Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IFbaqjiNfkz5qHfWqf_4BphFrYw.roa
File: IFbaqjiNfkz5qHfWqf_4BphFrYw.roa (raw, json)
Hash identifier: wghngqZsrr0y42jW7Cylv7YKbprb+36o+GXbF3+QApI=
Subject key identifier: 20:56:DA:AA:38:8D:7E:4C:F9:A8:77:D6:A9:FF:F8:06:98:45:AD:8C
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018B50C9ACB7625B3ECECB0B8F502266F83C
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IFbaqjiNfkz5qHfWqf_4BphFrYw.roa
Signing time: Sat 21 Oct 2023 05:51:16 +0000
ROA not before: Sat 21 Oct 2023 05:51:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.237.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Mon 23 Oct 2023 20:20:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:50:c9:ac:b7:62:5b:3e:ce:cb:0b:8f:50:22:66:f8:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Oct 21 05:51:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=2056daaa388d7e4cf9a877d6a9fff8069845ad8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:0b:e9:0d:d2:9f:47:18:2a:2a:fb:c4:f8:21:
0e:ec:ae:c0:75:47:68:fa:ab:16:b0:41:c3:91:cf:
a4:2c:df:1d:46:5d:7f:ee:3a:94:0f:43:78:f9:06:
ab:5d:6b:6e:36:4d:29:13:91:a3:45:ff:f9:fc:9f:
cd:f1:7e:44:a9:9b:2b:fb:e9:02:90:cf:4d:c7:4d:
e5:97:2a:86:0a:c8:ac:18:22:aa:65:75:96:a0:02:
43:d7:fb:df:81:52:1e:ea:ca:c0:09:4f:c3:90:ad:
f3:5a:fb:03:6f:88:e6:14:e7:90:33:6d:c8:24:65:
e5:5e:1e:bc:c4:96:93:97:da:e9:a8:59:75:ec:a5:
a0:73:d6:1c:67:f3:66:9c:36:36:44:1d:45:4d:70:
88:30:29:33:f3:77:f1:fe:55:06:20:86:67:bb:42:
17:ee:45:11:0c:7a:22:49:39:52:42:c4:46:5a:a9:
13:91:53:52:97:21:90:b5:be:ac:3e:5b:1d:ab:81:
a6:11:a8:d8:ea:f6:e4:61:e7:8f:68:00:07:9e:1c:
16:3f:60:d4:9e:99:54:f9:e3:24:c3:ca:1a:41:28:
8c:94:cb:30:71:19:c3:b5:3b:d3:5c:dc:b9:09:a3:
98:94:a7:5f:8a:cf:59:1c:fe:9c:33:be:5a:ba:e7:
21:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:56:DA:AA:38:8D:7E:4C:F9:A8:77:D6:A9:FF:F8:06:98:45:AD:8C
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IFbaqjiNfkz5qHfWqf_4BphFrYw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.76.0/22
Signature Algorithm: sha256WithRSAEncryption
5a:38:4c:13:86:5b:b5:7c:06:75:14:db:bb:50:79:73:b2:b8:
17:c9:04:8a:9a:56:39:83:e5:67:02:51:d5:4c:a3:e3:32:06:
6f:90:57:54:de:77:fb:14:66:3a:e7:d4:ca:9e:66:e6:2c:22:
95:f7:2a:33:41:a7:32:9c:78:52:73:b1:dd:15:fb:60:41:6b:
16:46:ce:13:ef:f1:4c:51:18:d0:70:50:f6:de:90:e2:41:bb:
b5:82:8d:67:1d:88:f1:d6:4b:07:21:a8:42:fe:31:53:1c:e0:
c7:83:39:b4:2f:1d:47:87:aa:3a:55:7f:eb:b8:54:d2:c3:d8:
84:1e:4d:07:87:01:75:8b:60:b3:ec:80:cb:b4:ac:cc:cb:e3:
44:19:80:ec:58:49:77:c5:27:da:17:5c:11:c6:6e:c2:fd:ac:
f1:7c:d1:db:e8:b3:50:44:5d:ec:92:5e:7c:0f:f2:0b:98:9b:
57:23:21:91:d1:69:f3:79:ab:aa:f6:49:0f:d1:f2:c1:29:90:
b6:38:ea:fc:59:d1:48:2f:b4:b9:24:c9:18:c7:bb:6c:99:14:
05:05:4a:b9:ec:aa:8e:32:4e:2f:09:e1:4b:31:5b:84:5b:ed:
b9:7e:a7:ec:65:50:29:a4:39:c6:17:37:91:31:be:f0:04:7e:
5a:c4:81:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org