Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zhjsgEi6Xo4CzAIas7KdCJVrQFc.roa
File: zhjsgEi6Xo4CzAIas7KdCJVrQFc.roa (raw, json)
Hash identifier: JFFwsUwqb3Pja3oqWi50w0KtsroIE6W8qPYGAhdxjho=
Subject key identifier: CE:18:EC:80:48:BA:5E:8E:02:CC:02:1A:B3:B2:9D:08:95:6B:40:57
Certificate issuer: /CN=febf30201f12a040d386d2b4eed4484623e4d11b
Certificate serial: 01857246E88E629964E666A5AA57772C834A
Authority key identifier: FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zhjsgEi6Xo4CzAIas7KdCJVrQFc.roa
Signing time: Mon 02 Jan 2023 11:38:47 +0000
ROA not before: Mon 02 Jan 2023 11:38:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 199173
IP address blocks: 85.187.218.0/23 maxlen: 23
85.187.224.0/21 maxlen: 21
Validation: Failed, certificate revoked on Mon 01 Jan 2024 20:31:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:46:e8:8e:62:99:64:e6:66:a5:aa:57:77:2c:83:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=febf30201f12a040d386d2b4eed4484623e4d11b
Validity
Not Before: Jan 2 11:38:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=ce18ec8048ba5e8e02cc021ab3b29d08956b4057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:5a:f2:c4:fe:fe:43:c6:ad:1b:eb:8e:d9:d6:
bd:f2:cb:a7:74:81:7f:b9:6a:f5:a1:8f:e5:09:8b:
f9:db:0b:80:4b:79:f4:36:f1:c6:86:24:66:5b:70:
c9:d7:f1:3f:c1:e4:da:cc:52:5d:d5:98:ea:3c:14:
17:95:5f:96:6c:88:79:14:76:2b:5a:27:a0:ca:f9:
ec:56:74:3c:d3:c4:94:ef:26:89:a2:55:99:59:84:
19:f4:17:47:19:6c:20:b3:97:93:dd:78:07:53:5b:
23:19:68:2f:a6:ed:65:3b:e9:24:76:82:79:a1:11:
00:c6:25:99:e5:85:6f:17:aa:3f:c0:f9:6a:6f:15:
2e:23:bd:4f:bb:f7:37:0a:16:a9:40:23:e9:e9:4a:
d4:30:51:4b:46:1b:2f:12:51:97:3e:24:6b:da:df:
a9:17:dc:71:70:69:8b:bc:c3:ae:c5:78:bc:fc:3e:
24:be:f5:06:7c:86:e7:d5:92:be:80:87:1b:e5:24:
d5:6d:d6:d3:de:26:69:e8:78:53:2d:08:66:9c:37:
8c:65:e6:a7:6a:6b:53:cf:d9:3e:32:44:8b:3f:30:
9e:0d:ee:9a:39:04:c4:0e:f6:1b:3e:8a:90:b5:4d:
6c:aa:0b:81:b9:b6:7b:f1:4c:b9:6b:36:52:df:0f:
27:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:18:EC:80:48:BA:5E:8E:02:CC:02:1A:B3:B2:9D:08:95:6B:40:57
X509v3 Authority Key Identifier:
keyid:FE:BF:30:20:1F:12:A0:40:D3:86:D2:B4:EE:D4:48:46:23:E4:D1:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_r8wIB8SoEDThtK07tRIRiPk0Rs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/zhjsgEi6Xo4CzAIas7KdCJVrQFc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/f8c4a2-96ac-4b4e-a195-a97c0dc0a749/1/_r8wIB8SoEDThtK07tRIRiPk0Rs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.187.218.0/23
85.187.224.0/21
Signature Algorithm: sha256WithRSAEncryption
25:02:c2:89:bd:43:d2:22:2d:d3:30:ec:c6:74:dc:a6:00:d9:
84:bd:2b:80:e3:c3:2f:cf:ad:68:f6:2a:59:21:ad:d2:f1:1b:
98:b6:88:52:f3:40:38:ac:52:6a:4b:9d:ee:ad:f4:3f:b1:35:
a2:bf:94:ce:21:f3:b9:eb:cd:7e:b8:65:e5:93:9e:4a:22:d1:
a8:14:7e:d4:ad:70:e9:89:b4:e9:dd:eb:46:01:49:41:6a:50:
dc:5f:6f:26:e8:0a:3b:56:1f:9d:5b:2e:23:3f:f6:64:95:3f:
4b:5f:b2:67:d3:82:a9:ca:a2:54:76:88:76:33:9f:dd:51:53:
18:a1:42:46:c0:b9:de:90:a0:4c:9e:16:97:a1:77:cf:74:33:
35:8f:52:f8:3f:f6:dd:35:3d:12:06:5d:b1:3c:66:f0:57:e9:
e6:1d:b3:87:5f:cc:21:c4:15:c1:ce:84:c5:12:39:8c:ef:9f:
32:d1:64:3e:d1:30:df:91:be:61:26:ae:a7:ba:76:2c:76:81:
f9:bd:67:bc:c9:cc:56:69:a1:eb:73:92:6c:82:09:36:4d:58:
12:b0:74:dc:5b:86:fb:f6:d3:d7:43:f3:5a:f6:71:ee:18:97:
2e:78:92:2a:06:74:3d:45:b6:59:b9:0e:fa:28:ef:a5:91:f8:
e7:7c:a6:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:44:42 2024 by rpki-client on console-ams.rpki-client.org