Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1-8zO9od6cwhNwrn8tCsrkzw3biU.roa
File: 1-8zO9od6cwhNwrn8tCsrkzw3biU.roa (raw, json)
Hash identifier: 9qgP8+9mYO+/B/Rzg/ttxGfv4CrRSWqMKms4ulnCXXE=
Subject key identifier: FB:CC:CE:F6:87:7A:73:08:4D:C2:B9:FC:B4:2B:2B:93:3C:37:6E:25
Certificate issuer: /CN=93202129969576ce357fae26c9c7cf98a8250ea6
Certificate serial: 018BAF9C97C33121CE89BAA9E0E50DE8954E
Authority key identifier: 93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1-8zO9od6cwhNwrn8tCsrkzw3biU.roa
Signing time: Wed 08 Nov 2023 15:45:57 +0000
ROA not before: Wed 08 Nov 2023 15:45:57 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 1299
IP address blocks: 85.220.0.0/17 maxlen: 17
157.157.0.0/16 maxlen: 16
31.209.192.0/18 maxlen: 18
Validation: Failed, certificate revoked on Wed 13 Dec 2023 11:30:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:af:9c:97:c3:31:21:ce:89:ba:a9:e0:e5:0d:e8:95:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93202129969576ce357fae26c9c7cf98a8250ea6
Validity
Not Before: Nov 8 15:45:57 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fbcccef6877a73084dc2b9fcb42b2b933c376e25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:76:bb:fd:f0:b0:93:1b:2d:09:17:b5:41:31:
38:5e:c1:f7:15:a8:47:23:6d:a7:8a:b8:ae:f1:50:
f2:e5:78:a6:6b:fe:44:4e:a0:9e:88:62:7b:bd:fc:
4d:5f:93:8d:81:6a:39:19:8e:94:f9:81:a1:5f:b7:
6d:ad:23:40:9b:7e:9d:1d:a8:51:08:e6:b7:d7:37:
4c:51:55:97:43:ca:6f:29:5b:be:78:23:09:c5:5f:
5c:1e:32:5e:31:c8:55:76:56:14:fc:72:7c:46:8f:
05:dd:ad:bd:44:0a:31:e0:b5:6b:23:04:55:c9:a2:
7a:12:47:db:3a:aa:6b:72:18:e2:54:20:3e:eb:0a:
1b:f8:52:ee:bb:23:db:06:41:4d:2d:14:4d:25:1f:
d5:12:9f:00:c2:2b:af:f3:e6:b0:7c:62:44:75:f4:
c6:03:d5:e2:78:c5:bf:31:7a:37:3f:1d:1f:fd:2b:
5b:0f:60:12:fe:e0:4f:41:64:62:ca:b9:ac:c0:6f:
16:f0:fd:2d:10:4d:1e:8a:23:ed:ad:89:d7:81:a1:
6a:54:45:03:6e:6d:19:de:77:ec:14:b2:bf:25:ee:
33:42:54:d8:3e:01:01:1b:8c:19:b7:31:55:69:ee:
49:d7:cc:46:5e:73:a4:1d:11:d7:95:ca:38:4c:18:
1d:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:CC:CE:F6:87:7A:73:08:4D:C2:B9:FC:B4:2B:2B:93:3C:37:6E:25
X509v3 Authority Key Identifier:
keyid:93:20:21:29:96:95:76:CE:35:7F:AE:26:C9:C7:CF:98:A8:25:0E:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kyAhKZaVds41f64mycfPmKglDqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/1-8zO9od6cwhNwrn8tCsrkzw3biU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/d6e796-0e14-45b1-9cf3-5ad58abfbb1f/1/kyAhKZaVds41f64mycfPmKglDqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.209.192.0/18
85.220.0.0/17
157.157.0.0/16
Signature Algorithm: sha256WithRSAEncryption
20:a4:f6:61:a7:fc:10:4c:69:2a:e2:1f:a5:79:2c:71:95:e4:
29:1f:5d:eb:c7:63:ce:2f:2b:fb:c7:09:f7:2b:f9:85:0f:56:
95:82:b0:fe:71:61:c0:ec:19:ad:9a:df:87:57:85:02:b2:73:
fc:8c:2b:04:5f:bb:f6:2d:1f:1b:08:56:2e:50:fb:f1:67:1c:
ee:85:58:31:d9:ac:f1:f0:15:3a:5d:a1:a7:50:aa:13:9e:84:
9c:f1:a1:a0:d1:f5:16:1f:d5:1a:fe:43:e5:d8:af:39:c3:d9:
13:ed:c2:12:98:9f:67:84:8b:da:e8:c3:38:30:2e:99:ed:c5:
6a:7b:f1:4f:87:ab:cf:00:7d:a2:3a:55:c7:b6:25:12:42:5d:
2d:2e:cb:fa:78:fa:d2:dd:46:1e:cc:ee:94:d3:82:1e:9e:43:
b0:74:b8:84:bb:c5:e4:b5:c8:e5:73:75:16:31:ed:e6:02:92:
0e:f5:2f:bc:df:b9:f3:56:d0:a5:e4:06:a3:24:dd:4d:b5:2f:
61:10:43:9d:4f:17:03:5d:ef:f5:8c:99:db:73:1f:81:b1:f7:
bd:e2:1a:5a:8e:d3:49:8c:6c:6e:4c:4c:f3:3f:d1:3a:c1:e7:
04:3a:66:5d:d0:2b:53:da:02:94:bd:0c:5d:dc:1a:47:0d:4e:
61:d8:f0:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:52 2024 by rpki-client on console-fra.rpki-client.org