Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a7TAaL2QJ6vSl5dahNdDaGvmRzw.roa
File: a7TAaL2QJ6vSl5dahNdDaGvmRzw.roa (raw, json)
Hash identifier: MG6Ffw7Bzqy6yvvbAbhbE89Y2wrc5YtRdh1ZPtHNaoc=
Subject key identifier: 6B:B4:C0:68:BD:90:27:AB:D2:97:97:5A:84:D7:43:68:6B:E6:47:3C
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0188BE9AEAAC39B09B8ADA72BE5A416B1226
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a7TAaL2QJ6vSl5dahNdDaGvmRzw.roa
Signing time: Thu 15 Jun 2023 10:30:03 +0000
ROA not before: Thu 15 Jun 2023 10:30:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 35053
IP address blocks: 85.237.69.0/24 maxlen: 24
85.237.70.0/24 maxlen: 24
85.237.76.0/22 maxlen: 22
85.237.84.0/22 maxlen: 22
85.237.88.0/24 maxlen: 24
85.237.64.0/22 maxlen: 22
Validation: Failed, certificate revoked on Wed 21 Jun 2023 10:26:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:be:9a:ea:ac:39:b0:9b:8a:da:72:be:5a:41:6b:12:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 15 10:30:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6bb4c068bd9027abd297975a84d743686be6473c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:97:7f:f6:b4:cb:b8:78:4e:92:1a:56:88:16:
1e:13:7c:fd:64:5c:10:2e:39:e3:b8:8b:d7:4b:ab:
b3:f3:ff:c9:f2:e2:77:3b:f3:91:c9:0a:ba:37:cf:
4a:f1:db:87:dc:a3:d0:0f:6b:86:68:6d:92:c5:8e:
33:f4:39:ef:83:28:36:ac:61:70:7b:69:8e:d2:30:
7f:cd:45:bc:0b:af:03:b6:94:f6:9e:d3:d1:29:8f:
49:76:06:a7:ac:8b:97:58:67:e6:6d:ec:5c:84:06:
f2:df:29:15:31:ac:08:e5:2c:02:06:b3:3d:c3:9d:
f2:90:49:01:85:72:cf:82:25:09:da:8c:b7:24:79:
a7:52:7d:47:c2:c4:f7:18:19:f7:3d:3a:17:6d:6d:
ca:fd:77:0c:6d:33:2a:35:12:f8:32:5e:32:42:86:
a5:ff:ca:54:07:c7:20:ea:9c:96:58:24:1b:9b:b5:
64:62:b0:2a:8b:34:d3:c2:14:06:43:c7:91:5a:c0:
8a:d0:6d:1a:ac:0b:b6:3f:67:bc:7b:28:22:19:d0:
b8:45:de:2c:0b:be:50:dd:7f:03:00:1b:c7:45:c2:
07:88:21:50:e6:13:86:9d:3f:7c:64:c4:91:5f:aa:
ce:a6:56:8e:55:1b:58:1c:a3:63:4a:1f:35:61:cb:
f5:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:B4:C0:68:BD:90:27:AB:D2:97:97:5A:84:D7:43:68:6B:E6:47:3C
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/a7TAaL2QJ6vSl5dahNdDaGvmRzw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.64.0/22
85.237.69.0-85.237.70.255
85.237.76.0/22
85.237.84.0-85.237.88.255
Signature Algorithm: sha256WithRSAEncryption
8f:f7:c4:a5:a8:c3:c5:81:03:20:1c:85:6a:54:38:6d:99:b7:
34:14:d0:d7:50:2f:ac:8e:18:ff:50:10:bd:e3:24:c4:e4:62:
11:e5:80:65:8d:cf:31:06:f2:13:a5:8c:4f:17:33:68:f7:8a:
52:af:e9:5c:64:79:c3:c3:8f:56:93:e6:e3:81:49:09:cd:64:
21:16:58:1c:30:fb:a4:28:3b:63:df:1a:be:00:8c:9f:88:9a:
ed:f5:dd:80:4f:00:c1:e9:46:b7:1e:13:64:f3:b3:ac:5c:51:
35:7c:e1:8b:4d:51:6e:79:05:d9:de:af:54:da:01:c3:bf:73:
6a:21:2d:73:ac:2b:49:0d:c2:bf:66:24:a3:1d:3c:1a:70:d8:
7c:32:d9:2a:0f:64:14:22:b7:ad:e6:7d:1e:59:43:86:b7:a0:
bd:3b:59:74:ba:ca:d2:cd:28:59:5d:a7:11:9b:ee:92:c5:e8:
93:ad:40:6b:9e:73:5a:c1:92:9c:dc:b7:f9:39:38:08:fb:d5:
bf:ba:e5:41:14:f9:c4:bc:4c:9a:a9:e9:bd:3c:8e:fd:64:f3:
25:80:00:30:c1:da:65:e0:db:2e:f0:ac:37:c4:71:55:4b:91:
d9:14:25:92:a0:5d:c3:4d:c0:ef:31:f4:54:bf:cc:cc:7d:f3:
89:a3:76:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org