Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6P0l0zNJ3beWvaCWLbMZ_Um4t6I.roa
File: 6P0l0zNJ3beWvaCWLbMZ_Um4t6I.roa (raw, json)
Hash identifier: kOMyJ3zhdNXdbVtTHiOLMLFjKjcjwphh1xCc582X6xk=
Subject key identifier: E8:FD:25:D3:33:49:DD:B7:96:BD:A0:96:2D:B3:19:FD:49:B8:B7:A2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0188D4F065A93DFA9CBC74F9FDE38082D370
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6P0l0zNJ3beWvaCWLbMZ_Um4t6I.roa
Signing time: Mon 19 Jun 2023 18:35:04 +0000
ROA not before: Mon 19 Jun 2023 18:35:04 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 85.133.199.0/24 maxlen: 24
185.41.0.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:d4:f0:65:a9:3d:fa:9c:bc:74:f9:fd:e3:80:82:d3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 19 18:35:04 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=e8fd25d33349ddb796bda0962db319fd49b8b7a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ef:ec:d7:4b:82:f8:4a:05:54:57:21:23:a4:
a8:73:e2:df:2a:1f:a2:d7:d8:74:e4:ff:41:39:a2:
ed:68:6b:e6:cf:e4:19:4d:1d:c4:1f:05:9e:a1:d1:
aa:65:a0:ca:6f:e5:15:9f:89:70:c3:96:d7:d7:12:
77:d2:a6:f4:47:69:60:c8:f7:48:2f:c8:1e:55:f1:
4f:a1:ec:83:2c:93:ab:60:96:8e:86:50:ab:02:1d:
bd:7b:41:b1:08:82:74:07:d0:5e:20:68:ab:db:3e:
ad:0c:bd:d8:78:92:2e:4f:a5:85:1c:9f:8a:f2:0b:
70:14:d8:48:79:4e:e9:88:4d:cc:8a:d0:e2:ac:75:
cb:23:b6:0a:b2:97:da:c3:20:b9:86:59:90:93:ce:
4c:42:30:a7:af:d5:7d:c9:92:51:3f:b9:16:03:a7:
ac:93:0c:38:e0:b3:27:93:8c:3e:34:96:44:02:c9:
1d:11:a2:27:87:0e:7b:f2:71:ff:84:3c:2f:6a:87:
5c:29:fb:08:05:1c:d4:4c:28:cf:7d:e3:eb:41:b6:
d4:be:02:f2:53:c7:8e:d7:20:66:25:8c:fa:85:aa:
e5:09:cb:f1:4f:2a:af:b6:6a:00:98:a4:4d:84:9d:
82:74:1d:8e:10:81:32:1e:dc:48:09:db:67:0d:38:
0d:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FD:25:D3:33:49:DD:B7:96:BD:A0:96:2D:B3:19:FD:49:B8:B7:A2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6P0l0zNJ3beWvaCWLbMZ_Um4t6I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
185.41.0.0/24
Signature Algorithm: sha256WithRSAEncryption
46:85:5b:0f:46:8b:9a:9a:1c:2d:0c:b6:14:6b:9c:99:84:32:
34:82:62:23:a8:ac:05:74:0d:80:86:82:1f:4a:14:e6:ef:50:
a6:c2:e5:4b:ad:9a:a9:56:2b:a5:e6:e2:84:ac:a3:3f:75:00:
8b:e5:2e:ee:e6:23:38:33:ce:0c:53:25:24:c4:a3:0e:bb:6b:
45:e6:c9:57:56:bd:89:01:b9:0a:ea:da:7d:94:38:96:89:79:
ee:9d:57:8b:46:d2:ba:d3:5e:ce:6b:2e:55:bf:e7:6c:14:71:
94:b5:d5:03:98:89:b3:9a:24:cd:c3:8b:2d:ad:6c:fb:b6:b4:
27:57:c1:7a:98:ba:7d:22:4d:3d:1e:b1:4e:8b:84:74:2d:5c:
38:1e:b4:2b:34:ac:c8:8a:fd:39:64:a5:57:23:a1:64:64:50:
94:d3:3c:cb:02:5c:77:d5:c5:7b:15:bd:0e:8f:5c:7b:50:6c:
f9:50:10:a5:ec:af:b9:27:80:1b:ba:ac:f0:ed:99:c1:aa:a4:
23:8c:07:ca:2b:64:ce:f5:2f:c6:0b:6a:df:ea:39:ca:60:1d:
18:17:89:95:22:d2:fc:aa:63:bb:14:b6:69:40:74:ae:1d:a0:
3f:6e:84:7a:b4:6f:e2:9d:e4:82:d8:9e:21:8c:06:eb:6c:23:
db:1c:fc:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org