Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3QSisKm4O3nZk5iFlBLYEwVdEYY.roa
File: 3QSisKm4O3nZk5iFlBLYEwVdEYY.roa (raw, json)
Hash identifier: 1d//qgAjkMoiavmhzxZuQU179g50PV12rIMNvL2AaYM=
Subject key identifier: DD:04:A2:B0:A9:B8:3B:79:D9:93:98:85:94:12:D8:13:05:5D:11:86
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 01914669529A08AF494DBDA3706E4508A152
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3QSisKm4O3nZk5iFlBLYEwVdEYY.roa
Signing time: Mon 12 Aug 2024 11:46:33 +0000
ROA not before: Mon 12 Aug 2024 11:46:33 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Wed 14 Aug 2024 11:28:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:46:69:52:9a:08:af:49:4d:bd:a3:70:6e:45:08:a1:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Aug 12 11:46:33 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd04a2b0a9b83b79d99398859412d813055d1186
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:08:8f:71:d9:e7:b5:45:07:2f:5b:f1:03:1f:
64:5a:9d:85:20:ec:dd:17:09:12:53:1b:83:70:06:
63:7d:ef:31:08:53:34:68:b1:d7:5a:f1:46:cf:96:
51:6f:f9:90:c3:6e:13:71:e0:10:53:d2:47:1b:d9:
c9:ce:d8:15:d6:aa:a2:e5:62:88:ad:b9:fb:24:83:
07:63:24:4a:fe:59:75:0f:e0:df:c0:dd:4b:88:18:
4c:46:66:d9:7b:e8:5d:a4:3e:5f:f3:40:56:a9:01:
36:d2:d4:17:c6:f5:dc:5d:1e:77:2d:78:61:9f:b2:
16:7b:60:cd:5e:e7:b3:59:66:8a:64:cb:f9:c0:fd:
ac:0e:ba:d4:40:bf:46:ae:65:d5:48:5c:7e:7b:f7:
e4:c3:51:1a:ef:90:8c:04:48:3b:9d:e9:9b:f2:7b:
cc:9d:f1:db:3b:c9:ff:ff:76:3b:cf:9f:43:af:fd:
0e:6e:cd:92:07:f1:2e:63:bb:0c:65:5d:c1:ee:ac:
18:ca:65:be:98:98:12:53:1a:f9:5b:98:e4:a6:e0:
ab:ac:8e:4c:77:b1:74:51:d6:35:26:94:68:29:d6:
7b:73:1d:0c:8d:2f:24:a3:56:ed:67:5c:b8:82:d8:
9f:53:07:61:b5:6c:f3:0a:67:23:ac:2a:54:55:16:
9a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:04:A2:B0:A9:B8:3B:79:D9:93:98:85:94:12:D8:13:05:5D:11:86
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/3QSisKm4O3nZk5iFlBLYEwVdEYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
81:2c:91:63:44:33:bb:50:fc:6d:a8:f6:9b:39:bc:80:7b:c7:
33:c2:52:bc:fa:18:a0:69:5d:f7:38:83:9b:4c:a4:08:26:63:
a7:ee:ff:33:84:6e:5e:4a:c1:8e:e3:a0:7d:ec:c4:8e:fa:25:
68:33:62:3a:b7:95:78:31:78:bd:76:f9:9a:4e:16:29:da:93:
67:6f:b2:c6:76:bb:cf:81:5f:ea:59:43:89:69:d7:c2:d8:19:
f7:76:06:ea:18:a9:c8:0f:e0:40:9d:5d:e3:07:0d:c9:f6:1a:
75:de:4c:86:04:9e:f0:15:1d:15:aa:01:1a:26:74:05:0d:7c:
c8:78:cf:ae:58:13:b8:bf:6f:d3:03:1f:43:f6:ba:5b:13:28:
f2:03:44:94:8c:42:fa:f7:ad:3b:e6:9d:da:b3:ff:b1:87:8b:
54:6b:0d:25:b5:8b:f7:08:c1:d3:77:43:d4:56:b2:7d:32:f0:
3a:f9:c4:75:6b:23:e8:70:d5:a2:09:fb:49:6b:70:55:c0:91:
a9:6e:04:a2:0f:b2:4a:c1:33:1f:9e:f1:fa:40:09:3c:c1:6a:
90:af:ff:0c:10:55:dc:5d:9a:58:3e:02:27:dd:e3:23:1e:6c:
5f:41:5f:5a:b9:36:3e:b4:a4:79:dc:1d:cc:fd:65:ec:25:ac:
dc:04:89:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 15:15:13 2024 by rpki-client on console-ams.rpki-client.org