Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8f6JW6zqjOojQFbVNVs-zq1iQQ0.roa
File: 8f6JW6zqjOojQFbVNVs-zq1iQQ0.roa (raw, json)
Hash identifier: NIoAPM9H2/O4B4fGqh6fmD5/WZIR6FfRGP8geglGU1M=
Subject key identifier: F1:FE:89:5B:AC:EA:8C:EA:23:40:56:D5:35:5B:3E:CE:AD:62:41:0D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D923F143E97BB9BF90775EA3D2E6C1F6C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8f6JW6zqjOojQFbVNVs-zq1iQQ0.roa
Signing time: Sat 10 Feb 2024 09:00:23 +0000
ROA not before: Sat 10 Feb 2024 09:00:23 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51889
IP address blocks: 85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 30 Apr 2024 06:47:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:92:3f:14:3e:97:bb:9b:f9:07:75:ea:3d:2e:6c:1f:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 10 09:00:23 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f1fe895bacea8cea234056d5355b3ecead62410d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:65:35:f6:34:cb:e6:77:4a:9e:83:5b:c3:b2:
f4:00:6d:45:6a:b1:1a:9f:bd:6c:f5:8f:10:89:bc:
7a:2e:5e:48:9c:71:d4:26:67:46:aa:59:1b:f0:1a:
e3:77:e0:c2:f5:bc:db:4c:e5:eb:f7:39:71:27:f8:
2e:3c:53:a9:83:18:5c:70:94:65:34:57:e8:f4:06:
01:73:e3:a9:99:f7:9d:7c:0a:d7:9c:81:eb:ab:2a:
24:57:73:06:ff:13:c1:5b:2c:5c:ee:92:55:e4:61:
68:85:85:07:e5:22:c2:43:2a:9c:5f:3d:05:14:45:
06:91:0d:a2:72:fd:26:cf:05:56:64:e5:92:fc:c0:
10:91:8c:6c:bc:84:8b:34:55:de:7b:7d:1f:7f:9b:
4d:c3:10:5d:a4:b4:ef:bc:50:fa:39:8f:92:4f:09:
b5:ce:96:36:fd:93:d0:52:21:3f:38:bc:ac:8f:0b:
33:59:84:6d:12:2d:ed:ef:a2:90:7f:e0:0f:7a:7f:
49:a5:e7:07:1c:90:91:2c:31:3b:a4:3b:ac:a6:3e:
78:b8:20:d5:fe:20:a2:5d:3a:15:85:51:b5:6a:87:
e2:61:0c:e3:25:6c:71:6c:b8:4a:10:00:b2:29:8d:
a7:45:77:99:c8:04:f2:f7:86:c3:80:a6:03:a8:e9:
a9:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:FE:89:5B:AC:EA:8C:EA:23:40:56:D5:35:5B:3E:CE:AD:62:41:0D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8f6JW6zqjOojQFbVNVs-zq1iQQ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
0e:ea:38:8a:fb:c1:6b:a0:59:83:a1:25:d7:46:0f:5d:2c:8b:
ae:98:7d:60:59:83:7d:d3:74:c4:ee:78:81:87:2c:c9:d3:53:
6c:33:52:dd:3c:9c:1f:c8:12:aa:30:6f:1a:4b:97:c7:ae:14:
92:3f:77:fb:07:e5:3b:df:42:91:4e:6b:ac:55:14:67:4c:4e:
30:ad:3d:a4:af:df:66:03:e7:3f:23:a7:ba:09:ea:ae:a6:93:
04:0e:98:9c:3d:32:25:b2:bc:30:20:62:8d:2a:02:67:50:2e:
ee:54:a0:70:e9:03:a1:00:37:e9:db:3a:2d:a2:f5:41:5d:63:
8e:4c:57:0e:6c:6d:81:15:2e:d3:27:90:e0:51:9e:28:ea:4e:
2e:ef:65:42:3f:8e:58:66:f2:58:eb:f8:4e:6f:d5:a0:e1:a8:
08:3a:9e:cd:97:a0:05:a2:c9:cc:78:9d:42:c6:f6:8a:1d:af:
29:9b:e2:44:08:96:0c:1d:a1:e4:7a:19:f7:e6:0d:a2:a6:05:
3a:47:ee:b4:c1:76:d7:72:67:b2:63:14:59:e5:87:cc:e2:62:
77:9d:77:f1:f2:b2:37:12:06:ac:c0:bd:e3:4c:b6:79:3e:6f:
7e:cf:bb:33:af:e0:3c:f2:a4:0f:3b:d7:d8:2a:ca:a5:ef:5f:
ab:8a:63:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org