Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/F94mU0e_N1tnIwe7v5jFDJvLYyE.roa
File: F94mU0e_N1tnIwe7v5jFDJvLYyE.roa (raw, json)
Hash identifier: 5pteuFMcT8Cvg9FaUS42IV4698mYIH2eiV6LIRGC7bE=
Subject key identifier: 17:DE:26:53:47:BF:37:5B:67:23:07:BB:BF:98:C5:0C:9B:CB:63:21
Certificate issuer: /CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Certificate serial: 018CECEFB27DCE980F8CC692A2CEFFCF3D08
Authority key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/F94mU0e_N1tnIwe7v5jFDJvLYyE.roa
Signing time: Tue 09 Jan 2024 06:36:20 +0000
ROA not before: Tue 09 Jan 2024 06:36:20 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 29555
IP address blocks: 85.117.96.0/24 maxlen: 24
85.117.97.0/24 maxlen: 24
85.117.98.0/24 maxlen: 24
85.117.105.0/24 maxlen: 24
85.117.99.0/24 maxlen: 24
85.117.100.0/24 maxlen: 24
85.117.101.0/24 maxlen: 24
85.117.102.0/24 maxlen: 24
85.117.103.0/24 maxlen: 24
85.117.104.0/24 maxlen: 24
85.117.106.0/24 maxlen: 24
85.117.107.0/24 maxlen: 24
85.117.108.0/24 maxlen: 24
85.117.109.0/24 maxlen: 24
185.57.72.0/24 maxlen: 24
185.57.73.0/24 maxlen: 24
185.57.74.0/24 maxlen: 24
185.57.75.0/24 maxlen: 24
217.76.68.0/24 maxlen: 24
2a03:32c0:300e::/48 maxlen: 48
2a03:32c0:18::/48 maxlen: 48
2a03:32c0:17::/48 maxlen: 48
2a03:32c0:b::/48 maxlen: 48
2a03:32c0:d::/48 maxlen: 48
2a03:32c0:16::/48 maxlen: 48
2a03:32c0:c::/48 maxlen: 48
2a03:32c0:a::/48 maxlen: 48
Validation: Failed, certificate revoked on Tue 09 Jan 2024 10:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ec:ef:b2:7d:ce:98:0f:8c:c6:92:a2:ce:ff:cf:3d:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Validity
Not Before: Jan 9 06:36:20 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=17de265347bf375b672307bbbf98c50c9bcb6321
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:c7:10:ce:78:48:84:39:c6:0f:fc:6b:3f:c8:
8a:4e:bd:db:80:e9:81:17:1c:bc:18:7f:a4:be:e6:
b9:a6:c2:ee:61:f3:89:ca:3a:0c:e3:7a:d0:8f:cb:
95:09:aa:0b:15:70:d7:f5:9c:1e:d2:80:58:04:15:
10:43:5e:90:32:fe:9f:de:d8:e8:0a:c4:31:64:f0:
f5:1f:80:ab:e6:7e:39:cd:17:5a:e1:9a:1a:84:26:
31:ea:30:84:63:dc:ac:a1:57:61:56:73:9b:0c:82:
8e:76:2d:73:ad:79:48:39:ce:28:8a:93:f0:ae:88:
fc:d5:75:50:b6:be:35:1e:fd:a8:95:7c:37:5a:83:
50:1f:95:a2:de:d8:e7:a3:71:ed:14:2f:14:a5:8f:
16:79:66:fb:d5:2a:30:d4:9b:bd:7d:04:e5:16:a1:
70:85:0f:d6:94:82:35:32:c9:93:94:14:72:11:32:
eb:11:6b:a6:81:34:dc:6e:88:c4:a1:6b:5c:f1:2d:
2d:4c:2a:cf:6a:4e:67:34:da:c3:15:4f:9c:a7:1d:
0f:31:97:2b:d3:c3:dc:af:07:c8:cb:8e:7f:47:44:
d0:ec:f2:31:50:7e:b5:5f:f5:56:c3:c1:4f:f5:1e:
6d:4f:3c:80:20:4e:b5:03:68:23:71:c7:fd:94:53:
6c:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:DE:26:53:47:BF:37:5B:67:23:07:BB:BF:98:C5:0C:9B:CB:63:21
X509v3 Authority Key Identifier:
keyid:5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/F94mU0e_N1tnIwe7v5jFDJvLYyE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0-85.117.109.255
185.57.72.0/22
217.76.68.0/24
IPv6:
2a03:32c0:a::-2a03:32c0:d:ffff:ffff:ffff:ffff:ffff
2a03:32c0:16::-2a03:32c0:18:ffff:ffff:ffff:ffff:ffff
2a03:32c0:300e::/48
Signature Algorithm: sha256WithRSAEncryption
08:1b:70:31:fb:8c:0c:10:c9:a3:e4:9c:49:83:ec:66:e7:19:
fa:e1:35:a8:88:ff:5c:b2:62:77:70:ff:65:75:a1:21:0d:10:
59:bd:b0:22:e2:b1:39:42:fa:47:ff:f4:ad:e3:39:15:b9:fc:
45:15:f3:19:64:f6:11:29:c5:9f:40:bf:46:88:ae:78:e6:05:
31:46:e4:c5:c5:e7:39:f6:96:ad:88:65:37:cb:c3:28:dc:19:
72:b9:8a:52:24:a6:d0:8d:32:b5:9a:f7:3b:80:b6:af:3c:2a:
7e:9c:b9:c3:f6:21:03:d5:89:cb:66:1e:21:ee:40:79:51:21:
39:92:0e:f0:dc:c6:e0:b2:c1:03:ac:f8:42:94:79:36:49:b9:
08:8d:bf:c7:0e:23:cd:0a:55:9a:b2:65:50:da:cd:08:16:a4:
27:d5:13:ad:24:af:4e:3d:98:8d:08:06:5e:6c:e0:7e:3f:38:
59:56:8a:94:9c:a7:11:73:d8:3e:e4:b6:ce:b0:0e:f0:59:e1:
60:ea:19:f5:79:2f:d7:ca:af:bb:24:b1:b5:85:d6:23:dc:f6:
11:0a:24:4d:06:33:36:35:c4:31:54:9e:35:f2:41:aa:9f:c0:
02:bb:27:80:54:e2:b3:dc:3f:6e:66:3c:66:a2:c1:2e:9a:70:
29:be:ec:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:08 2024 by rpki-client on console-fra.rpki-client.org