Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/l9ULlLiV5GTIP8lBaJMoDMfknXY.roa
File: l9ULlLiV5GTIP8lBaJMoDMfknXY.roa (raw, json)
Hash identifier: GVYxj+Jzo/dwYcVU1jl+zy636qfy6idXuQKGfpg+htQ=
Subject key identifier: 97:D5:0B:94:B8:95:E4:64:C8:3F:C9:41:68:93:28:0C:C7:E4:9D:76
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0188DD7E38CCA76C6DDD2A53A95644F0A9CA
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/l9ULlLiV5GTIP8lBaJMoDMfknXY.roa
Signing time: Wed 21 Jun 2023 10:26:56 +0000
ROA not before: Wed 21 Jun 2023 10:26:56 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 63023
IP address blocks: 85.237.76.0/22 maxlen: 22
Validation: Failed, certificate revoked on Sat 21 Oct 2023 05:51:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:dd:7e:38:cc:a7:6c:6d:dd:2a:53:a9:56:44:f0:a9:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jun 21 10:26:56 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=97d50b94b895e464c83fc9416893280cc7e49d76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:dc:e0:f8:ec:22:63:d2:e6:02:14:1f:e2:3e:
d8:3d:f2:1e:89:61:60:41:b9:d6:66:63:9e:7a:53:
11:1f:c9:31:98:a0:ba:b9:66:bf:83:20:18:1a:a2:
b1:3c:25:b6:f3:95:ac:b0:cd:7f:55:ab:c9:19:d6:
c2:ae:03:11:37:c7:20:c8:97:d5:16:18:7d:6d:f6:
74:18:15:31:11:8c:8b:f6:88:99:ee:e3:2d:e0:ef:
ce:51:4d:72:68:1c:52:f6:db:f5:9f:1e:98:c1:35:
5f:2c:7c:d8:e4:46:13:5a:bd:12:3f:13:92:30:53:
e7:56:ec:ab:27:c2:ac:58:26:38:9b:a3:03:2f:66:
26:b9:4b:7e:ec:8e:40:b7:08:bb:40:18:07:ce:23:
74:59:56:7b:65:a9:ba:bc:90:f2:d6:50:8f:d6:93:
bd:e9:9f:c1:f7:6b:67:61:75:7b:b9:c4:9e:98:e7:
40:fd:80:e0:7b:9e:75:21:69:08:5e:bc:03:de:7e:
62:0c:e0:cb:b8:47:a0:5f:5f:b7:d1:bf:95:cc:ad:
f5:5e:8c:79:20:ef:62:69:73:28:d7:73:67:7b:30:
fd:2b:2b:b9:ba:35:f1:84:c9:58:8e:49:46:0e:bf:
20:f6:10:8e:91:93:f3:4e:8b:c1:00:d6:12:6b:6b:
d3:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:D5:0B:94:B8:95:E4:64:C8:3F:C9:41:68:93:28:0C:C7:E4:9D:76
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/l9ULlLiV5GTIP8lBaJMoDMfknXY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.76.0/22
Signature Algorithm: sha256WithRSAEncryption
01:d2:9e:76:9b:3e:55:5a:4e:e0:24:b5:6b:53:3c:1d:ed:14:
f0:5b:d8:93:cf:50:bc:af:1b:48:3e:b1:8e:27:d4:6f:91:ec:
f8:11:0b:21:49:75:09:4a:b7:83:a8:fd:3e:78:07:01:c3:ba:
f8:60:35:cd:36:d8:df:0f:71:6c:e9:84:e3:f7:22:3a:ae:10:
81:92:4b:4f:a4:bd:ca:56:4d:16:e2:2d:31:9c:e7:4a:57:59:
5e:fb:e7:e1:5a:24:d0:8b:82:d9:96:ba:69:10:2b:12:7e:39:
43:0f:1c:a9:77:34:d8:1d:f4:6a:bb:9d:6c:56:85:58:a6:ea:
3b:8c:f6:bc:ba:43:60:6f:e2:eb:8a:aa:9f:7e:f1:b3:50:51:
12:c7:e2:aa:10:dc:5a:c8:c2:c2:4b:db:60:75:8e:af:7f:7a:
a1:83:38:d7:04:f9:09:b3:f7:09:71:c1:3c:fd:41:e7:b6:73:
19:59:81:ba:d0:f4:5a:92:fd:24:e4:dc:3d:45:1c:d4:a9:14:
ce:0a:06:b1:90:8c:81:59:f7:2b:fd:5b:20:82:fa:db:33:ac:
3e:78:61:a7:f8:f1:dd:c0:3c:4f:32:63:40:2f:46:fa:e4:19:
3f:18:af:58:9d:77:08:88:e2:44:da:fb:8c:87:97:12:82:15:
c4:dd:d2:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org