Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/oEQseV5umKFYG5ePPN6ZsdCojg0.roa
File: oEQseV5umKFYG5ePPN6ZsdCojg0.roa (raw, json)
Hash identifier: K0wPNyEze38vGyaVhk9oCT3rLtf4mEZE+6/J6xxUjSo=
Subject key identifier: A0:44:2C:79:5E:6E:98:A1:58:1B:97:8F:3C:DE:99:B1:D0:A8:8E:0D
Certificate issuer: /CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Certificate serial: 0188540B45A5C5B9D510CD669FB06F284D21
Authority key identifier: 3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/oEQseV5umKFYG5ePPN6ZsdCojg0.roa
Signing time: Thu 25 May 2023 17:53:24 +0000
ROA not before: Thu 25 May 2023 17:53:24 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 204843
IP address blocks: 85.204.247.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:54:0b:45:a5:c5:b9:d5:10:cd:66:9f:b0:6f:28:4d:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e1f32d0cfa7a86d30e7e11a73ebbd0b24dbf41f
Validity
Not Before: May 25 17:53:24 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a0442c795e6e98a1581b978f3cde99b1d0a88e0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:05:e1:ee:79:ed:73:e4:d2:24:75:59:e1:cd:
1d:ad:85:36:bb:5c:8b:e1:54:c8:a8:d9:7f:38:23:
2a:5d:53:9c:34:03:64:05:ac:8f:57:e4:fa:32:79:
29:ad:61:5f:66:b1:29:ee:2d:7a:ff:2c:23:62:4f:
22:4d:a2:75:2c:eb:15:70:22:d2:fe:79:f5:86:07:
4c:0d:9c:d2:c4:62:5f:28:05:00:d6:f3:7e:b7:45:
25:fb:71:76:33:49:30:49:b5:5f:d2:f5:49:72:7f:
27:f2:e7:d1:57:d2:57:40:34:3a:11:30:a1:a4:cb:
82:82:16:91:21:f7:29:6e:bc:9e:eb:3a:c5:4d:6a:
7a:ad:dd:bd:7d:af:e9:37:7e:e4:bb:99:bf:63:93:
f0:dd:11:cc:d5:94:bc:e5:86:61:15:95:d8:d2:9f:
13:5d:d1:83:45:ab:e8:31:1d:c3:1d:e2:50:28:c7:
6d:3e:44:4d:37:f3:b7:47:0d:8b:8b:4e:af:b5:46:
2c:1a:21:42:f1:a7:44:21:d8:7b:e3:e9:48:01:ae:
9a:25:68:bb:70:a4:08:c0:4e:f0:59:cc:b1:e2:ee:
db:93:06:c5:d4:75:bb:53:6b:67:dd:27:71:11:36:
1a:c9:40:b6:13:e0:05:cf:35:cd:35:b1:d1:65:ff:
fe:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:44:2C:79:5E:6E:98:A1:58:1B:97:8F:3C:DE:99:B1:D0:A8:8E:0D
X509v3 Authority Key Identifier:
keyid:3E:1F:32:D0:CF:A7:A8:6D:30:E7:E1:1A:73:EB:BD:0B:24:DB:F4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/oEQseV5umKFYG5ePPN6ZsdCojg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5f048b-2df3-4140-9f4e-6068c04d1be0/1/Ph8y0M-nqG0w5-Eac-u9CyTb9B8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.204.247.0/24
Signature Algorithm: sha256WithRSAEncryption
23:c6:81:92:c1:d7:88:57:be:a8:7f:8a:f1:af:7f:41:91:a5:
e0:94:3e:85:06:6e:77:84:ca:e4:8d:15:f3:66:b1:55:37:5a:
ec:58:eb:7f:9a:79:88:53:38:b8:5b:1e:fb:a5:f0:14:31:2d:
0c:5d:b3:9d:29:a2:16:b9:bc:12:d1:e7:9e:44:59:d3:09:7b:
16:eb:a7:f3:02:20:b5:85:a0:33:d8:7f:a7:b8:df:93:41:a5:
23:95:be:ce:78:49:8c:33:f9:3b:df:02:41:2c:d5:a0:95:16:
25:3e:bc:23:5b:72:01:9e:9e:8e:2a:4a:b0:10:26:bb:f2:9b:
de:ea:71:49:4d:0b:6d:e9:01:ff:ef:08:4b:d5:5b:9e:e4:b7:
12:d2:6b:f7:8c:a6:51:f9:83:93:99:2c:1b:a9:ca:70:a7:32:
98:98:d0:73:2f:d0:b9:4c:4d:9c:0c:9a:72:0c:9c:9f:8d:15:
85:0f:4f:80:aa:93:63:0c:5a:c0:1d:3b:f5:6b:85:1c:49:63:
7d:db:7f:c5:4d:75:31:dc:20:b9:c1:97:62:b9:8b:36:a6:0d:
6d:f7:4e:4a:e8:cc:c8:fd:4f:34:c3:32:1b:08:6a:11:ea:4a:
1b:95:c8:06:34:a5:92:0f:d7:2f:2e:14:39:7b:ad:de:bc:17:
de:9c:bc:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:05:04 2023 by rpki-client on console-fra.rpki-client.org