Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/xLTRqfDUUnb2ycx29favxS_O6KA.roa
File: xLTRqfDUUnb2ycx29favxS_O6KA.roa (raw, json)
Hash identifier: 1sdxcrURpyeplnh2XsCOA9y5eVDTrAWuayqHdBGRt4k=
Subject key identifier: C4:B4:D1:A9:F0:D4:52:76:F6:C9:CC:76:F5:F6:AF:C5:2F:CE:E8:A0
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 0187DCCBE768B6A5062F472694A68759DC26
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/xLTRqfDUUnb2ycx29favxS_O6KA.roa
Signing time: Tue 02 May 2023 14:09:23 +0000
ROA not before: Tue 02 May 2023 14:09:23 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 397373
IP address blocks: 85.237.72.0/21 maxlen: 24
Validation: Failed, certificate revoked on Mon 08 May 2023 08:58:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:dc:cb:e7:68:b6:a5:06:2f:47:26:94:a6:87:59:dc:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: May 2 14:09:23 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c4b4d1a9f0d45276f6c9cc76f5f6afc52fcee8a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:85:28:59:ac:2b:f6:16:ad:b5:8a:3d:c4:bf:
aa:4e:a3:ba:e4:10:3e:2b:40:1b:02:26:a5:65:c6:
81:cc:6a:3d:88:11:5b:a1:1c:47:06:17:31:1e:46:
14:48:f7:22:34:aa:93:06:c0:77:f9:d2:30:a1:75:
25:7d:e8:74:cb:8b:1d:0e:9f:20:eb:50:fd:60:4f:
7b:31:e3:59:cd:3d:84:cf:84:9f:12:b1:6c:f3:9d:
a2:4b:f9:c9:78:66:22:0d:e3:a7:f2:95:8d:78:ae:
af:ab:50:1c:d9:26:5e:88:0a:68:fd:d6:b8:e5:17:
61:2a:2a:9c:97:5d:20:e0:06:55:5a:c7:23:ba:c5:
c8:8f:49:fb:df:67:72:9e:cf:0a:6b:32:44:41:ac:
65:87:4d:ce:27:5c:c7:4b:e1:ba:ff:e4:70:13:d6:
c0:b7:c8:67:fc:f4:fd:2c:06:d2:a8:44:e1:4e:06:
84:50:a2:ab:d0:f9:27:28:0b:4f:15:6f:c9:66:92:
37:73:2a:3f:86:9a:f2:cd:d9:59:7e:11:bb:a7:85:
8a:47:d3:db:61:a8:4c:f5:f2:50:3a:96:dc:61:a6:
0f:1d:14:8a:2a:c6:ca:8d:b9:05:98:29:7b:5a:bb:
c6:ab:c5:8b:ca:83:53:a2:16:c8:68:d5:9e:55:1b:
8f:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B4:D1:A9:F0:D4:52:76:F6:C9:CC:76:F5:F6:AF:C5:2F:CE:E8:A0
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/xLTRqfDUUnb2ycx29favxS_O6KA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.72.0/21
Signature Algorithm: sha256WithRSAEncryption
4a:72:fc:bc:92:83:ba:f9:4e:96:3d:d1:84:a2:f6:00:fb:dc:
2d:9c:3c:c0:0e:b5:c3:51:cc:ba:b4:c7:0b:86:7b:34:f5:21:
3b:2c:81:65:e2:76:30:ab:e4:d5:c2:61:4c:64:5e:93:a8:f3:
54:52:04:3e:15:d7:76:f4:91:a7:bd:af:44:e2:cc:63:2e:00:
4a:61:f9:26:5f:d7:c9:22:a7:c5:f3:2a:7e:e7:71:37:6b:d4:
46:82:2f:16:41:33:99:8f:4d:d4:34:4e:13:8e:a4:57:f8:a9:
f0:1f:8d:2d:11:3f:00:57:ee:09:29:e0:78:c3:a8:e5:a6:16:
3b:0b:8f:93:05:88:91:05:c3:a3:22:ad:9f:1d:94:d6:ed:ab:
52:09:f9:6c:08:54:83:f5:05:fa:bf:70:39:c8:ae:c3:d5:86:
4f:6c:e8:97:88:ff:8d:5d:09:b6:40:b8:41:d9:bd:d9:b1:49:
c8:e8:c8:41:69:31:ef:bd:9c:e0:0f:cc:3a:26:85:e2:86:d5:
3c:6d:56:71:27:92:48:e5:82:fd:73:a5:66:70:73:b0:2d:ae:
e9:2a:3c:61:0a:ff:e1:a3:36:26:02:98:eb:95:76:83:50:de:
d4:f3:09:d8:5d:9d:bc:97:25:71:a1:5e:52:cd:9a:2e:92:f5:
fd:2d:1f:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org