Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1H4VvU8iiA6cFCP41B-VJQYlhzc.roa
File: 1H4VvU8iiA6cFCP41B-VJQYlhzc.roa (raw, json)
Hash identifier: Ts6aRFvxHAPWioamb1IErOjmgVQu+fFuAYwn/daw+uU=
Subject key identifier: D4:7E:15:BD:4F:22:88:0E:9C:14:23:F8:D4:1F:95:25:06:25:87:37
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0191607816BDC467BA31C64440A845B97014
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1H4VvU8iiA6cFCP41B-VJQYlhzc.roa
Signing time: Sat 17 Aug 2024 13:12:48 +0000
ROA not before: Sat 17 Aug 2024 13:12:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34918
IP address blocks: 85.133.197.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 24 Aug 2024 08:04:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:60:78:16:bd:c4:67:ba:31:c6:44:40:a8:45:b9:70:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 17 13:12:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=d47e15bd4f22880e9c1423f8d41f952506258737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:44:c2:a0:af:60:6d:a8:fa:b9:19:2d:cc:5a:
6f:bc:d1:7a:de:d8:2d:b9:6f:4d:8e:a0:50:e0:05:
75:9a:6b:40:a3:02:11:03:94:8c:40:01:c8:f9:50:
c7:f4:37:25:5a:bc:cf:67:9d:bb:3f:86:45:27:b1:
9c:dc:e8:eb:c9:40:0c:32:93:01:fc:e9:71:14:4e:
b9:a0:89:23:07:24:30:92:b3:91:6e:a0:d3:64:b9:
ff:46:14:5a:fe:ed:19:a0:76:cf:85:ac:16:bb:d6:
1d:45:2a:2f:a5:be:d2:94:70:9a:26:bf:14:4c:1d:
77:28:12:95:a3:08:57:d5:4b:e6:9a:b7:54:9e:8e:
67:12:78:ec:09:5f:62:f0:9c:4b:95:f9:45:36:a2:
53:af:83:c4:39:d5:66:6a:b5:a8:5d:a3:12:e0:61:
50:e1:fc:53:1e:72:f9:ef:9f:cb:fb:1f:2a:51:fd:
53:e1:52:2d:5e:27:01:86:15:92:99:f9:b9:0d:da:
3e:f7:2d:8b:85:64:44:95:af:c0:a2:1c:43:31:08:
30:1a:bb:91:0b:90:b8:16:3c:53:bb:d8:27:5d:ec:
d2:03:09:ac:f7:36:93:de:57:89:52:01:32:4d:31:
54:38:7a:9e:ba:10:93:53:72:58:1c:83:54:bf:71:
80:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:7E:15:BD:4F:22:88:0E:9C:14:23:F8:D4:1F:95:25:06:25:87:37
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1H4VvU8iiA6cFCP41B-VJQYlhzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.197.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
27:ec:6c:c7:e0:1d:e3:62:20:17:a7:32:57:06:ef:fa:df:f6:
28:91:81:2e:2a:e4:08:1f:c8:ae:b5:41:3a:c2:89:57:5e:8d:
16:43:b1:4d:b9:0c:9b:91:1c:1c:d8:74:47:97:0f:42:42:6c:
8e:6e:55:45:66:34:b0:f1:a6:31:0b:b6:d9:c9:fb:5a:ab:0e:
e5:80:23:23:6b:23:2f:01:9d:01:c8:f4:c8:d7:d8:c0:a8:89:
2f:c4:66:b3:a2:8c:17:1a:11:d4:6d:23:58:e6:36:24:04:5d:
93:58:f2:7a:45:e2:05:e4:82:c5:60:b7:7f:c8:41:b2:82:ba:
62:4e:2e:10:25:63:f6:86:18:03:b0:9f:e5:ba:2c:2c:9a:38:
f3:4d:ad:98:30:39:bc:9f:4a:81:75:45:10:61:6d:33:dc:98:
92:bc:9a:69:d8:bf:0c:11:91:e8:6f:c6:b6:dd:10:9d:f0:40:
a9:f6:24:9a:1a:82:94:2d:73:6a:9b:cd:95:6b:71:f4:71:d0:
60:ee:7c:e0:3c:1b:5f:10:dc:0e:f5:a0:79:09:a9:09:80:ab:
36:a7:77:14:c2:92:ed:9d:57:a8:cc:90:1d:f7:a6:71:9d:b9:
04:e8:83:cb:00:23:1e:b7:ad:39:66:b6:4d:ab:35:86:5c:bf:
7d:bb:79:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 24 09:28:42 2024 by rpki-client on console-fra.rpki-client.org