Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IQ1zejfNWnPRm6Nt1GHh1q-7jr8.roa
File: IQ1zejfNWnPRm6Nt1GHh1q-7jr8.roa (raw, json)
Hash identifier: vbvqSL37IRdHnXb6u5/WgDoOVVQAboz5LsgzvdyyqlQ=
Subject key identifier: 21:0D:73:7A:37:CD:5A:73:D1:9B:A3:6D:D4:61:E1:D6:AF:BB:8E:BF
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 019205ACE1589EF7265380504401EF3AF31F
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IQ1zejfNWnPRm6Nt1GHh1q-7jr8.roa
Signing time: Wed 18 Sep 2024 15:07:48 +0000
ROA not before: Wed 18 Sep 2024 15:07:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 834
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Oct 2024 23:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:05:ac:e1:58:9e:f7:26:53:80:50:44:01:ef:3a:f3:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Sep 18 15:07:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=210d737a37cd5a73d19ba36dd461e1d6afbb8ebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:35:6a:90:7c:88:3e:dd:93:22:05:46:da:4d:
de:86:dc:aa:cf:a7:4d:6e:85:a5:21:86:1f:38:7e:
fe:77:98:d9:09:06:44:47:22:40:56:14:cd:c4:f8:
66:e2:03:83:c8:2f:9e:20:6d:a7:14:3b:7c:87:95:
40:45:0c:17:08:23:cd:ba:27:9f:c5:d3:e9:60:4f:
48:eb:94:7d:e6:e8:06:9d:52:18:cf:ad:cb:29:7c:
7c:26:7e:9e:86:3e:0d:4d:26:52:2d:c8:7a:cb:67:
f3:95:b6:33:12:2b:26:4a:75:a0:d8:de:0d:0b:82:
cb:39:d2:a9:91:08:25:b8:7a:a3:99:55:4a:74:47:
aa:2a:0c:0a:b5:fc:2b:ee:f1:1e:fa:80:b8:43:ed:
e4:be:e0:8f:01:46:11:90:b5:e2:a5:57:9d:9a:4d:
fe:57:a5:5e:6d:5a:3d:00:ee:a0:4a:cf:0d:68:fd:
30:62:50:4a:7c:c4:09:25:61:e7:6e:e4:dd:05:7f:
fe:5c:8f:39:30:af:11:a8:72:75:3a:50:3b:42:02:
21:6f:f1:bf:72:fe:f0:d6:de:da:6e:94:ab:83:69:
a4:62:bb:c0:02:6a:78:a5:19:33:76:fc:53:57:76:
40:35:bc:2b:b9:f0:b9:79:fb:b6:40:f4:3a:0e:0e:
14:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:0D:73:7A:37:CD:5A:73:D1:9B:A3:6D:D4:61:E1:D6:AF:BB:8E:BF
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/IQ1zejfNWnPRm6Nt1GHh1q-7jr8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
12:a5:29:09:f1:20:c8:4d:1e:b4:e1:21:e6:d7:ba:f8:68:2b:
17:1d:2d:24:6c:16:1c:17:bf:d9:06:76:fb:07:f1:7c:bb:25:
92:90:9d:86:36:3a:ab:4e:f2:f8:19:b0:9f:da:78:51:22:66:
83:7b:ba:9e:08:85:16:32:33:2f:ae:44:03:cf:e2:6d:b1:3e:
a9:f0:86:47:ea:91:a9:de:7e:99:fa:37:a4:01:a9:da:94:bd:
a3:14:28:d1:74:e2:34:eb:b0:78:04:12:f7:bd:ea:8e:30:9a:
40:f2:20:dc:bf:d1:94:bd:67:25:41:b3:0f:10:34:58:6c:1d:
1f:6d:60:d3:b0:aa:a6:ce:c9:a9:dd:ba:6e:63:28:9b:10:3e:
9e:b5:be:bc:61:d9:77:c1:9d:6e:b5:fb:80:44:63:01:19:15:
b3:a7:e4:8d:8d:b9:34:af:5b:d9:91:77:ff:06:57:33:7f:10:
49:95:e3:98:e4:a8:9d:5c:e5:e7:48:14:ea:36:78:cb:e0:97:
1f:80:9f:70:6e:aa:e7:a0:ab:be:58:53:f5:9c:ee:94:30:b3:
fd:1b:6e:b7:55:1b:f6:56:88:58:35:43:f7:e7:fd:c9:0a:b7:
cd:a6:6f:15:30:c9:82:8f:eb:e4:71:6b:33:9b:ac:3d:14:00:
ba:38:4c:6e
-----BEGIN CERTIFICATE-----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Generated at Sun Oct 27 23:53:27 2024 by rpki-client on console-fra.rpki-client.org