Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9SDrU9uv9YIK1p5hYWNB1vlrEvc.roa
File: 9SDrU9uv9YIK1p5hYWNB1vlrEvc.roa (raw, json)
Hash identifier: mvLgTik9bC4axVdyhRU7mkfjXkH56V+S0shHr6o5Jy8=
Subject key identifier: F5:20:EB:53:DB:AF:F5:82:0A:D6:9E:61:61:63:41:D6:F9:6B:12:F7
Certificate issuer: /CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Certificate serial: 0185711560D35CDBA3D49BB86F07793EAE82
Authority key identifier: 1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9SDrU9uv9YIK1p5hYWNB1vlrEvc.roa
Signing time: Mon 02 Jan 2023 06:05:04 +0000
ROA not before: Mon 02 Jan 2023 06:05:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210831
IP address blocks: 85.219.213.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:60:d3:5c:db:a3:d4:9b:b8:6f:07:79:3e:ae:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1aca63df248b7adf3ddd07e8c2d3eedd02cef933
Validity
Not Before: Jan 2 06:05:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f520eb53dbaff5820ad69e61616341d6f96b12f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ee:9b:c6:af:0a:d2:ed:ba:b9:34:3c:18:e7:
cb:15:62:a7:ef:dd:4b:05:ce:85:75:94:ef:7a:79:
8d:97:18:a8:a5:36:bc:06:18:40:09:71:11:ec:f5:
51:a4:14:28:42:a5:4b:f4:66:d9:8c:0e:e6:ce:49:
30:d7:67:b1:18:ed:69:bb:96:58:8e:55:49:04:23:
8c:96:d7:37:75:93:44:e9:b8:53:5c:31:7e:46:45:
ec:a2:3e:60:df:5f:8a:f9:8c:b4:60:cf:d4:7a:72:
fa:14:73:b0:48:27:a3:f4:e0:37:19:4a:8d:c7:e3:
f4:59:b1:26:5e:67:e8:23:65:4f:32:4b:be:58:e5:
c7:28:40:dd:10:3b:d1:e0:3b:ba:b3:1b:7a:29:d3:
be:16:8c:41:5e:4a:75:fe:a0:33:78:0e:f2:16:6f:
d3:ec:1a:e0:cc:6f:6d:c5:64:6f:61:21:94:76:a3:
db:b5:33:5b:a9:1b:13:5d:56:ba:91:e5:8d:c1:49:
60:4a:d2:c0:d2:6c:57:ab:d1:8e:f2:7a:4f:b6:f4:
88:20:d0:a0:c9:b0:96:93:fc:db:a1:3d:5e:08:2a:
b4:40:44:5a:1e:bd:99:11:03:64:da:73:34:fe:82:
2e:e1:35:8d:b2:2f:a5:bf:41:73:2e:9b:57:b6:25:
3f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:20:EB:53:DB:AF:F5:82:0A:D6:9E:61:61:63:41:D6:F9:6B:12:F7
X509v3 Authority Key Identifier:
keyid:1A:CA:63:DF:24:8B:7A:DF:3D:DD:07:E8:C2:D3:EE:DD:02:CE:F9:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gspj3ySLet893QfowtPu3QLO-TM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/9SDrU9uv9YIK1p5hYWNB1vlrEvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1f6458-dc75-4add-ae72-91e3184bb0ab/1/Gspj3ySLet893QfowtPu3QLO-TM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.219.213.0/24
Signature Algorithm: sha256WithRSAEncryption
97:f8:fe:e0:c4:d0:0d:9f:a7:1b:ca:b1:b9:b9:a0:2d:a5:1d:
6c:0e:41:10:6e:94:34:67:2b:5e:72:28:9d:7c:60:1a:2b:55:
90:d2:8a:6c:05:17:e5:1a:69:fa:b8:21:3b:ae:01:66:ae:84:
c1:6b:da:a5:04:23:51:6a:5d:dc:34:55:a9:cf:84:71:64:77:
1c:2b:e6:c5:42:fd:1f:f4:2c:70:58:48:22:33:3c:a8:28:6a:
8a:22:fe:f1:51:33:09:01:da:dd:78:ff:6f:93:d9:d2:07:ff:
ba:51:e7:dd:d3:10:a3:d0:60:77:d3:65:a8:41:3e:10:f8:f6:
cd:2e:0f:b3:63:cc:94:8a:45:81:34:d4:21:d9:3d:24:25:03:
2d:f4:72:1c:42:75:a0:58:f9:2c:0a:a9:f7:31:04:d7:73:f0:
b1:78:da:19:73:c5:b4:b4:48:b0:8b:38:e8:42:6e:62:ee:7c:
e3:fb:17:a9:bc:50:b5:84:7f:98:f6:fb:4a:d3:30:79:9d:27:
6f:14:63:ad:0e:b0:82:7a:b2:99:94:5a:05:a1:b9:32:9f:fe:
a2:89:60:37:32:35:d8:02:4c:5c:3e:81:54:e8:17:ff:4b:b3:
ae:c5:54:15:96:25:71:b7:ef:60:b5:ef:25:a6:f3:85:fe:22:
77:5c:2c:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 01:41:22 2024 by rpki-client on console-ams.rpki-client.org