Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/zXz_P3NZkIFw9nNayYQCjgO25Ek.roa
File: zXz_P3NZkIFw9nNayYQCjgO25Ek.roa (raw, json)
Hash identifier: b3o+ktUlYxl2dvUbwzmYLQ92fk/d9bOcaf4joPelD3o=
Subject key identifier: CD:7C:FF:3F:73:59:90:81:70:F6:73:5A:C9:84:02:8E:03:B6:E4:49
Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Certificate serial: 018727C377E5A9756EDE9BD14E9888959502
Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/zXz_P3NZkIFw9nNayYQCjgO25Ek.roa
Signing time: Tue 28 Mar 2023 10:28:54 +0000
ROA not before: Tue 28 Mar 2023 10:28:54 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137409
IP address blocks: 85.237.90.0/23 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 14:29:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:27:c3:77:e5:a9:75:6e:de:9b:d1:4e:98:88:95:95:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941
Validity
Not Before: Mar 28 10:28:54 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cd7cff3f7359908170f6735ac984028e03b6e449
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:6e:c6:20:0d:01:9c:c0:9d:d8:db:84:05:
20:41:39:1b:19:26:03:4f:6e:8f:1c:b1:64:da:44:
9e:bd:83:12:1a:e2:7a:8c:c2:19:c2:e5:14:54:54:
e3:ec:45:52:08:91:fe:c9:de:c7:f5:55:34:d7:53:
e1:38:6a:89:3f:d5:a9:e8:8f:b7:e5:7e:1d:0f:9c:
44:95:6f:c5:bc:2c:c6:cc:09:fe:37:e0:04:1c:4d:
b1:55:1a:13:67:24:88:d9:47:78:63:5a:da:06:13:
47:31:62:ed:1d:a3:ca:71:ca:c1:b1:84:b7:db:a8:
a0:14:f4:05:ea:a4:43:b3:f9:c9:07:65:02:ba:8a:
34:55:54:2d:4d:89:ca:2b:b4:3e:b5:19:20:fa:d2:
a8:50:21:a1:47:d5:6c:3d:de:2d:79:78:5e:9f:5d:
cd:e8:a6:bf:cb:38:b3:c3:84:01:1f:de:e4:98:4d:
5c:06:96:09:2d:f0:d4:3d:e7:83:3f:59:66:55:e1:
74:2a:92:45:55:ec:1f:f5:1c:99:33:49:cb:a9:0e:
c3:54:b6:1b:21:de:0a:3d:26:7f:34:b6:14:92:ee:
5e:f3:1a:84:51:4a:07:2b:39:e2:80:1d:45:ec:22:
9b:60:42:34:4c:0c:80:2b:ce:e4:46:1c:05:c2:e5:
12:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:7C:FF:3F:73:59:90:81:70:F6:73:5A:C9:84:02:8E:03:B6:E4:49
X509v3 Authority Key Identifier:
keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/zXz_P3NZkIFw9nNayYQCjgO25Ek.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.90.0/23
Signature Algorithm: sha256WithRSAEncryption
15:8a:1b:0b:72:b9:13:bb:5d:ee:fe:8a:44:b1:5f:7d:52:db:
de:53:90:9b:6d:36:ee:b8:b9:d8:18:49:de:f7:83:89:0e:7f:
86:60:89:75:91:de:a8:3a:80:ae:3f:fb:8e:46:8d:4b:ac:df:
48:77:d0:75:5f:1b:c4:ea:bb:fe:e2:5e:f0:c3:87:fa:16:d5:
dd:ba:67:28:fe:c0:84:eb:f5:cc:70:99:a0:32:35:9a:8e:80:
35:74:d5:8f:2a:e3:4b:47:63:71:32:bc:dd:7e:6b:dc:fe:4e:
18:3a:f0:73:6b:4b:05:e1:b1:fc:1f:17:b6:2c:0a:88:d1:ce:
a8:41:85:c9:41:34:bc:f7:44:94:26:d5:ae:38:b1:f0:5b:34:
6b:35:07:e2:22:59:c8:fc:34:1d:06:5f:19:51:83:ef:15:05:
0d:4b:c8:51:e0:1b:f8:bf:5d:f8:59:41:26:88:47:4a:3a:8a:
20:13:71:ff:47:20:d8:98:81:3b:12:64:0f:01:6e:28:45:1f:
ca:f3:ab:3d:d4:11:77:ad:02:d4:17:6b:88:67:3b:7e:cf:df:
87:a9:19:39:24:75:c6:4c:c4:90:5f:62:34:4a:2f:41:62:b0:
c1:5c:eb:83:87:68:63:83:43:cf:92:6a:ca:13:14:e4:64:0b:
f2:b3:78:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:58:33 2024 by rpki-client on console-fra.rpki-client.org