd:27:7a:c8:13:
c4:82:f5:c3:1d:79:72:34:58:98:9d:b3:05:9b:62:
fe:73:2c:8a:a4:74:96:dc:4e:4a:b4:0e:89:9f:5c:
6a:5f:05:83:c1:a6:7c:dc:bc:29:e9:f7:9b:98:ff:
73:84:12:0e:1c:4c:6e:86:13:92:1d:f5:67:9c:94:
c1:61:70:7b:0c:39:0e:e7:21:cf:a7:9d:9d:32:16:
91:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:6A:6A:48:20:0E:6A:68:5A:01:7D:81:BF:FA:14:51:AA:C1:78:35
X509v3 Authority Key Identifier:
keyid:DF:F5:CC:48:48:94:3B:4F:E8:9D:2C:E7:1F:DC:1E:4F:F7:D7:F3:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_XMSEiUO0_onSznH9weT_fX8-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/xWpqSCAOamhaAX2Bv_oUUarBeDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/f419eb-2331-4bc7-8f1b-2689c85878ad/1/3_XMSEiUO0_onSznH9weT_fX8-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.113.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:a3:54:5a:35:8f:fa:f1:e3:57:f1:3c:35:7d:8e:e7:35:fc:
bc:4d:2f:47:b1:57:7b:2f:7d:ac:7b:2c:e4:fe:1a:39:87:eb:
07:b8:2b:bc:26:d4:11:61:21:fc:32:12:94:72:db:1d:43:09:
e3:b2:03:23:c3:30:4a:ec:33:da:8c:ab:a6:97:95:9a:4e:8a:
9d:6d:c7:60:65:45:b2:34:a0:7c:b0:01:49:88:e6:3c:ac:cb:
38:7e:50:41:67:cf:e0:dc:3b:90:af:7b:ea:d4:fd:83:0a:cc:
40:9f:a7:5a:82:58:15:79:ac:4d:ef:ec:c2:ee:17:77:e6:4b:
39:0d:d4:94:4b:a2:a5:98:d6:2a:ee:2e:68:20:18:e9:93:43:
78:47:71:fb:66:bd:dd:4c:32:d7:15:ad:f5:90:e6:22:69:e0:
61:3e:24:70:cf:78:bf:91:97:60:6e:04:03:dc:26:f4:2c:16:
92:ae:70:18:94:35:65:84:90:bf:aa:f0:e1:03:8a:04:fe:71:
28:2d:c3:7c:50:23:d8:7f:d2:49:59:e3:fd:8a:7d:4e:68:c1:
12:24:79:ee:3b:a5:ec:8b:17:49:75:aa:32:d0:18:79:83:c2:
01:a6:d3:5c:78:74:75:cf:c4:4a:35:80:c5:2c:51:63:f2:1e:
3b:28:36:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:38:16 2024 by rpki-client on console-ams.rpki-client.org