Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1q-ZM6vIzqBw0w4viagMSjZtze0.roa
File: 1q-ZM6vIzqBw0w4viagMSjZtze0.roa (raw, json)
Hash identifier: 6TUbw5g1/f6W2WUPZkyMNg0UflUkPwU+eNEg68z9AJU=
Subject key identifier: D6:AF:99:33:AB:C8:CE:A0:70:D3:0E:2F:89:A8:0C:4A:36:6D:CD:ED
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246F63896D5BAC5CF0823FF2D02C9F0
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1q-ZM6vIzqBw0w4viagMSjZtze0.roa
Signing time: Mon 02 Jan 2023 11:38:51 +0000
ROA not before: Mon 02 Jan 2023 11:38:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210746
IP address blocks: 85.187.45.0/24 maxlen: 24
151.237.23.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:f6:38:96:d5:ba:c5:cf:08:23:ff:2d:02:c9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6af9933abc8cea070d30e2f89a80c4a366dcded
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6f:22:79:d0:3e:da:73:31:a7:c1:74:4b:2a:
f7:ee:4f:af:bd:54:97:66:d5:91:4e:a0:10:60:94:
69:29:f3:c4:af:74:ea:70:e3:5e:af:57:5a:82:39:
13:7d:8a:a1:03:ff:65:44:c0:1e:98:46:d4:cd:ce:
b2:51:37:fc:45:73:54:5b:e8:c2:dc:e2:44:91:e7:
87:4d:e2:41:ce:dc:18:dc:ca:80:d2:cb:c8:a9:55:
c6:10:4f:ca:40:fb:5c:4b:da:8f:6d:f7:52:63:26:
b8:02:ea:11:62:5f:9f:00:d4:11:2f:41:07:f8:51:
b2:4c:61:77:f0:49:6d:68:5d:f0:b6:f5:99:d7:75:
09:57:f2:90:12:b8:cc:32:01:77:0f:29:0a:99:6d:
aa:25:06:a5:00:a0:b3:d3:75:0c:4c:dd:97:48:84:
6c:6a:3a:64:b7:ae:c5:f8:2d:89:a3:79:f4:bb:85:
ec:f6:d7:26:7e:b5:a9:c2:58:7b:18:b3:93:3b:bf:
eb:8f:a1:00:5a:a1:a5:74:04:08:d3:e0:ce:a5:65:
43:30:8d:e2:af:7c:75:f0:ec:60:98:4f:b6:e3:0e:
e8:66:12:08:69:9d:a8:2c:01:47:c9:2d:79:65:30:
ca:88:e1:e3:67:20:2c:70:63:ad:60:cc:73:df:ee:
fe:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:99:33:AB:C8:CE:A0:70:D3:0E:2F:89:A8:0C:4A:36:6D:CD:ED
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/1q-ZM6vIzqBw0w4viagMSjZtze0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.45.0/24
151.237.23.0/24
Signature Algorithm: sha256WithRSAEncryption
85:d9:72:9a:85:95:12:75:42:11:d5:a6:18:24:f5:9d:16:44:
52:71:eb:ef:da:d6:29:64:12:3a:e9:2a:42:a3:45:9e:44:1e:
48:2a:c9:e3:af:40:4c:bd:92:ff:f4:ed:0a:b1:e9:1a:25:6f:
b3:cd:89:d7:95:18:b0:af:03:ad:84:0b:42:d0:bb:45:be:a3:
23:bb:7f:c1:a2:75:da:6e:1d:e0:88:4c:dd:d8:c3:a3:da:79:
a9:cf:da:84:4b:9d:5d:f0:2a:b3:5d:56:2f:a4:f5:96:db:51:
15:2d:a8:0a:e1:10:4b:10:b3:7d:8e:2a:1f:3e:37:7a:04:8c:
d3:0e:c7:ac:e1:33:d7:df:50:6a:c3:5a:23:eb:59:30:da:26:
0f:93:ea:ab:6e:05:0a:33:fe:ab:4c:56:28:1e:14:12:4e:e8:
d9:26:81:64:6b:90:d8:45:4d:b7:24:5e:85:58:2f:3f:58:c5:
5b:e0:bc:37:0a:3a:e4:2a:64:ab:06:38:2a:61:cb:cf:eb:2e:
5a:9d:50:e4:e1:b5:7e:be:96:cb:e0:22:7d:70:d1:37:b6:e5:
89:88:a1:52:12:78:43:c5:e7:fb:3b:41:4d:f8:30:92:e3:02:
73:9e:e8:db:86:a3:a2:b4:3c:21:69:75:65:fe:05:f9:ac:f0:
67:cc:e7:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:41 2024 by rpki-client on console-ams.rpki-client.org