Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yGjlbluOr6PxAb09g3oNQu4K7GM.roa
File: yGjlbluOr6PxAb09g3oNQu4K7GM.roa (raw, json)
Hash identifier: +hlkADVE/lA/DqHc78ZV5y5OoXgRhWqeJGGPlLJqbik=
Subject key identifier: C8:68:E5:6E:5B:8E:AF:A3:F1:01:BD:3D:83:7A:0D:42:EE:0A:EC:63
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018A1D74ABFFF9DA774A99C14B107C9D0E51
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yGjlbluOr6PxAb09g3oNQu4K7GM.roa
Signing time: Tue 22 Aug 2023 13:35:00 +0000
ROA not before: Tue 22 Aug 2023 13:35:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 61112
IP address blocks: 85.237.68.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 27 Aug 2023 05:28:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:1d:74:ab:ff:f9:da:77:4a:99:c1:4b:10:7c:9d:0e:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Aug 22 13:35:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c868e56e5b8eafa3f101bd3d837a0d42ee0aec63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ac:04:91:b6:8b:c3:c9:00:52:c3:85:b3:5e:
bd:5c:9e:dd:7b:91:9e:9d:df:6f:46:6d:55:d2:db:
2a:68:4e:ea:87:eb:d8:4c:48:9b:42:32:10:92:ab:
2a:f1:af:e2:97:f9:f5:e0:8e:a8:e6:38:15:27:3a:
39:6d:9d:ed:e5:01:ae:cd:a5:0a:2d:d4:60:1b:ad:
fc:7b:ca:bc:c9:2e:5f:6f:4e:0b:8f:05:3e:3c:b3:
d8:89:a5:03:fd:1e:31:7d:8d:73:57:f9:2b:6a:83:
05:07:fe:cf:e3:23:50:11:0b:8f:97:f9:b4:24:6c:
2b:4a:87:c7:43:34:6b:31:9b:4f:4e:b6:5b:84:85:
1c:39:33:9d:e2:81:e5:40:2a:bb:f8:13:ec:90:4d:
64:1a:46:2b:fd:23:96:16:09:ee:69:96:42:24:c2:
d9:ab:1a:db:4c:d6:55:5d:b4:fe:01:23:a2:db:2c:
85:3b:05:73:e2:3c:88:2e:57:7f:01:ad:51:6c:62:
1f:52:0a:94:68:4b:d3:b8:f2:ed:fc:2b:bf:8f:5c:
55:57:d7:f3:3a:e7:cd:c4:f5:02:e2:20:03:77:91:
1a:30:56:9c:cd:60:f5:a6:12:e7:6a:39:52:10:ab:
be:fc:3a:1e:39:ff:3f:65:ba:4a:12:35:94:a9:b2:
a3:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:68:E5:6E:5B:8E:AF:A3:F1:01:BD:3D:83:7A:0D:42:EE:0A:EC:63
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/yGjlbluOr6PxAb09g3oNQu4K7GM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.68.0/24
Signature Algorithm: sha256WithRSAEncryption
26:a6:26:e6:f3:9e:d2:8b:f4:db:fe:f5:d7:28:59:c6:b4:85:
e7:75:c5:5f:37:82:7d:5a:7a:1f:e9:12:30:48:2b:de:82:6b:
27:65:63:23:b9:50:d8:15:05:8c:38:98:72:c1:85:c7:b3:17:
08:64:55:33:82:ee:07:02:fb:da:28:66:25:ab:83:ec:0b:e3:
a7:5a:e7:e0:f0:29:0c:90:6a:85:5c:85:61:c3:55:a2:b8:4e:
be:64:e7:2f:cf:0b:c1:34:b1:29:44:f5:18:3c:ea:5b:fc:64:
50:b1:d3:ba:77:d2:ba:6d:7e:e3:f3:c0:1d:9b:1c:f8:43:5e:
3b:43:c0:0d:7c:9d:b1:3a:35:da:3b:2a:b6:2e:2a:1c:15:c1:
7e:ca:08:61:75:94:44:0f:e7:83:b3:ae:92:df:53:ff:5e:af:
db:82:9a:97:d8:73:a7:92:d3:d4:a1:e6:87:f8:32:81:5a:7b:
bf:bd:6a:17:83:14:73:ed:29:c7:f0:20:45:98:8d:48:36:9b:
7b:b2:34:6a:60:df:77:26:23:e2:86:e0:ba:8e:2d:dd:49:b5:
1b:54:c8:0a:6a:c9:dd:91:f1:7c:a6:b6:85:22:f7:9e:04:08:
fc:cc:2d:ec:bd:b6:dc:ca:77:8c:ea:f9:d4:99:22:dc:7c:ac:
aa:ca:de:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org