Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xvkIzH9MU-q4Jg1W1URWlHtBCL4.roa
File: xvkIzH9MU-q4Jg1W1URWlHtBCL4.roa (raw, json)
Hash identifier: QOjrryZDyxpFvEh4xKA9eMXvvwtJcS26zXXZXMEchmQ=
Subject key identifier: C6:F9:08:CC:7F:4C:53:EA:B8:26:0D:56:D5:44:56:94:7B:41:08:BE
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01856E8B4BEFB6DDD1FA1DA9130DADBED037
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xvkIzH9MU-q4Jg1W1URWlHtBCL4.roa
Signing time: Sun 01 Jan 2023 18:15:00 +0000
ROA not before: Sun 01 Jan 2023 18:15:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 135752
IP address blocks: 85.208.107.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:4b:ef:b6:dd:d1:fa:1d:a9:13:0d:ad:be:d0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Jan 1 18:15:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c6f908cc7f4c53eab8260d56d54456947b4108be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:01:80:81:0e:2c:8b:07:d7:ea:61:1a:21:b1:
89:85:6e:49:50:bc:e1:55:f4:33:b4:0a:e4:4b:19:
19:c5:72:9b:93:a1:d7:13:12:8f:a8:dc:a3:96:64:
4c:7b:cc:4e:fa:d5:40:f6:b0:74:19:25:66:fe:7b:
63:d9:05:83:fb:94:d1:bd:8d:c7:95:76:65:36:64:
64:b5:b6:21:c3:ec:af:41:77:17:b2:de:a7:7f:04:
c9:92:94:70:19:89:5d:bc:3a:6a:b3:b1:cb:28:c6:
22:08:50:32:f0:24:0c:03:2e:49:ef:37:5a:2f:cf:
91:93:43:b3:5d:fe:be:34:52:d3:aa:95:4a:67:fe:
4b:9c:d4:08:ef:23:fe:5c:0c:d0:dc:52:f8:05:22:
3c:62:ef:b5:37:c6:94:4f:da:86:77:a8:fc:76:9a:
28:d8:ea:85:ab:81:81:21:a4:42:60:24:f8:00:83:
2a:ec:fc:95:90:e9:f7:2a:56:3b:e2:e7:3b:89:91:
1a:5e:5e:fb:07:79:10:d9:60:95:f7:3b:9f:9a:8c:
f6:1e:10:ad:79:af:02:ef:b1:2d:3f:2e:b8:83:02:
1c:32:f3:5a:74:a9:e2:7e:8a:1b:24:db:2c:5b:be:
66:06:f4:93:f3:73:f5:5a:2d:18:d8:6c:66:45:d5:
32:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:F9:08:CC:7F:4C:53:EA:B8:26:0D:56:D5:44:56:94:7B:41:08:BE
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/xvkIzH9MU-q4Jg1W1URWlHtBCL4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.107.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:72:38:6f:f3:e1:65:d7:3f:54:0d:8e:fb:fe:87:f7:de:ed:
4e:27:a1:46:d4:ff:90:eb:28:95:4d:11:78:ea:8e:01:d5:87:
d4:08:a8:6d:11:16:1a:bb:b6:c4:7e:e8:5a:b8:79:e5:d3:b1:
1a:57:d0:4b:dd:ad:12:0b:75:1f:e2:8d:c8:a9:25:c7:cd:c2:
b4:06:9f:35:ac:de:4f:ca:f0:bb:96:c1:03:d1:55:78:18:5b:
df:94:bd:86:a0:be:3c:68:9e:f7:2b:9d:9f:41:f4:16:f3:c4:
3d:83:a0:93:3b:a8:02:83:68:71:01:31:8d:28:04:d0:42:2c:
d8:d6:c7:e6:3e:5e:5f:10:69:fe:fc:18:99:19:1a:d9:45:60:
f6:c3:e2:09:71:50:6b:34:a6:bc:69:23:70:de:99:9d:08:cd:
f3:dc:25:fd:cd:3e:e8:2d:ee:e3:35:74:ac:b9:b9:cb:6f:9c:
1c:26:ad:c8:14:f4:9b:ad:f3:24:b4:d0:da:42:23:77:e0:08:
eb:db:db:1f:07:55:3d:24:75:3e:f7:02:c9:63:3b:76:46:88:
cc:c0:55:22:b6:ba:c7:ca:18:dd:91:d8:2d:74:29:a7:b1:af:
04:42:44:f0:bf:a2:ab:8b:10:09:14:17:03:60:ca:fe:29:06:
30:07:3e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:23 2023 by rpki-client on console-ams.rpki-client.org