Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ReHsiYeGVy4eUtXxZvKXnfJ7PTQ.roa
File: ReHsiYeGVy4eUtXxZvKXnfJ7PTQ.roa (raw, json)
Hash identifier: 87LPDge842lCZwtt0oDCAsZ+md2cXP96OogbEsOFvoE=
Subject key identifier: 45:E1:EC:89:87:86:57:2E:1E:52:D5:F1:66:F2:97:9D:F2:7B:3D:34
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018B5E32E681A33C66231348CF5B9CE47395
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ReHsiYeGVy4eUtXxZvKXnfJ7PTQ.roa
Signing time: Mon 23 Oct 2023 20:21:15 +0000
ROA not before: Mon 23 Oct 2023 20:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 9087
IP address blocks: 85.237.76.0/22 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:5e:32:e6:81:a3:3c:66:23:13:48:cf:5b:9c:e4:73:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Oct 23 20:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=45e1ec898786572e1e52d5f166f2979df27b3d34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:9a:e1:c5:f8:72:91:e9:33:05:d7:a8:64:0f:
c0:eb:8d:92:b3:1c:36:cf:ad:6c:dc:14:bd:ef:90:
ec:1b:70:fd:65:5b:50:87:49:f1:7a:eb:37:2e:63:
fc:25:b7:c9:33:9e:e6:41:81:37:8b:97:b8:c6:b7:
88:61:ef:2c:3f:48:2e:01:9d:8e:b9:5a:f2:e0:76:
dd:76:4f:f0:82:b4:76:58:9d:0a:4e:6f:45:31:a6:
47:38:c9:9c:65:f8:3e:4f:d6:66:39:bc:80:5f:0b:
eb:00:f6:f3:bd:48:5a:6f:7c:dc:40:cd:84:20:cd:
37:be:a4:f8:aa:7d:82:91:a4:2b:c0:57:f3:99:c8:
45:8d:ae:cf:69:bf:a4:4a:7a:f2:d7:de:53:cd:3a:
c9:0e:92:47:c8:c2:15:e4:7f:e0:36:10:d9:d2:1f:
0a:19:b0:45:8c:69:d3:eb:51:7e:6a:c3:0d:14:a7:
64:b2:7b:30:e7:60:c2:e0:2d:41:fd:aa:9c:16:a9:
2c:aa:c5:5f:d5:be:7d:95:79:ec:23:07:ce:4e:c2:
7f:46:3b:07:0c:69:cc:ac:1a:a6:c4:e2:ef:38:8c:
bf:8d:db:9a:14:b1:32:a7:5e:5c:54:32:b4:5e:39:
4d:03:62:ee:27:4a:2d:7e:cf:76:54:98:e0:6c:64:
da:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:E1:EC:89:87:86:57:2E:1E:52:D5:F1:66:F2:97:9D:F2:7B:3D:34
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ReHsiYeGVy4eUtXxZvKXnfJ7PTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.76.0/22
Signature Algorithm: sha256WithRSAEncryption
05:17:b3:6c:31:a4:43:45:67:9f:c0:f7:18:88:4f:2a:fd:5c:
d2:f6:db:1b:01:50:37:55:03:66:db:c3:58:09:e3:df:96:d6:
49:dc:9f:de:cd:f5:0f:00:c6:db:82:85:ab:2e:16:f4:40:fd:
6b:2d:1b:e4:ee:6a:25:8b:8e:45:f7:a6:74:b6:dd:87:2b:80:
58:cf:14:28:91:26:bb:76:55:33:a3:42:24:3e:cd:dd:cb:c9:
cb:56:d7:f4:04:0e:51:ef:22:84:e4:aa:ee:b5:c7:08:cd:a6:
0f:a3:c7:3c:57:9d:c9:64:f0:5d:eb:de:05:27:26:5a:d3:70:
e5:81:09:db:f9:a4:75:e6:06:0c:0e:3c:9e:31:11:ba:22:68:
cf:70:35:7a:1b:4d:62:e9:de:8a:e8:42:18:26:69:fb:e7:fd:
47:5d:39:b5:3c:01:f3:e8:91:1d:5c:d3:f0:63:1c:c0:8f:0f:
19:4a:2b:b9:01:e1:54:b6:35:1c:ff:42:41:e4:c1:39:7f:cb:
d7:6c:20:2a:8f:c9:03:f8:d4:0f:78:c0:fe:9d:28:4f:d9:fe:
1d:a6:96:ff:1f:b4:10:56:19:d4:fd:db:ee:de:5a:cd:1a:ce:
c4:f4:b3:18:0c:d2:7c:21:3c:5d:bd:90:43:1d:47:d4:7d:af:
1f:cb:d1:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org