Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/1-zxO81uCfxk0BXUIcgVJEP4DOyA.roa
File: 1-zxO81uCfxk0BXUIcgVJEP4DOyA.roa (raw, json)
Hash identifier: rscmfvkLy55S9EFOAxi5E/11cTNoZypL9fO8hqqXp0Y=
Subject key identifier: FB:3C:4E:F3:5B:82:7F:19:34:05:75:08:72:05:49:10:FE:03:3B:20
Certificate issuer: /CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Certificate serial: 01856E38C265F8689A341CDC317497B7C789
Authority key identifier: EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/1-zxO81uCfxk0BXUIcgVJEP4DOyA.roa
Signing time: Sun 01 Jan 2023 16:44:51 +0000
ROA not before: Sun 01 Jan 2023 16:44:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 34309
IP address blocks: 85.22.173.0/24 maxlen: 24
212.29.39.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6e:38:c2:65:f8:68:9a:34:1c:dc:31:74:97:b7:c7:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebef95f8c4c554826de8f38ad6bba9fb74802824
Validity
Not Before: Jan 1 16:44:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=fb3c4ef35b827f193405750872054910fe033b20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fe:4c:39:57:b3:b2:b7:0a:8c:5c:94:e5:1f:
59:93:e5:2e:aa:db:dc:32:0c:6f:c5:9a:1e:f5:70:
ff:cd:5f:f6:1e:2b:fb:63:ce:f8:4c:fa:a3:bd:ef:
9e:f8:89:22:cd:75:f4:8c:24:cd:2c:4b:b1:23:db:
46:5b:3f:af:bf:5d:3b:f2:eb:33:7d:01:d3:96:90:
91:55:77:14:05:db:51:83:8a:51:a7:9f:b9:8c:bb:
01:8e:5a:de:b6:1e:98:e2:d3:eb:51:0e:8f:91:17:
30:54:74:0a:e3:3d:10:20:a3:50:e4:a9:47:8a:f7:
29:8d:02:17:f9:7c:bf:6d:bd:25:ab:5b:12:5a:89:
c0:df:a2:f1:c8:17:5b:8e:a5:60:b6:7f:8c:ee:cd:
c0:5e:c2:0a:f6:d8:5b:b7:68:98:55:4e:8d:a1:29:
d0:9d:ce:52:ad:8f:ec:62:14:91:b5:30:a7:e4:eb:
4b:77:89:f9:0a:d3:19:53:48:b5:1c:a8:e5:ac:8f:
69:69:92:19:c5:3f:0b:a1:94:05:68:9c:a0:1b:9f:
53:4f:a9:34:f8:38:4e:9f:89:c5:20:fb:59:40:c7:
4b:8d:5d:ad:9b:80:a8:8d:7b:9a:b1:ca:b1:c9:94:
e6:26:07:1c:91:64:4c:20:ad:95:6d:4c:3d:88:dc:
f2:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:3C:4E:F3:5B:82:7F:19:34:05:75:08:72:05:49:10:FE:03:3B:20
X509v3 Authority Key Identifier:
keyid:EB:EF:95:F8:C4:C5:54:82:6D:E8:F3:8A:D6:BB:A9:FB:74:80:28:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6--V-MTFVIJt6POK1rup-3SAKCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/1-zxO81uCfxk0BXUIcgVJEP4DOyA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/f1457f-621f-4796-860e-9a350fd1a4ad/1/6--V-MTFVIJt6POK1rup-3SAKCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.22.173.0/24
212.29.39.0/24
Signature Algorithm: sha256WithRSAEncryption
31:78:bc:b6:52:7e:a2:d4:bd:4d:54:79:f4:3c:56:34:bc:89:
16:43:cf:ec:33:64:e9:28:40:66:a8:7b:c2:62:00:e6:75:31:
58:61:06:27:2e:fa:2f:2e:06:49:c6:da:3c:83:93:22:d5:70:
69:18:e5:ba:0d:d0:eb:0a:f6:23:38:64:ea:f5:62:22:1c:97:
4a:8a:b6:51:94:2d:db:bc:37:48:dd:bb:e1:52:cc:c8:35:52:
80:65:e1:49:5c:c8:cf:50:88:dc:f1:58:49:a9:e8:d9:15:a4:
e7:dd:66:6c:0e:50:26:d5:70:d3:80:0b:68:a4:a2:36:de:c8:
7e:23:c2:53:e9:02:9c:f2:f4:cf:e7:d1:09:4e:68:8b:67:81:
e6:fc:59:6d:ec:70:01:d6:7c:de:25:21:7c:0c:fe:ba:18:56:
ad:9d:44:31:4e:d3:54:d6:2a:1b:ab:89:88:1a:0d:68:87:09:
3b:e6:cd:af:97:9e:47:4a:ea:72:aa:5e:70:b2:19:5c:17:ab:
5c:e4:26:a5:bb:c8:ee:3d:34:97:d0:95:0e:1c:e0:27:e9:eb:
19:71:98:83:7f:10:d8:3b:8d:22:36:06:26:e0:86:4c:d7:e9:
b9:88:76:9a:90:e2:a6:f3:a0:04:4b:f3:d1:fa:80:a2:5b:cc:
52:35:37:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 06:17:02 2024 by rpki-client on console-ams.rpki-client.org