Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FVqWLu3mlb_6q0Z0nJ8nENH_K5U.roa
File: FVqWLu3mlb_6q0Z0nJ8nENH_K5U.roa (raw, json)
Hash identifier: EUsWqO2d7BWOuPKytigMyj0tRQJYY3YCT5LKOpNuDts=
Subject key identifier: 15:5A:96:2E:ED:E6:95:BF:FA:AB:46:74:9C:9F:27:10:D1:FF:2B:95
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0189CFBABE41F15929BB78DDE5B393C430F6
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FVqWLu3mlb_6q0Z0nJ8nENH_K5U.roa
Signing time: Mon 07 Aug 2023 11:21:09 +0000
ROA not before: Mon 07 Aug 2023 11:21:09 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211826
IP address blocks: 85.237.89.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:cf:ba:be:41:f1:59:29:bb:78:dd:e5:b3:93:c4:30:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Aug 7 11:21:09 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=155a962eede695bffaab46749c9f2710d1ff2b95
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ed:c2:f9:59:a9:07:70:93:ff:b4:18:fc:44:
8e:12:93:e0:9a:44:fb:ce:37:e2:1e:e9:0c:11:ce:
01:74:2c:ea:9f:3b:3c:7f:fb:2a:6e:56:72:33:ef:
0b:69:9d:99:d6:3d:f8:11:9e:7e:2e:40:ac:8b:5b:
d4:c1:7f:a4:32:20:d0:85:c2:15:4e:a5:8b:81:03:
bb:b6:70:7d:2d:d5:73:33:f6:0d:c5:fe:35:17:c0:
f6:e6:f4:3d:05:d9:d1:a8:7c:33:ad:31:e7:49:33:
06:b1:ff:90:7a:a2:c4:fc:d1:78:4c:b6:3d:ce:67:
5f:35:73:8e:dd:19:34:b8:3c:51:0e:ed:35:d5:36:
b7:14:cf:88:f1:eb:b4:29:26:a1:f4:99:f9:48:a4:
ac:59:ba:e6:83:67:7e:e3:44:c5:fb:58:d8:da:20:
3a:ec:01:b6:4a:8f:13:d6:bd:ba:b6:63:7a:ed:25:
c1:f9:21:58:44:1a:f9:c2:d8:f5:86:12:a9:00:12:
d0:8d:bd:fe:03:6b:98:cf:8e:b8:b3:fd:63:a2:b1:
36:9f:e8:41:ea:92:43:fb:ba:a6:9e:0b:06:23:7b:
a9:8e:2f:7c:60:f9:e9:c4:c0:4e:ea:23:0f:c8:3b:
c5:64:93:33:0b:f0:e0:d8:e1:93:b1:4e:65:b9:65:
20:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:5A:96:2E:ED:E6:95:BF:FA:AB:46:74:9C:9F:27:10:D1:FF:2B:95
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/FVqWLu3mlb_6q0Z0nJ8nENH_K5U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:63:e9:86:d4:67:fa:5e:f4:b4:b5:94:f2:89:e5:ab:f0:cd:
8c:45:96:4e:4c:3d:f9:f2:c9:26:4f:0b:37:e3:fd:1a:8c:45:
29:5d:08:13:a6:d7:45:82:88:4a:55:e5:b6:66:7e:87:28:f3:
8e:aa:98:4e:78:2e:93:4f:4d:72:d8:02:68:a0:e9:b4:06:75:
16:09:52:a2:bd:14:5a:87:d2:6c:21:cf:fd:d2:f4:1c:69:c0:
92:17:56:f9:3c:22:de:22:e3:d7:f9:5f:eb:b0:86:27:e6:31:
70:e8:3e:3d:a6:06:46:96:38:87:98:06:17:95:e2:2a:39:33:
69:25:16:8b:25:65:b1:d0:2f:5e:ed:0c:60:71:85:7c:4c:6a:
ec:f3:e9:72:a7:97:a3:a1:b8:8a:d8:b7:ea:3e:6b:98:b4:99:
7a:e5:bc:47:8e:e0:c6:1b:50:0c:28:1f:22:e3:3f:9b:c0:62:
4a:64:3a:ab:05:2a:05:81:94:60:9a:6a:7f:e3:5c:06:5a:ee:
a3:06:a3:bc:40:14:24:c8:1e:0c:7b:7b:6e:55:7c:0e:c6:34:
be:9e:ba:0e:49:3d:40:68:3a:68:63:2f:b1:69:65:b1:21:08:
ab:d3:19:f1:6e:94:d4:12:57:fb:75:29:b3:b5:8a:a4:1b:96:
a7:f2:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jan 1 17:26:38 2024 by rpki-client on console-fra.rpki-client.org