Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5ttP1XTbDk28pbfZwFJ9A7AmiPo.roa
File: 5ttP1XTbDk28pbfZwFJ9A7AmiPo.roa (raw, json)
Hash identifier: +WL7kPohUFT4+I1vZpjhoIgeZ/cXmJewakI8hBzGv3c=
Subject key identifier: E6:DB:4F:D5:74:DB:0E:4D:BC:A5:B7:D9:C0:52:7D:03:B0:26:88:FA
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018572310B353FC80ADF767374D5C044D1F1
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5ttP1XTbDk28pbfZwFJ9A7AmiPo.roa
Signing time: Mon 02 Jan 2023 11:14:54 +0000
ROA not before: Mon 02 Jan 2023 11:14:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 39521
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 08:53:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:31:0b:35:3f:c8:0a:df:76:73:74:d5:c0:44:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jan 2 11:14:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e6db4fd574db0e4dbca5b7d9c0527d03b02688fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:64:96:a7:b5:1a:d0:f2:9a:33:96:5c:2b:
f9:49:fc:fa:6d:9f:34:0d:82:aa:88:12:df:64:de:
d3:70:f8:f9:e1:eb:cd:fd:45:74:f4:1e:ad:bd:29:
65:a9:53:b1:c9:e0:08:77:e0:08:0e:f7:ce:d6:01:
67:86:03:2d:38:b5:ab:0b:df:75:41:97:10:cd:d7:
e2:69:46:52:be:bb:0b:18:b5:f1:90:80:14:69:ad:
4f:94:89:16:ed:b3:55:1a:d0:93:94:9f:df:8a:85:
ab:9d:f7:b3:d9:3d:cd:50:f3:26:1d:ae:57:27:59:
8b:b2:c6:07:bc:02:89:ff:3b:16:7c:46:c2:51:bb:
be:31:bf:99:9b:ce:9a:b8:9b:e2:67:e0:1f:43:d3:
2c:28:38:6b:af:77:24:d8:0c:5a:9d:41:dd:cc:70:
d6:8e:17:ec:4b:11:ee:6f:46:72:3e:2d:ca:bb:5f:
80:5c:ad:ff:b3:58:0b:e7:86:db:a1:df:7f:5b:dd:
87:69:32:ce:cb:02:47:32:be:62:d5:6a:c4:d0:0c:
4e:89:bc:41:28:60:57:74:24:9f:2a:40:4d:36:9b:
ad:17:a7:66:a8:48:a5:49:26:5d:be:f9:86:9f:bb:
34:f2:94:42:97:9e:ad:42:c7:7f:f2:d3:b8:0a:6c:
36:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:DB:4F:D5:74:DB:0E:4D:BC:A5:B7:D9:C0:52:7D:03:B0:26:88:FA
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/5ttP1XTbDk28pbfZwFJ9A7AmiPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:06:67:2d:3a:62:cb:22:11:c9:89:cd:88:eb:4e:82:b3:f4:
53:31:13:be:dd:ee:d3:2c:82:52:d6:59:0c:ec:f0:b5:7b:2c:
b3:2c:9d:48:50:57:95:e7:97:55:e5:b3:76:c0:f1:b8:c0:6c:
d9:18:69:56:0e:c6:65:e1:d9:f5:56:21:94:e9:87:d4:0f:75:
18:7d:63:b2:64:62:d2:b0:77:b3:58:b8:8c:54:b5:5f:46:c1:
75:d4:58:f6:7e:b7:73:91:57:26:8e:cd:59:13:1f:ad:8f:50:
a7:ed:86:19:65:e2:af:34:d5:09:ae:19:a4:d4:1d:22:ea:32:
52:a2:4a:39:c1:5f:f1:f5:70:7c:34:26:fd:61:20:00:96:ef:
9c:4a:1a:a1:87:69:1f:87:a8:96:71:96:8c:ed:6d:5d:0a:93:
f2:24:db:ef:c0:d2:76:e0:2d:00:35:d3:8c:08:fe:41:f0:61:
e5:ef:aa:b4:1b:e7:b9:78:1e:cc:35:65:6e:43:a7:44:f9:99:
59:d3:a2:bf:cf:b9:b7:31:de:45:bd:54:ef:56:ba:1a:cf:eb:
e7:39:68:bf:9a:7e:73:23:b6:0c:2e:29:11:a8:42:2e:3e:f9:
fa:95:26:40:42:1c:83:af:b5:ee:03:f1:98:66:be:09:8f:28:
9e:34:e6:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org