Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/xR4f9IW_1L45WA8TZzhUmnp7x7Y.roa
File: xR4f9IW_1L45WA8TZzhUmnp7x7Y.roa (raw, json)
Hash identifier: cmSMdEtpuROQ4SlslCsj7BASttLqv3BoHmAusdpkCNA=
Subject key identifier: C5:1E:1F:F4:85:BF:D4:BE:39:58:0F:13:67:38:54:9A:7A:7B:C7:B6
Certificate issuer: /CN=1e36de27974727aa0046b3e9c8d0624674541255
Certificate serial: 01889F1B1549333532FF7C72A687F62C720B
Authority key identifier: 1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/xR4f9IW_1L45WA8TZzhUmnp7x7Y.roa
Signing time: Fri 09 Jun 2023 07:42:12 +0000
ROA not before: Fri 09 Jun 2023 07:42:12 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34804
IP address blocks: 85.159.224.0/24 maxlen: 24
85.159.227.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9f:1b:15:49:33:35:32:ff:7c:72:a6:87:f6:2c:72:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1e36de27974727aa0046b3e9c8d0624674541255
Validity
Not Before: Jun 9 07:42:12 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c51e1ff485bfd4be39580f136738549a7a7bc7b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2d:b4:24:29:c2:89:47:37:6b:b4:a0:21:c4:
33:55:0c:9c:32:86:e7:98:4f:d3:45:49:ae:66:eb:
73:97:b0:46:b6:86:0e:67:f9:77:2e:29:31:d6:8a:
3a:47:4f:39:58:78:9b:94:c9:7d:9e:cb:81:d5:a9:
49:d0:26:05:d9:e4:27:b8:75:e4:b2:df:60:59:e3:
ca:f0:1f:fe:2a:9a:fc:f7:03:72:c1:24:6b:37:b9:
ce:6a:da:44:c4:89:90:8e:47:33:5b:cd:d7:2d:36:
bd:92:2e:3e:70:1b:52:ef:17:9f:cd:39:61:c0:56:
b8:9f:dc:31:38:e6:4d:b2:54:f2:8f:f6:2d:ab:65:
b2:ce:7b:4d:f9:a4:80:17:e1:d5:d7:5f:58:cf:4c:
c8:a8:b3:be:0e:18:0d:d7:54:d5:a6:c9:dd:d2:ef:
6b:9c:02:6b:e6:23:7e:f9:fc:6d:fc:c1:11:42:cd:
ea:f6:dd:c3:a3:d1:75:6e:67:68:df:22:f5:6a:33:
25:ee:9a:95:52:a6:f6:a1:e5:34:bc:c9:04:6a:f3:
da:d1:74:a5:8b:6b:40:a7:60:60:28:c8:ec:05:73:
38:45:90:ca:b7:12:f6:14:a7:e6:51:b8:1c:a4:1c:
58:83:9a:28:d2:1e:f3:26:02:45:98:94:d0:dc:0e:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:1E:1F:F4:85:BF:D4:BE:39:58:0F:13:67:38:54:9A:7A:7B:C7:B6
X509v3 Authority Key Identifier:
keyid:1E:36:DE:27:97:47:27:AA:00:46:B3:E9:C8:D0:62:46:74:54:12:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HjbeJ5dHJ6oARrPpyNBiRnRUElU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/xR4f9IW_1L45WA8TZzhUmnp7x7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/59e8c3-626b-4ece-8e39-df793a940bab/1/HjbeJ5dHJ6oARrPpyNBiRnRUElU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.159.224.0/24
85.159.227.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:25:a0:e3:a2:dc:0b:9e:4a:48:3a:a2:7a:8f:2e:09:30:2d:
b2:bc:f9:25:5e:5d:da:2a:44:05:f5:3e:40:43:97:71:c4:cd:
cc:3a:3e:1c:c1:ed:60:4b:61:5b:49:dd:c9:5f:f1:70:63:30:
41:65:bd:08:6f:11:93:0b:06:b1:09:6e:f4:89:f6:d6:56:21:
3c:73:85:a8:ad:69:cf:83:f2:10:9d:a5:de:76:1d:8e:0e:9e:
de:d3:8b:5b:75:7c:c7:e5:b3:dc:c9:fa:fe:23:43:58:ca:be:
d5:46:7c:cc:4f:0c:71:4b:15:04:86:69:0e:68:cb:70:90:6b:
cc:0b:1d:a9:76:7c:15:88:8a:c2:cf:04:49:a3:10:ed:40:a2:
2d:ac:14:d7:7f:89:e3:ad:5a:73:89:e8:09:c2:fc:4e:c7:59:
d9:0a:aa:dc:4b:06:c9:92:1f:eb:c7:4a:bc:dd:d3:c1:5e:ad:
de:0a:8c:2d:87:f3:88:1c:3b:91:30:fe:d8:f4:2e:29:05:b9:
1c:03:aa:a8:33:9d:0b:f6:76:37:48:e5:cf:41:be:8b:c2:f7:
f5:ae:5d:b2:d4:cd:f4:13:33:f1:41:e3:4e:8e:82:21:ab:08:
3c:19:7b:bb:5b:d8:97:eb:14:a2:cd:1f:43:b2:da:d3:d6:cd:
22:e7:f2:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 04:10:39 2024 by rpki-client on console-ams.rpki-client.org