Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Sr6_xZeaJVTkCcwilBcw0JXxhms.roa
File: Sr6_xZeaJVTkCcwilBcw0JXxhms.roa (raw, json)
Hash identifier: XC4FLuP/1DpeH6CSU11tsFyIDEYU+bxHMyK1BHNgP8E=
Subject key identifier: 4A:BE:BF:C5:97:9A:25:54:E4:09:CC:22:94:17:30:D0:95:F1:86:6B
Certificate issuer: /CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Certificate serial: 01877567E10FB00B794D8D440C2202C4412E
Authority key identifier: 97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Sr6_xZeaJVTkCcwilBcw0JXxhms.roa
Signing time: Wed 12 Apr 2023 12:19:14 +0000
ROA not before: Wed 12 Apr 2023 12:19:14 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209854
IP address blocks: 85.209.4.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 04 May 2023 11:46:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:75:67:e1:0f:b0:0b:79:4d:8d:44:0c:22:02:c4:41:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=973bec33ae738c98958819c6c13bb335ee34ab4c
Validity
Not Before: Apr 12 12:19:14 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4abebfc5979a2554e409cc22941730d095f1866b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:fd:de:5e:e1:19:74:43:b9:b9:1d:b5:37:15:
a7:82:28:fb:64:73:9f:57:9e:bb:64:11:47:9b:a8:
7b:0b:52:88:6b:75:79:41:b3:70:be:d8:8d:43:d9:
b5:87:16:fa:ef:ba:78:d9:40:00:cf:7c:c4:c2:91:
e9:10:d6:7c:2b:b9:94:31:6d:e3:ff:15:88:a4:13:
5a:19:34:1c:18:dc:a9:bf:40:a7:26:84:79:8d:d6:
6b:39:85:0a:e9:b0:95:c3:b0:fc:de:83:0e:8c:60:
93:8b:27:c8:97:36:27:59:6d:49:3a:b6:72:9b:1c:
21:1f:43:bf:d1:6e:0a:ef:2a:9a:b3:38:6c:62:24:
3a:bb:f8:cf:72:4d:d4:d0:a9:4a:7d:54:a3:0e:e0:
54:3e:ad:55:c8:64:f3:8d:17:e0:d3:f2:3d:86:69:
8f:11:79:6c:3d:82:39:d6:e4:f5:a8:01:1a:82:84:
a5:fb:22:40:b3:53:10:d1:9e:ad:e2:03:1c:61:d0:
72:cc:02:02:a0:45:7a:22:43:fd:00:37:b4:59:7d:
dc:ee:c3:85:a3:37:55:14:21:31:b0:d1:4f:fb:2d:
8c:72:f8:a3:ec:b4:83:e4:41:03:85:a4:14:a9:c9:
8e:2d:23:e1:ae:e8:b8:5e:08:b5:e0:57:d8:97:d7:
60:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:BE:BF:C5:97:9A:25:54:E4:09:CC:22:94:17:30:D0:95:F1:86:6B
X509v3 Authority Key Identifier:
keyid:97:3B:EC:33:AE:73:8C:98:95:88:19:C6:C1:3B:B3:35:EE:34:AB:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lzvsM65zjJiViBnGwTuzNe40q0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/Sr6_xZeaJVTkCcwilBcw0JXxhms.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/2f4605-356a-4af6-b15d-c42f9abf1477/1/lzvsM65zjJiViBnGwTuzNe40q0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.4.0/24
Signature Algorithm: sha256WithRSAEncryption
70:21:42:2c:3e:b5:ee:ef:0d:30:2b:27:2c:9d:6d:53:30:3a:
fe:ec:6d:a7:b6:75:a8:96:da:5b:11:3f:0e:12:ca:b3:42:11:
f5:48:c8:3e:b1:b5:22:48:35:77:0a:4b:ed:88:82:6e:33:e7:
e2:db:f6:d3:0a:b6:ce:74:1e:e3:c6:0f:e8:f9:66:65:5e:09:
a6:f3:2e:6c:a9:6c:0c:54:4d:86:ee:7b:f9:7b:cd:d5:06:56:
d6:e1:ef:a5:67:a7:ae:6d:ff:65:05:e6:30:a2:06:9a:6a:da:
dd:b1:db:f4:d1:05:4b:3a:85:c4:b1:be:8c:ca:be:67:6c:4a:
fd:5a:96:88:f8:5f:84:4f:c6:ef:55:2d:b7:36:98:97:82:3c:
5b:6a:43:58:66:62:a6:6b:81:70:b3:42:a3:6e:2a:ee:5e:b3:
9b:bd:fe:8a:26:c6:fa:ad:c5:92:c4:e8:c3:76:49:20:1d:43:
0e:19:64:30:0c:59:5c:d1:8a:90:eb:87:c5:fb:4f:45:fe:e0:
fa:99:76:b7:4e:63:ac:1e:2c:48:12:48:51:4d:23:b0:0c:d2:
af:12:a4:b8:4e:26:2d:a9:dd:b5:3d:bd:5e:51:fd:b7:56:19:
60:c7:a6:95:c4:95:1f:19:ec:46:e9:5e:fd:db:f0:78:51:95:
f6:5c:c3:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:43:04 2024 by rpki-client on console-ams.rpki-client.org