Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/JIdZKIuPJaANWGfpCfU-fUHFPXA.roa
File: JIdZKIuPJaANWGfpCfU-fUHFPXA.roa (raw, json)
Hash identifier: IdsdwiMNN2u6aD8TMyGRs9+vSb0PVhxZuMUiQBB4VQs=
Subject key identifier: 24:87:59:28:8B:8F:25:A0:0D:58:67:E9:09:F5:3E:7D:41:C5:3D:70
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018C5D355973B06BE2E3675CC3AA94F6221D
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/JIdZKIuPJaANWGfpCfU-fUHFPXA.roa
Signing time: Tue 12 Dec 2023 08:47:06 +0000
ROA not before: Tue 12 Dec 2023 08:47:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 834
IP address blocks: 85.237.80.0/22 maxlen: 24
Validation: Failed, certificate revoked on Sun 31 Dec 2023 13:27:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:5d:35:59:73:b0:6b:e2:e3:67:5c:c3:aa:94:f6:22:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Dec 12 08:47:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=248759288b8f25a00d5867e909f53e7d41c53d70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4d:93:af:a8:a1:fd:8e:95:e4:a7:ac:8c:1f:
99:77:a4:a3:d5:c7:dd:f5:4e:6b:5e:a5:2e:2e:b0:
fd:df:50:f9:7b:0c:bb:59:75:68:e5:d8:41:ec:b3:
77:d6:1f:cb:84:85:62:77:dd:d8:a3:34:2c:26:67:
09:a1:85:88:42:85:cb:55:b5:23:c3:fa:ef:cd:b1:
0a:b4:c8:6b:ef:e9:48:71:3f:0f:a2:ac:26:db:7d:
42:00:40:17:79:ee:52:7e:6e:41:fe:69:71:f4:9d:
0a:3b:93:14:59:46:54:1e:e5:be:90:ac:1a:ce:48:
e3:35:62:9d:63:22:6b:03:c9:6a:52:d7:20:57:cb:
6d:bf:b1:e6:ef:a7:2d:b9:45:86:8f:8f:18:1e:85:
be:82:95:22:3e:95:db:bc:9a:3e:6b:75:2b:3a:93:
44:cb:78:74:60:62:bd:16:ec:65:54:71:87:c6:ce:
77:db:34:fc:d4:bf:4d:17:b0:b4:a9:66:b6:fb:be:
7d:d7:1f:ef:f6:f0:9f:5c:ef:53:fc:b2:fc:70:1f:
ad:f0:af:ce:2f:21:3f:81:c6:a3:70:53:cf:3f:79:
d1:40:70:5f:dd:07:e4:47:f3:df:01:97:50:c5:5a:
73:b4:c8:95:08:6b:e8:69:5b:e2:37:f0:7c:48:9b:
49:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:87:59:28:8B:8F:25:A0:0D:58:67:E9:09:F5:3E:7D:41:C5:3D:70
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/JIdZKIuPJaANWGfpCfU-fUHFPXA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.80.0/22
Signature Algorithm: sha256WithRSAEncryption
4c:0d:85:71:8f:75:4e:53:37:8d:76:26:ea:0c:8a:24:56:9c:
13:fc:3c:e1:e2:bd:17:3e:bd:de:b5:a5:d1:25:6a:78:e5:68:
24:df:cd:66:36:6c:03:84:61:5a:cf:c3:77:3e:1c:79:7e:75:
ea:2e:aa:3b:66:04:cb:98:d9:52:00:36:f8:e9:ec:af:d4:7c:
66:43:01:87:0a:35:70:2d:e0:5f:bf:d3:d9:1f:ab:02:89:f9:
7c:7e:04:c8:db:7e:a4:6c:b2:1f:4f:49:8e:e3:f6:a4:10:18:
04:c8:01:7f:98:ea:6d:22:e5:12:19:06:21:1e:a1:06:d7:86:
f6:2b:b9:ed:6b:79:06:32:e7:f0:cb:2c:41:15:fb:18:4b:7b:
14:bf:91:55:dd:e0:fd:8e:cd:5b:e6:df:21:0d:ea:e2:61:cb:
e9:f0:4a:7e:d0:af:27:4f:ec:92:bc:24:c1:70:61:9a:00:2c:
6d:af:1a:50:48:f3:f3:c3:56:1f:ff:2d:71:6f:a3:0d:2a:be:
87:7a:cc:ad:40:77:e9:97:7d:86:76:4a:0e:bf:bb:95:cf:32:
02:65:ee:81:33:9b:e4:2f:c2:32:61:aa:8a:59:98:4f:3e:2b:
ae:28:fc:fd:9c:f4:99:61:21:0c:5d:59:1e:13:99:16:81:70:
eb:1e:13:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org