Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ude8l3zwzZXnXZDYLB7vXPjeKI.roa
File: 2ude8l3zwzZXnXZDYLB7vXPjeKI.roa (raw, json)
Hash identifier: Ei5TCIYOEpc6FtKMTuHXCbLOf7kFRTMZOyWJy1A2ufk=
Subject key identifier: DA:E7:5E:F2:5D:F3:C3:36:57:9D:76:43:60:B0:7B:BD:73:E3:78:A2
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4E2A8CA901161ADE7DB9D3B9376F
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ude8l3zwzZXnXZDYLB7vXPjeKI.roa
Signing time: Sun 01 Jan 2023 18:15:01 +0000
ROA not before: Sun 01 Jan 2023 18:15:01 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203496
IP address blocks: 85.208.104.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4e:2a:8c:a9:01:16:1a:de:7d:b9:d3:b9:37:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:01 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=dae75ef25df3c336579d764360b07bbd73e378a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:34:0d:ae:ee:07:8b:52:16:bd:48:3c:5b:9c:
ea:b3:b9:fe:42:db:09:15:af:81:57:99:ce:9c:54:
c6:5e:df:d6:31:cc:ad:c9:3d:fb:43:af:b0:24:de:
4f:bb:ef:00:34:f2:65:f5:4d:e9:ed:6f:dd:b9:3c:
90:f2:8f:96:8d:e1:35:fe:d7:28:af:5b:01:ca:ee:
51:e9:19:71:42:4a:44:d0:12:ae:53:36:cb:71:ae:
f6:2b:9c:07:c0:fa:17:3a:a3:da:19:79:80:0a:b0:
06:16:18:b6:a7:ce:6e:76:b7:be:71:ac:a4:95:38:
62:a4:ca:20:5a:50:0d:0c:30:b1:3f:73:9c:6f:9d:
5d:8f:e6:08:a9:74:40:70:2a:ce:d7:6a:4c:ae:e9:
60:28:2a:0a:c1:47:1f:0e:e5:e6:fe:18:c6:b6:34:
50:29:ea:82:b6:12:37:ac:5c:74:5b:f4:53:b5:a6:
b9:a8:57:62:bf:97:95:af:eb:7e:a9:60:a4:f5:26:
dd:73:6e:07:6e:1b:b5:73:32:20:59:3e:f8:01:96:
a2:c9:4c:ff:f3:cf:af:66:2e:59:d4:1d:70:99:d7:
e8:6f:d5:90:e1:1e:91:c4:c9:aa:88:c5:56:f3:35:
1e:ad:97:b1:43:a3:d7:c0:d7:6c:08:ec:16:d1:bc:
0c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:E7:5E:F2:5D:F3:C3:36:57:9D:76:43:60:B0:7B:BD:73:E3:78:A2
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/2ude8l3zwzZXnXZDYLB7vXPjeKI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.104.0/24
Signature Algorithm: sha256WithRSAEncryption
03:58:c2:33:63:aa:fc:01:30:07:05:b7:69:0c:67:b9:1e:22:
7f:26:26:f2:74:6f:ea:05:ae:91:cb:6e:0a:96:3d:6a:72:dd:
88:68:2a:ae:bb:9c:e7:30:4f:5d:88:c6:69:b7:ff:38:73:4f:
b4:90:87:3b:48:94:7d:26:5f:c0:b7:7a:d4:1d:5d:b7:1e:13:
35:77:18:57:25:f3:83:f5:f7:84:ee:5c:84:00:56:32:69:73:
b0:4d:6d:3b:8e:fe:1f:fc:49:38:d0:4d:d6:6e:9d:54:30:5b:
b0:69:e7:10:ee:66:dc:72:24:0d:7c:83:f5:ba:5f:05:de:06:
19:da:b9:d8:32:16:01:d5:93:4f:92:e5:2f:25:06:85:9b:94:
6c:d0:8d:b5:96:07:29:01:53:41:e9:06:37:7a:af:07:c7:e2:
ca:d9:e6:a0:40:35:6e:c6:1f:fc:95:9e:b7:bd:7c:8d:77:4e:
8e:22:ca:75:70:ae:1f:a0:cb:c4:ec:80:d6:c0:dc:ca:89:9e:
7a:d4:cc:30:03:e3:6e:eb:05:b2:0b:e2:70:50:63:b2:79:cb:
7c:2f:b0:06:3a:8c:80:e5:9c:ad:45:ca:03:4f:36:b5:d4:32:
24:ac:f4:88:de:4b:1b:fd:d5:ba:a4:4b:07:11:55:54:d1:1e:
af:34:84:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:28 2023 by rpki-client on console-fra.rpki-client.org