Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1q8ZAVY7I4EcPUeRHtRbJk5yle8.roa
File: 1q8ZAVY7I4EcPUeRHtRbJk5yle8.roa (raw, json)
Hash identifier: qqxaTlMvrQXuIbTkwkkhhK0GWmf+MuhzjMvzSS0xdZg=
Subject key identifier: D6:AF:19:01:56:3B:23:81:1C:3D:47:91:1E:D4:5B:26:4E:72:95:EF
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018C7833BF91FCB14F903604354813D9D412
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1q8ZAVY7I4EcPUeRHtRbJk5yle8.roa
Signing time: Sun 17 Dec 2023 14:35:06 +0000
ROA not before: Sun 17 Dec 2023 14:35:06 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 201194
IP address blocks: 85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 20 Dec 2023 15:12:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:78:33:bf:91:fc:b1:4f:90:36:04:35:48:13:d9:d4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Dec 17 14:35:06 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=d6af1901563b23811c3d47911ed45b264e7295ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:4c:fe:34:33:48:7b:9d:db:9c:4c:3a:01:2b:
84:a6:c2:22:c7:70:b0:bf:db:1f:32:86:85:a7:2f:
ca:47:1f:82:d9:46:c3:b3:9a:1a:00:fa:8b:e8:0f:
06:aa:2a:f3:6f:00:60:28:dd:dc:bc:1e:67:f0:aa:
3d:94:c9:1e:61:df:a9:f6:a1:09:c2:16:fc:37:1b:
61:06:39:e1:7d:0b:89:3d:a9:16:f2:b9:7c:b8:20:
e0:05:8a:4c:c8:c5:c7:8f:03:f2:97:8f:f6:93:fd:
b2:e1:14:f4:80:15:86:df:19:df:fe:e6:47:99:19:
0b:75:d3:d3:a5:ae:21:a6:1c:5a:b1:de:30:02:75:
7e:03:bb:37:f2:fe:ce:60:54:66:d2:97:5d:dd:28:
e3:e1:0c:af:ca:8d:a8:1e:1d:8a:77:f3:dd:8e:89:
85:ef:7f:3f:ec:3a:74:7f:7a:22:d2:8b:92:e2:6d:
35:d5:69:0d:ca:be:12:6b:67:b9:e3:e8:dc:43:93:
87:ea:47:a4:06:cf:bd:c3:ab:02:d8:d9:72:00:f1:
bf:7b:a3:7d:aa:40:61:a0:f5:34:60:31:93:de:2f:
48:e5:d2:7c:4a:cd:e6:a9:00:e3:e8:75:dd:cf:31:
ac:c4:3a:cf:c7:7e:29:02:c1:00:d8:e1:98:a3:d1:
be:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:AF:19:01:56:3B:23:81:1C:3D:47:91:1E:D4:5B:26:4E:72:95:EF
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/1q8ZAVY7I4EcPUeRHtRbJk5yle8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
96:b6:5f:89:df:a8:2b:39:69:6c:f4:f0:42:6d:ad:d9:7f:15:
05:e2:a8:bb:3d:0b:25:24:b4:55:4c:03:02:e9:a4:58:a1:41:
d1:dd:69:79:5b:59:4a:55:0f:9f:b9:fc:5d:12:62:1d:b5:ed:
09:21:db:c3:61:7b:22:fa:ab:4d:5c:7f:0d:a5:a9:ce:9c:c9:
1b:42:09:2b:c9:38:3d:08:90:68:2f:ab:3f:f0:dd:f1:d4:48:
fc:14:f0:ff:9c:3a:50:f8:09:58:2c:11:5c:37:de:19:b0:e4:
5e:53:0e:91:be:70:6b:b9:b1:70:1e:61:be:3a:cc:88:c9:30:
c1:96:ae:d2:22:4a:29:87:5d:16:35:f9:28:f2:e6:b2:fb:83:
48:3c:68:45:51:00:5d:43:49:f1:42:d5:f4:c2:3e:3a:34:02:
aa:e0:19:49:9e:8d:ea:8b:d3:93:68:ab:53:c7:35:7e:9c:11:
f1:34:82:60:4f:a7:3f:78:52:d8:09:5d:5b:ca:5e:a0:7b:19:
c4:99:4c:38:58:37:16:65:07:d8:77:0f:ed:34:07:50:1f:cb:
55:00:bb:9e:02:6d:34:1b:8b:38:21:45:ab:e2:3c:c0:dc:28:
74:2a:9a:f5:93:70:ff:7b:66:2b:35:af:9f:06:55:4b:a9:6c:
4a:7d:5b:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org