Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3VY-eX7gmHJC63m3MDY8vepOD64.roa
File: 3VY-eX7gmHJC63m3MDY8vepOD64.roa (raw, json)
Hash identifier: eH5ZoGTcSJ7LxyOr5BRiuDZWkPc6LiOPgjHThhsPxXw=
Subject key identifier: DD:56:3E:79:7E:E0:98:72:42:EB:79:B7:30:36:3C:BD:EA:4E:0F:AE
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192E189DE20EA443339EA48B57B3D38EC48
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3VY-eX7gmHJC63m3MDY8vepOD64.roa
Signing time: Thu 31 Oct 2024 07:46:01 +0000
ROA not before: Thu 31 Oct 2024 07:46:01 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 215350
IP address blocks: 85.133.207.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 04 Nov 2024 05:58:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:e1:89:de:20:ea:44:33:39:ea:48:b5:7b:3d:38:ec:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 31 07:46:01 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=dd563e797ee0987242eb79b730363cbdea4e0fae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:45:76:91:ba:17:d7:b8:5a:f0:27:7f:81:
7e:7b:2e:97:7f:b7:62:7a:9e:08:94:76:e8:48:7d:
5b:d6:7d:0a:10:14:e1:84:58:b1:51:39:50:3e:bd:
71:39:fb:4d:63:a0:b2:2d:6b:d9:b4:80:27:3a:23:
da:cf:28:dd:53:99:20:1a:b2:19:12:7a:4d:71:3c:
8e:81:38:bc:5a:df:97:bc:05:2f:0a:82:97:08:b0:
4c:33:93:5b:9e:cd:67:b7:31:d6:9b:a3:57:83:ba:
99:33:bb:0f:5e:09:7e:05:44:f1:b7:f3:b8:89:2b:
af:dd:0f:15:d4:ff:be:5a:21:97:13:7d:0d:de:ab:
02:37:72:cc:fc:17:e8:97:cd:e6:13:02:d7:81:dd:
c9:9a:69:02:ae:86:a6:51:88:dd:ef:c3:8b:33:c5:
e3:81:34:22:9f:86:dd:03:19:08:e8:13:16:1a:37:
9a:38:af:71:eb:7a:e7:09:51:be:84:0a:01:18:1d:
63:d1:f2:45:d4:0b:23:97:6b:f6:b9:7d:2c:88:1a:
43:d8:ca:0f:91:f0:41:a1:33:7f:52:13:49:50:c3:
50:f4:c4:b5:12:71:10:1e:32:70:f6:b6:68:6c:95:
8a:9b:00:31:be:a9:c1:ca:67:21:90:55:0d:a0:16:
a4:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:56:3E:79:7E:E0:98:72:42:EB:79:B7:30:36:3C:BD:EA:4E:0F:AE
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/3VY-eX7gmHJC63m3MDY8vepOD64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.207.0/24
85.133.215.0/24
Signature Algorithm: sha256WithRSAEncryption
22:04:8e:90:f3:83:75:b4:ee:de:db:e9:7f:4b:c2:ce:70:87:
15:3a:a2:b5:28:c1:50:20:22:02:49:3e:c9:42:0f:e0:fc:fd:
b6:26:fe:00:4c:af:89:d3:06:56:8d:d8:0a:71:30:00:f4:ba:
54:ee:17:2a:52:6e:49:4a:33:75:1b:09:a4:f7:2e:c4:df:f3:
a4:78:2f:60:8c:45:29:33:bc:b5:79:80:99:66:e6:f8:28:97:
15:84:4d:d8:8c:5f:96:e7:29:c5:39:20:e4:45:62:93:5e:7d:
20:35:e3:f4:b0:8d:02:6b:27:8c:ad:bd:a4:ca:da:c1:ea:2b:
85:bb:13:71:4c:5a:50:e7:b0:58:58:92:f0:38:26:00:8f:35:
be:fd:0f:0f:67:1b:22:43:df:de:a8:2f:68:9c:29:a0:74:94:
5c:c8:e3:d2:31:eb:25:c0:e1:52:93:24:57:40:3c:1a:e6:0c:
ce:54:8b:ae:c7:41:6c:fe:bd:37:87:6a:6d:60:84:b5:09:91:
ec:68:0e:d4:0d:fe:04:84:3e:38:27:54:22:d8:a7:14:c1:70:
c4:4b:dd:4f:08:97:60:48:9a:0f:ec:68:9b:8e:d3:01:62:21:
bb:59:35:7f:18:63:19:e9:7c:3a:1a:61:e5:ba:fc:34:5f:a8:
33:65:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 4 09:05:01 2024 by rpki-client on console-ams.rpki-client.org