Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/3kXZi-bHJtadgdO1P8vMZQntFu8.roa
File: 3kXZi-bHJtadgdO1P8vMZQntFu8.roa (raw, json)
Hash identifier: k6XXEwFIt/auv8tu1P0FRlP9iQjKfUIZrE1qHpgtt2Y=
Subject key identifier: DE:45:D9:8B:E6:C7:26:D6:9D:81:D3:B5:3F:CB:CC:65:09:ED:16:EF
Certificate issuer: /CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Certificate serial: 018571152C8518D5BBBE5CB7A5392F8E6249
Authority key identifier: 48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/3kXZi-bHJtadgdO1P8vMZQntFu8.roa
Signing time: Mon 02 Jan 2023 06:04:50 +0000
ROA not before: Mon 02 Jan 2023 06:04:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 208769
IP address blocks: 85.208.102.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 08:31:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:15:2c:85:18:d5:bb:be:5c:b7:a5:39:2f:8e:62:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=480c3b93ff2a34fbfa5ae82556f670340cb5d5c9
Validity
Not Before: Jan 2 06:04:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=de45d98be6c726d69d81d3b53fcbcc6509ed16ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0e:12:7b:c8:18:e3:32:86:5f:33:60:44:b5:
5e:e4:87:ef:f6:3a:45:b0:30:97:ad:79:5c:6d:50:
b6:4f:ee:79:ab:72:05:7d:cb:e1:3b:af:61:cd:7f:
6f:0a:83:a3:61:3c:e2:d0:8f:b5:8d:06:3e:6c:6e:
da:d5:f1:ad:9d:e8:e0:8c:1d:f4:14:d6:90:16:c8:
a9:ca:5e:05:0f:97:bb:cc:42:6b:30:7c:32:6f:9a:
bd:4a:28:55:f2:d6:4c:cb:55:da:fe:7d:b7:86:0c:
de:6a:11:24:82:4d:ba:88:7e:3b:16:1b:a9:6d:bb:
61:bf:e4:85:1e:44:e8:1f:af:02:7b:71:72:75:f7:
d0:c4:d2:d4:7e:58:05:39:65:65:c4:ce:43:8f:90:
a3:b8:2b:24:a8:e4:cf:a6:08:e8:c9:8c:c5:92:c2:
93:8f:e7:2e:f5:f1:df:4f:6e:d5:83:c1:d0:a1:97:
e2:76:7a:94:5b:13:3b:aa:c3:f1:2d:61:a1:4d:6e:
0b:41:5f:e4:0d:45:8e:b1:7f:ca:a3:27:f1:75:49:
8e:a1:46:0d:45:4f:ea:28:f9:9c:dd:77:24:61:f0:
ea:eb:8f:db:3e:60:18:b1:ee:d5:96:78:3c:97:2b:
3f:ef:2f:b6:98:f1:b2:ee:06:34:33:f3:c4:73:1d:
22:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:45:D9:8B:E6:C7:26:D6:9D:81:D3:B5:3F:CB:CC:65:09:ED:16:EF
X509v3 Authority Key Identifier:
keyid:48:0C:3B:93:FF:2A:34:FB:FA:5A:E8:25:56:F6:70:34:0C:B5:D5:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAw7k_8qNPv6WuglVvZwNAy11ck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/3kXZi-bHJtadgdO1P8vMZQntFu8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1800a4-50fc-4ff8-9e36-49c6fdbbafb7/1/SAw7k_8qNPv6WuglVvZwNAy11ck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.102.0/24
Signature Algorithm: sha256WithRSAEncryption
39:e7:5f:b4:df:7c:c3:b0:34:7e:e4:ab:8b:8e:be:c1:8f:c1:
b7:7d:16:42:bc:a3:25:16:3e:6c:23:3d:e8:ee:c8:6a:c8:a0:
01:ab:f2:75:b7:4f:fd:bf:dc:f3:c1:db:a6:a2:39:e1:60:de:
c8:65:1c:58:11:bf:ed:53:92:3c:7a:81:9b:ec:b0:b1:64:41:
5a:74:54:9a:13:79:1e:a3:6b:34:f8:3c:f4:92:00:c7:d2:e3:
23:65:3a:0a:7a:22:95:cf:f6:75:68:d4:0d:ee:79:60:2a:ca:
d3:b2:2d:2a:61:e6:f6:ce:d4:6d:72:19:c7:63:56:4a:2a:b1:
79:6e:ce:83:9e:7f:ba:74:3a:9b:0f:3c:4a:08:88:0e:7d:3c:
d9:b3:d3:f0:4e:19:9d:b7:49:a4:29:19:bd:6f:12:d3:5a:70:
65:d9:23:b3:44:2f:17:30:66:c1:1b:79:09:b6:89:1f:26:f5:
6b:23:09:6f:96:8a:8d:6a:a3:da:49:56:44:4a:f4:6d:7f:6a:
54:59:28:73:ad:40:1a:46:4f:23:5e:13:62:98:28:6e:9e:ee:
a5:b1:ce:9b:85:6f:6f:56:f4:fb:4f:64:2b:40:61:44:37:7e:
fd:43:df:71:2a:df:45:c7:e9:56:4f:cd:17:4a:01:2f:58:ce:
af:35:0d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:48:56 2024 by rpki-client on console-ams.rpki-client.org