Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6x75Kg0c5O5T6buE014YPYtYreM.roa
File: 6x75Kg0c5O5T6buE014YPYtYreM.roa (raw, json)
Hash identifier: SsS8JABxmWQXiPA0t5+t8XHaOkF39jlIJbk7vmddL8s=
Subject key identifier: EB:1E:F9:2A:0D:1C:E4:EE:53:E9:BB:84:D3:5E:18:3D:8B:58:AD:E3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D9DB9E3F18382AD04F80F8824924DEA6B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6x75Kg0c5O5T6buE014YPYtYreM.roa
Signing time: Mon 12 Feb 2024 14:30:21 +0000
ROA not before: Mon 12 Feb 2024 14:30:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 85.133.137.0/24 maxlen: 24
85.133.178.0/23 maxlen: 24
85.133.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 13 Feb 2024 07:33:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:9d:b9:e3:f1:83:82:ad:04:f8:0f:88:24:92:4d:ea:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 12 14:30:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=eb1ef92a0d1ce4ee53e9bb84d35e183d8b58ade3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:2e:82:25:69:23:8d:91:df:ae:cf:04:11:62:
6e:72:56:97:8a:a0:33:15:e1:f1:14:e4:7d:40:c2:
ed:73:ee:59:2b:72:02:13:08:0a:46:a4:de:5b:24:
cc:d3:6e:5b:57:4f:91:cf:8c:ef:1d:d0:f4:fc:f7:
c6:0d:d5:f1:3a:86:83:d6:69:db:70:c1:7e:8b:60:
20:7c:97:cd:21:67:67:9a:3e:ff:bc:6e:18:da:78:
03:58:84:a5:85:f0:78:92:ad:60:15:d7:1e:a8:a8:
9a:38:83:ad:63:af:61:18:b9:97:d9:c3:dc:be:b7:
ed:a0:34:88:87:13:46:e7:cc:7e:de:a0:7d:ca:32:
88:9a:19:8f:c5:5b:c3:95:b7:4f:ee:42:00:3e:2c:
3b:55:27:0e:4a:dc:8b:72:71:ef:e5:ae:5a:a7:f5:
33:b5:1e:6e:bf:a5:9c:3b:bb:ee:41:1a:04:71:72:
b5:bc:8e:4e:25:db:82:37:7c:0a:fb:53:50:e0:56:
a9:d0:79:38:94:3e:69:ac:d2:e7:fe:27:ce:e5:74:
0c:02:2f:ce:f1:86:e8:4f:76:7d:57:ce:e1:06:44:
20:fd:cf:86:f6:8b:ef:30:be:a6:cd:4a:42:02:a6:
7c:d4:a6:6b:a2:d3:d4:ce:4b:b9:5a:25:cb:59:a5:
a0:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1E:F9:2A:0D:1C:E4:EE:53:E9:BB:84:D3:5E:18:3D:8B:58:AD:E3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/6x75Kg0c5O5T6buE014YPYtYreM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.137.0/24
85.133.178.0/23
85.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
af:3b:80:93:d3:f7:88:84:f4:d1:1e:dc:1e:78:67:09:39:dc:
b2:9d:a9:f4:a4:15:d9:ab:37:93:dd:9b:58:e6:a8:5b:14:82:
d0:bd:12:ad:09:71:c8:22:cc:2c:01:9e:d0:3c:1f:d2:e0:b0:
bc:fa:1a:52:c9:24:d3:ca:90:5e:e8:7e:c6:56:44:b9:5f:48:
c8:d2:6e:93:fe:76:d4:2f:dc:ea:ae:3f:f5:95:70:87:51:85:
5c:69:8a:93:51:9a:b6:9d:98:d3:00:02:e6:2f:9b:33:84:29:
d8:72:ba:16:11:94:20:14:03:5c:b6:f2:16:83:19:66:ed:2c:
63:72:15:b8:c0:c0:91:98:60:13:af:5f:b2:1f:8e:a4:cd:93:
52:a1:8c:b6:ee:37:03:b9:c3:11:8f:0c:ff:b6:d0:74:7f:05:
5c:d5:62:0a:4f:5d:2c:72:f2:21:d6:7a:29:73:7f:1f:e4:53:
b7:e6:58:91:b1:c5:ea:61:82:cb:f8:7e:45:8e:59:8a:d6:74:
f4:a2:20:90:c9:08:30:05:69:3b:e4:70:e2:7c:82:51:0b:76:
7d:88:b3:fc:11:e6:ea:2d:2b:c0:24:7d:e6:31:52:92:53:52:
6f:2c:0e:a8:8b:53:80:3a:e8:75:f0:c3:70:69:24:18:fe:53:
ff:0e:76:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Feb 13 11:39:50 2024 by rpki-client on console-fra.rpki-client.org