Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ywdtXh3Y8jDzA6Xzli2ev0cKXJ0.roa
File: ywdtXh3Y8jDzA6Xzli2ev0cKXJ0.roa (raw, json)
Hash identifier: fc3+4kRNB/wxMtlbxYm4hxpcBCIH7kNEBbqI5oN7SN8=
Subject key identifier: CB:07:6D:5E:1D:D8:F2:30:F3:03:A5:F3:96:2D:9E:BF:47:0A:5C:9D
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018931E83AB6FE6CABD087B24735BB2ED7D5
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ywdtXh3Y8jDzA6Xzli2ev0cKXJ0.roa
Signing time: Fri 07 Jul 2023 19:50:50 +0000
ROA not before: Fri 07 Jul 2023 19:50:50 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203416
IP address blocks: 85.237.89.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 24 Jul 2023 10:42:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:31:e8:3a:b6:fe:6c:ab:d0:87:b2:47:35:bb:2e:d7:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Jul 7 19:50:50 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cb076d5e1dd8f230f303a5f3962d9ebf470a5c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a5:50:0d:a4:dd:9f:f2:a3:85:1d:26:61:d6:
d1:82:e2:c9:99:57:36:f7:2f:38:10:03:06:b0:e7:
74:65:3d:68:0b:0b:c7:bf:97:06:6d:f9:a2:64:c5:
dd:e4:ab:f1:52:6b:72:bd:15:f7:4c:bf:0f:b8:4b:
02:dc:45:f7:db:94:58:b2:51:64:6d:25:51:2d:51:
d7:66:82:63:8d:76:d0:29:0a:e4:18:b0:72:1f:2e:
f1:53:47:0c:4d:65:18:22:7a:5c:51:d1:79:16:9d:
1a:07:1d:a4:48:3f:2f:5c:77:b6:e7:99:3c:60:bb:
d8:88:13:da:ca:27:fd:d5:b1:a9:10:1f:7e:c3:b0:
cb:11:ca:88:f1:1f:ef:fe:1b:4e:b5:86:aa:af:86:
9c:0d:9e:1d:e2:cf:7e:49:b0:45:09:fd:49:3c:fd:
3b:93:e0:3f:93:81:d3:eb:55:74:c2:57:33:33:27:
55:44:90:b0:a0:58:88:22:88:71:22:64:77:92:d0:
c1:48:84:d9:74:e9:07:d8:3d:0a:17:fc:3d:a5:c8:
d2:51:cf:7e:e3:36:02:5c:6b:7e:a9:94:e2:1b:e1:
f6:a4:e1:e4:1d:39:37:9b:10:54:70:49:7c:8f:89:
dc:f2:21:c2:29:92:04:2e:15:2b:90:71:a7:b7:43:
1d:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:07:6D:5E:1D:D8:F2:30:F3:03:A5:F3:96:2D:9E:BF:47:0A:5C:9D
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/ywdtXh3Y8jDzA6Xzli2ev0cKXJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.89.0/24
Signature Algorithm: sha256WithRSAEncryption
21:30:1f:00:aa:0a:51:95:d5:50:7b:35:01:4a:0a:81:49:d3:
f5:17:11:62:57:d2:38:9a:4b:81:d5:7b:72:16:e5:03:9b:87:
25:c9:12:4a:55:ab:ac:31:de:a0:cf:d1:80:d2:66:4c:d8:42:
0e:08:d8:1f:f1:eb:7b:0d:7a:8f:b6:2f:96:3a:4e:7b:a7:73:
1a:a0:c6:b2:63:cb:a5:8d:a8:24:ff:0e:bd:2b:86:b7:79:22:
24:08:d7:53:bd:90:4e:41:e2:ed:14:87:3a:c9:18:96:3e:e4:
d4:93:1b:81:14:a3:f7:ee:47:8a:42:b9:cd:b5:84:e8:5c:4b:
2a:11:5c:c7:63:bc:35:49:40:22:b3:8f:b1:4a:2e:af:d4:32:
79:30:51:b0:9c:98:eb:f2:4d:06:59:50:ab:af:89:d4:cc:71:
7b:bd:ab:a7:8a:77:22:51:d2:91:38:86:ab:df:c3:e8:72:1b:
b8:c4:92:e4:29:bb:30:93:7d:31:4a:f7:95:d0:a0:a2:ec:8e:
b0:15:0f:3f:37:1e:7b:14:33:bb:7e:8a:cd:bb:58:38:ac:1a:
7b:81:1e:07:5e:45:a5:3b:48:57:45:1a:4e:b3:e5:28:23:c1:
a8:a3:25:49:99:84:d8:be:72:6c:52:bb:9b:c8:5a:ec:75:d5:
fc:6b:3d:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:51:00 2024 by rpki-client on console-ams.rpki-client.org