Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/mkTtOZ56Ypwa5EBBRFOGZ1avSfA.roa
File: mkTtOZ56Ypwa5EBBRFOGZ1avSfA.roa (raw, json)
Hash identifier: WQy+dOfPPPGr6GLrzj2xOv281Jz+oxvXA3J6QxFQJFA=
Subject key identifier: 9A:44:ED:39:9E:7A:62:9C:1A:E4:40:41:44:53:86:67:56:AF:49:F0
Certificate issuer: /CN=22f344a63dcb70e89057deb8e2761dc45165881a
Certificate serial: 01856FF96723853C7525CDA36B382FCB91D5
Authority key identifier: 22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/mkTtOZ56Ypwa5EBBRFOGZ1avSfA.roa
Signing time: Mon 02 Jan 2023 00:54:53 +0000
ROA not before: Mon 02 Jan 2023 00:54:53 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209372
IP address blocks: 85.28.57.0/24 maxlen: 24
85.28.58.0/24 maxlen: 24
85.28.56.0/24 maxlen: 24
85.28.59.0/24 maxlen: 24
85.28.60.0/22 maxlen: 22
Validation: Failed, certificate revoked on Tue 24 Jan 2023 06:35:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6f:f9:67:23:85:3c:75:25:cd:a3:6b:38:2f:cb:91:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22f344a63dcb70e89057deb8e2761dc45165881a
Validity
Not Before: Jan 2 00:54:53 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9a44ed399e7a629c1ae440414453866756af49f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:99:fc:ea:b6:5c:6c:66:93:ba:3f:8b:bf:92:
2b:4b:1a:5a:44:2c:3c:6d:b4:1c:73:c7:c1:7e:f8:
c5:2e:d0:e3:4c:c6:ee:3e:40:83:ec:c0:de:f8:bf:
bb:f0:37:64:41:b2:a1:48:29:d3:93:f5:94:bc:48:
20:a5:9f:a2:4d:72:58:a1:0d:79:b3:87:98:c9:8c:
51:fa:26:0f:3d:ce:aa:2f:90:29:dd:02:3c:32:1e:
27:07:4c:f3:41:1f:ef:be:a5:4f:c3:7c:39:8d:d2:
32:d9:d1:7d:90:93:b4:92:5e:87:1b:01:d5:5a:1d:
fc:43:87:bc:d5:e4:f7:38:a3:d9:1b:99:47:94:fa:
9b:b0:0c:09:f7:79:b9:3c:2b:bb:47:ac:b2:c0:87:
8b:88:a3:30:8f:cb:ef:7c:7d:e3:84:59:61:f7:86:
68:cc:d1:b5:11:3c:0e:ab:2f:0f:36:ec:b0:8b:77:
9b:ed:a0:ee:a9:2e:03:3d:b4:0d:76:d1:a9:05:2b:
63:7b:4c:b7:20:3d:d9:cb:22:d9:78:3a:54:a6:97:
dd:04:97:5a:eb:16:7f:b8:9a:90:a2:9a:96:ec:e9:
30:ff:70:61:1a:b2:7e:e5:ca:53:b0:31:b4:05:2e:
d0:64:32:a2:c9:1d:80:0c:29:cb:d2:be:68:5c:02:
84:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:44:ED:39:9E:7A:62:9C:1A:E4:40:41:44:53:86:67:56:AF:49:F0
X509v3 Authority Key Identifier:
keyid:22:F3:44:A6:3D:CB:70:E8:90:57:DE:B8:E2:76:1D:C4:51:65:88:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IvNEpj3LcOiQV9644nYdxFFliBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/mkTtOZ56Ypwa5EBBRFOGZ1avSfA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/5360e7-f02a-4737-99c7-febb64b5e164/1/IvNEpj3LcOiQV9644nYdxFFliBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.28.56.0/21
Signature Algorithm: sha256WithRSAEncryption
8d:47:de:aa:03:89:2a:f8:a6:cb:7c:e5:8a:25:9f:a7:69:6b:
60:c8:ba:0c:0c:6c:01:97:29:3e:1d:df:46:92:4d:43:22:3c:
be:06:2d:df:dc:cd:2a:23:be:08:56:08:a6:81:64:53:1a:5e:
77:c8:6a:85:0c:c8:20:8a:7f:f9:13:90:dd:a9:27:e5:4f:43:
c5:b0:e6:3c:13:23:9d:26:83:47:33:08:70:94:e3:e4:72:97:
93:a2:73:a5:9f:8b:ca:cf:90:e2:d1:d2:11:20:aa:e5:33:4a:
30:bf:43:0c:15:5c:66:3c:94:54:d5:b7:44:ae:d8:9f:93:22:
9c:f9:dc:c9:a1:e6:ac:e6:83:24:c5:dd:f8:5f:87:5d:d7:d1:
50:b4:72:21:25:0f:b7:29:d4:35:1a:59:32:93:e5:c4:15:5f:
69:5c:dd:ff:6e:b7:a8:5d:1e:99:54:fa:b7:e3:1e:bc:3b:e5:
b3:95:66:90:1a:01:a2:f7:d1:cf:65:b5:47:8f:07:0f:f2:94:
51:6b:91:dd:08:dd:40:e9:80:f7:82:3e:5f:59:e0:e8:8e:c0:
64:54:bd:46:fb:3c:ab:e8:81:22:72:c8:b1:6d:8e:f4:d0:d4:
5d:8a:6d:6e:5d:89:55:35:79:66:62:40:94:75:ca:3c:ce:5c:
80:15:08:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:50:55 2024 by rpki-client on console-fra.rpki-client.org