Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/djRisbLbe_z7QwJ4ggSLKOm_JI4.roa
File: djRisbLbe_z7QwJ4ggSLKOm_JI4.roa (raw, json)
Hash identifier: jqGYvf52c065c8X3BwBn6LuulAU0Wds2m3yGannxWOc=
Subject key identifier: 76:34:62:B1:B2:DB:7B:FC:FB:43:02:78:82:04:8B:28:E9:BF:24:8E
Certificate issuer: /CN=8e0840804c6680c41f21e8726f380b95e69e9447
Certificate serial: 01856E8B1008E8B2257547E9370201288D9A
Authority key identifier: 8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/djRisbLbe_z7QwJ4ggSLKOm_JI4.roa
Signing time: Sun 01 Jan 2023 18:14:45 +0000
ROA not before: Sun 01 Jan 2023 18:14:45 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25512
IP address blocks: 85.209.124.0/23 maxlen: 23
Validation: Failed, certificate revoked on Mon 01 Jan 2024 08:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:8b:10:08:e8:b2:25:75:47:e9:37:02:01:28:8d:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e0840804c6680c41f21e8726f380b95e69e9447
Validity
Not Before: Jan 1 18:14:45 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=763462b1b2db7bfcfb43027882048b28e9bf248e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9d:ac:e3:36:f9:e9:31:14:bb:83:19:ca:af:
96:aa:97:20:45:a1:51:12:20:55:80:b0:0e:21:03:
7d:4e:43:3a:8d:e9:02:92:43:d4:1d:bb:40:4f:44:
57:53:75:ec:a0:e4:15:4b:91:ef:f4:de:dd:1b:29:
08:20:05:54:b4:ef:25:f6:b0:f3:1e:e2:4c:6b:36:
7f:59:9f:44:8f:63:18:96:d7:6e:f3:05:0b:a8:d9:
80:5a:f8:0f:38:0a:8f:2b:20:5b:3f:bc:89:5e:52:
80:95:c2:cb:63:43:c4:9f:0b:98:6c:d3:8c:fb:fd:
00:18:8a:60:97:61:e4:09:9f:9f:a3:74:91:4f:33:
68:9a:41:d7:0c:fd:c4:92:c2:f6:16:01:1e:2f:d7:
97:3e:2b:1d:a4:21:be:fe:38:96:2b:1e:d5:f6:25:
4b:df:f1:23:d8:c3:0d:e4:9d:68:00:96:cd:3c:3a:
35:53:89:ad:8e:14:ed:66:60:dc:b1:47:6c:af:30:
f7:a5:97:5e:b0:76:d9:08:f1:5c:f9:0a:fb:1a:3d:
52:96:97:af:c9:59:e7:d6:ba:a1:bb:aa:9f:64:4d:
f3:7d:80:c3:9d:76:f7:ca:77:eb:a0:1e:3f:0e:5a:
87:fb:14:b6:41:b5:4b:ae:8b:b7:23:b2:b8:3f:50:
5b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:34:62:B1:B2:DB:7B:FC:FB:43:02:78:82:04:8B:28:E9:BF:24:8E
X509v3 Authority Key Identifier:
keyid:8E:08:40:80:4C:66:80:C4:1F:21:E8:72:6F:38:0B:95:E6:9E:94:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jghAgExmgMQfIehybzgLleaelEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/djRisbLbe_z7QwJ4ggSLKOm_JI4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/cee572-3420-45e4-87b6-c2799753c853/1/jghAgExmgMQfIehybzgLleaelEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.209.124.0/23
Signature Algorithm: sha256WithRSAEncryption
53:c0:fe:3e:2c:ab:20:8d:fc:64:37:c4:19:5a:d0:77:41:c9:
18:3c:4a:49:1f:57:2e:dc:53:01:53:ed:89:e6:31:66:b3:14:
32:01:64:15:99:44:73:eb:8e:9a:68:84:52:5c:8f:cb:f3:5d:
1d:b6:70:45:48:18:9f:ff:a4:41:43:c1:58:48:7d:a5:91:d0:
09:fb:de:fa:38:2f:04:bd:b2:a7:15:b6:f4:f1:1f:84:67:c2:
c8:30:6f:e1:b2:71:1c:8b:ec:3a:a8:c8:d9:a6:b7:c2:40:76:
53:00:e8:57:26:61:5f:c2:84:c2:6a:d5:f8:7a:50:63:c7:a0:
e1:f4:aa:22:c5:de:7a:4a:2f:e3:cd:40:75:26:81:b0:27:8f:
fb:94:b4:1b:2e:c3:31:49:da:3e:16:e9:d9:08:25:07:b2:39:
ba:3e:25:cd:a1:c7:ed:5d:7c:07:4c:10:99:6c:4b:5d:60:c5:
1a:fe:a5:94:ed:81:5e:67:9b:dd:f7:f8:6e:12:57:69:6e:be:
78:3f:3b:4e:81:83:d0:06:6e:c6:ad:3a:4c:ad:d1:3d:2e:fe:
60:f3:1d:44:f6:21:3c:f1:7d:0e:f6:5c:a4:11:4b:d1:e7:02:
30:d4:b0:62:8e:9e:3e:36:e4:40:d6:50:2b:25:87:39:3d:8e:
07:12:c8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:54:33 2024 by rpki-client on console-fra.rpki-client.org