Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/10yuBig8p9WdheQysWWT35bOnAY.roa
File: 10yuBig8p9WdheQysWWT35bOnAY.roa (raw, json)
Hash identifier: XzLTlaos+GgeuFMz10NGvUZ0W5mOaM2g01nQlFFFK2g=
Subject key identifier: D7:4C:AE:06:28:3C:A7:D5:9D:85:E4:32:B1:65:93:DF:96:CE:9C:06
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 019107BC463FB2E160295391600DB0E876D6
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/10yuBig8p9WdheQysWWT35bOnAY.roa
Signing time: Wed 31 Jul 2024 07:41:04 +0000
ROA not before: Wed 31 Jul 2024 07:41:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215480
IP address blocks: 85.133.195.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 08 Sep 2024 07:12:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:07:bc:46:3f:b2:e1:60:29:53:91:60:0d:b0:e8:76:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 31 07:41:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d74cae06283ca7d59d85e432b16593df96ce9c06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3e:7e:00:4d:ea:66:d3:af:52:25:6a:3d:ba:
86:c3:ca:01:b2:c6:c7:7b:5b:12:c5:ec:9b:89:0e:
ce:a4:38:4b:60:f4:57:59:6b:ec:40:3a:90:7e:1d:
08:22:27:fb:ff:b8:86:e9:3a:d9:99:fd:62:ba:f4:
77:b0:65:0e:37:ef:81:81:31:da:a4:a1:70:04:cd:
27:b3:30:e3:a4:41:fa:59:0e:73:1b:43:03:63:36:
d9:76:f2:51:7b:f0:05:fc:36:4e:36:50:26:5d:27:
c8:e0:79:55:be:fb:be:c0:1d:38:50:68:6a:2f:fa:
37:42:25:27:ca:d1:df:5a:f2:15:20:c3:23:06:cf:
8d:7e:3e:f3:ad:40:bb:63:36:d1:21:b5:ce:ec:74:
db:de:ff:83:01:c0:2b:67:32:9f:00:93:6e:53:19:
34:47:49:f6:5e:91:ff:f5:42:7c:a0:59:de:f8:20:
50:98:26:9a:3f:ee:6a:77:7f:c0:ab:d1:58:7d:82:
fe:40:30:b1:f4:1b:8d:8e:26:17:61:c9:79:a3:14:
01:db:01:f8:24:ed:6d:6d:2f:31:d7:f8:70:b2:94:
21:e5:20:3d:71:4d:82:7a:fc:ac:d2:e0:2f:d0:01:
5c:c4:31:6b:da:e2:a6:34:a0:e2:42:7b:67:82:58:
3a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:4C:AE:06:28:3C:A7:D5:9D:85:E4:32:B1:65:93:DF:96:CE:9C:06
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/10yuBig8p9WdheQysWWT35bOnAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.195.0/24
85.133.224.0/24
Signature Algorithm: sha256WithRSAEncryption
51:51:82:a5:8e:29:77:cf:a5:da:f7:4a:f2:ac:0c:23:b1:dd:
54:b7:60:79:84:77:10:91:4d:ff:af:55:52:5d:52:ac:e6:f8:
c5:5a:c7:22:85:52:49:a0:d8:50:7b:be:fa:01:54:f9:88:6c:
d8:97:6d:66:50:3e:59:85:fa:12:0b:49:e5:da:59:61:da:c9:
e6:ab:a7:53:18:a6:94:c5:7d:e1:ed:c8:5f:a5:0b:be:b4:6e:
d0:64:cf:e1:7b:c2:14:50:c5:ca:26:f4:6c:0f:1d:52:13:1a:
4d:54:61:78:5a:d9:e4:f2:46:e3:c1:c2:cb:00:37:30:82:1d:
cc:d7:0d:9e:14:85:2c:dd:0c:65:52:b1:dd:46:49:a5:3e:ef:
03:22:8a:0e:34:f6:32:9c:bd:da:61:49:75:31:00:3d:47:be:
15:c7:71:86:89:ce:90:f3:3c:20:dd:d4:92:b9:c1:55:26:a1:
f9:c2:91:38:a6:7b:68:de:5e:c6:fb:f1:7a:79:43:27:e1:ee:
17:e2:96:48:4e:5e:16:7d:68:b7:14:46:84:ce:79:9e:c2:e1:
9c:a9:c9:19:6c:ba:ca:ce:64:f0:40:42:54:06:1d:70:2d:0d:
91:cf:28:d7:8a:34:e1:9d:10:a7:3b:a1:61:67:2c:25:b9:69:
62:32:89:6c
-----BEGIN CERTIFICATE-----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Generated at Sun Sep 8 08:58:31 2024 by rpki-client on console-fra.rpki-client.org