Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/haoyDgNQajfv8btGm9mbDNUm2v0.roa
File: haoyDgNQajfv8btGm9mbDNUm2v0.roa (raw, json)
Hash identifier: WXbowI/8yWU5kev0uzZha+pN9GwsM2eJNqddqjWKgwg=
Subject key identifier: 85:AA:32:0E:03:50:6A:37:EF:F1:BB:46:9B:D9:9B:0C:D5:26:DA:FD
Certificate issuer: /CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Certificate serial: 0193006B725753F481C7C1873FE45109D2E4
Authority key identifier: CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/haoyDgNQajfv8btGm9mbDNUm2v0.roa
Signing time: Wed 06 Nov 2024 07:41:01 +0000
ROA not before: Wed 06 Nov 2024 07:41:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 216246
IP address blocks: 85.192.30.0/24 maxlen: 24
85.192.56.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Nov 2024 13:10:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:00:6b:72:57:53:f4:81:c7:c1:87:3f:e4:51:09:d2:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca1c7571596e444aa32371cbab724d46d3c3c52c
Validity
Not Before: Nov 6 07:41:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=85aa320e03506a37eff1bb469bd99b0cd526dafd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:4c:d4:85:fe:eb:35:c3:5a:f2:14:53:d8:
b7:22:7f:0d:89:c1:97:bc:eb:fe:22:60:60:bc:f1:
2f:b7:44:4b:ae:dc:17:7a:79:af:99:83:d1:a9:cf:
03:a1:75:79:88:94:dc:be:79:9c:67:2e:4c:4f:59:
4d:67:1d:13:02:62:f7:1e:09:67:74:8b:15:25:7e:
e5:fe:02:10:a1:f1:c2:18:8f:85:46:9a:e5:8a:4a:
bd:03:d6:c4:33:d6:aa:ba:19:b2:ad:89:43:d4:57:
02:be:51:f1:4e:7a:49:cf:1f:f2:8d:a5:9a:40:b0:
46:15:71:16:5a:4e:59:eb:df:27:05:07:f0:61:72:
55:b7:07:e9:65:10:f6:a2:44:fc:38:fe:c8:22:6a:
30:2e:4e:59:56:7a:ea:07:35:0a:59:2c:72:e4:9d:
d0:5e:eb:94:2e:0b:e6:ff:d6:04:00:67:49:9f:47:
27:2c:5c:ea:9f:09:6e:20:e9:b6:04:57:8a:c4:af:
c1:5b:b1:ed:a3:92:b8:ad:0d:69:56:80:4e:ed:2d:
f5:e9:d2:d0:6a:b8:e1:fc:6c:3c:1d:c7:d6:83:b1:
f0:0f:ae:4e:05:45:17:2b:13:68:32:d4:7d:88:63:
ad:63:74:7a:45:79:c2:5e:33:d9:ce:94:2f:75:66:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:AA:32:0E:03:50:6A:37:EF:F1:BB:46:9B:D9:9B:0C:D5:26:DA:FD
X509v3 Authority Key Identifier:
keyid:CA:1C:75:71:59:6E:44:4A:A3:23:71:CB:AB:72:4D:46:D3:C3:C5:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yhx1cVluREqjI3HLq3JNRtPDxSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/haoyDgNQajfv8btGm9mbDNUm2v0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3362c6-a03a-4f9f-a091-b762c0175f27/1/yhx1cVluREqjI3HLq3JNRtPDxSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.192.30.0/24
85.192.56.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:90:5c:7d:a7:83:63:0f:d8:42:c0:fb:3b:3a:f5:ee:98:c8:
af:45:eb:e4:f2:f7:3d:5a:d4:26:68:34:c1:46:1d:0b:4b:0e:
0f:73:e2:10:5e:d9:25:1b:51:cc:0e:61:63:45:a4:91:a5:14:
21:da:e7:7a:2c:55:ae:bf:c4:b6:d0:7f:fa:b5:65:e1:f8:ee:
17:cd:a0:27:90:bc:29:ec:0f:5f:2e:1a:20:5d:5b:57:e2:b0:
d0:65:47:54:20:29:1d:b2:fc:4e:75:2d:ab:26:a9:94:c8:57:
35:33:e8:b1:8e:0c:24:33:bd:0a:7e:a6:f3:ed:5f:44:00:e9:
93:ca:2a:28:bc:32:4e:93:5e:21:a3:ea:48:fb:0f:e7:e2:cd:
07:a3:87:66:5a:94:27:ce:89:7d:bc:ea:9a:2a:b3:45:7f:65:
03:d6:e0:c7:4f:01:34:75:07:af:b5:57:f5:09:6c:da:9f:66:
c7:39:10:ab:16:ec:9f:21:3d:e4:98:6a:28:8c:10:bb:48:f5:
fb:b1:d7:5a:ea:c9:a8:59:bf:51:9d:18:d2:c6:0c:d8:ff:6e:
ab:76:09:a0:8b:38:80:03:47:54:e6:4c:0f:76:af:45:e2:b1:
29:b0:4c:58:5e:4a:56:1a:60:05:0d:df:b9:f7:48:70:22:0c:
d8:3b:b6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 12 16:24:12 2024 by rpki-client on console-ams.rpki-client.org