Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4B7fCI5PmideqhXQfNnk8xCM2Cs.roa
File: 4B7fCI5PmideqhXQfNnk8xCM2Cs.roa (raw, json)
Hash identifier: 9jCTGW3qOWOgFTFoYSDYEbaAjvvGkvIggQwZPfD+UKw=
Subject key identifier: E0:1E:DF:08:8E:4F:9A:27:5E:AA:15:D0:7C:D9:E4:F3:10:8C:D8:2B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 018854EC7E1F75A4AC5E8FBCE44DC3996E67
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4B7fCI5PmideqhXQfNnk8xCM2Cs.roa
Signing time: Thu 25 May 2023 21:59:24 +0000
ROA not before: Thu 25 May 2023 21:59:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49981
IP address blocks: 85.209.163.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:ec:7e:1f:75:a4:ac:5e:8f:bc:e4:4d:c3:99:6e:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: May 25 21:59:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e01edf088e4f9a275eaa15d07cd9e4f3108cd82b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:cf:1b:ce:c7:11:76:2c:c0:62:47:f5:8a:
cb:c7:0d:38:69:a1:21:d9:ba:36:53:cc:8e:2f:a4:
41:7d:a3:cf:b6:e6:9e:4c:87:91:bc:dd:03:8b:4b:
e8:f0:9f:ca:33:8b:26:cb:7b:3c:fc:3b:87:ee:bb:
2d:a9:68:5d:15:c8:3a:f9:12:8f:5b:8a:e2:5b:bf:
11:a2:bb:36:02:88:08:ee:87:bc:cc:69:47:ab:da:
29:66:1f:d5:07:fc:ab:e0:0f:ac:d7:fd:f4:ca:0f:
bd:4f:c4:7f:a9:50:be:58:e9:26:38:ec:12:e6:15:
98:52:4e:6f:73:50:1a:ee:70:4f:e1:67:86:e7:97:
ca:23:81:91:0d:93:72:0e:81:03:5d:07:b3:1a:33:
62:2b:f0:bd:92:03:3b:68:8e:8c:19:86:ac:bd:4a:
05:a0:0b:44:22:bb:c2:67:bf:00:75:fd:dd:3f:2f:
60:0e:54:a0:a8:74:06:95:92:b9:3b:61:e8:98:1e:
45:40:58:ad:e8:7c:a2:d0:8e:2a:10:a4:ae:cb:27:
26:f9:80:28:94:cb:99:27:c5:cc:78:5b:55:ca:21:
e8:ea:13:ae:8a:8d:24:b2:d8:99:c5:0f:c4:f7:77:
8d:20:51:aa:f5:10:2c:ff:3f:5f:22:5e:b5:de:10:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:1E:DF:08:8E:4F:9A:27:5E:AA:15:D0:7C:D9:E4:F3:10:8C:D8:2B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/4B7fCI5PmideqhXQfNnk8xCM2Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.163.0/24
Signature Algorithm: sha256WithRSAEncryption
b0:3e:30:ad:5c:71:52:51:c6:35:3a:c8:de:48:33:08:78:87:
64:bf:80:12:4f:63:b0:cd:88:74:0e:2f:70:a6:88:e2:ea:b7:
19:fc:f5:7d:f5:5b:e3:c7:f4:b2:d9:16:11:f1:3d:7d:65:f9:
3f:3e:cd:2e:82:24:ec:63:36:4d:c2:12:92:26:03:fa:57:43:
55:2b:d3:61:ee:12:5c:c3:e2:32:51:06:e3:da:ba:57:80:5e:
77:d2:11:86:9f:cf:1a:45:48:15:dd:55:3b:53:cb:ba:0b:a1:
51:0d:45:6d:b0:e9:1d:ce:34:25:69:3c:05:df:06:8d:d5:00:
54:64:7c:83:35:6d:9f:63:16:e4:f8:17:70:d3:0c:92:02:97:
4b:86:65:7b:98:0e:d8:c9:0b:20:75:53:02:64:73:38:29:5f:
5d:f3:d9:27:07:a4:f9:87:c2:1f:f7:5d:c3:0c:68:38:87:c3:
32:42:bf:25:23:7d:73:a4:15:a8:a8:08:70:11:ac:7e:1b:22:
d5:a7:83:cf:58:6b:aa:e8:67:79:88:e5:8e:28:fb:0d:4b:c1:
07:81:d9:ae:b9:c8:b8:2a:ae:11:76:8d:30:cf:32:5f:78:22:
35:d0:83:63:6d:8c:11:95:0d:5b:85:7c:6a:c4:2a:22:f8:04:
cd:89:0b:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:02:29 2023 by rpki-client on console-fra.rpki-client.org