Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8kgeoZp7hDAvISiABXmffdwH3Rs.roa
File: 8kgeoZp7hDAvISiABXmffdwH3Rs.roa (raw, json)
Hash identifier: K/AgeM773QqODEeTNfL4womKllbEhjv58lUc3f3H2Ls=
Subject key identifier: F2:48:1E:A1:9A:7B:84:30:2F:21:28:80:05:79:9F:7D:DC:07:DD:1B
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018906723ED656E73B3442F5207B85B84271
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8kgeoZp7hDAvISiABXmffdwH3Rs.roa
Signing time: Thu 29 Jun 2023 09:18:17 +0000
ROA not before: Thu 29 Jun 2023 09:18:17 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:72:3e:d6:56:e7:3b:34:42:f5:20:7b:85:b8:42:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 29 09:18:17 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f2481ea19a7b84302f21288005799f7ddc07dd1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:90:f9:c1:8b:50:bd:d7:7a:25:ba:04:ef:6a:
e4:44:b3:97:b2:e6:d4:f4:f8:72:d2:bf:f8:c1:c9:
2f:13:87:69:6f:92:78:5c:3f:dd:04:3c:05:0b:4f:
a3:8a:5e:bc:6d:7e:f3:12:7b:a5:5c:d4:45:2c:0e:
4d:ea:08:f1:92:ab:a1:f7:00:7d:ad:f5:3f:19:35:
70:c3:00:f0:78:39:62:d9:a9:e6:84:8a:22:ed:22:
95:25:a3:e3:11:55:99:00:ae:76:68:1a:80:be:38:
19:89:59:1a:b3:f3:f1:02:26:d4:7a:b7:3c:6a:17:
d8:7b:2a:16:a5:0a:fa:42:e2:14:de:b4:26:db:bd:
09:c4:c9:b8:6d:67:03:40:f6:3d:66:d3:b5:ef:33:
93:32:c0:36:c3:35:9f:22:28:a3:ec:37:4f:5b:06:
ef:2b:4c:99:ce:5f:bf:41:a4:f3:85:37:bc:6c:58:
2b:df:7e:5f:88:c7:d6:6d:c6:34:60:b4:1b:89:17:
58:2b:9f:8b:ce:c8:a9:52:04:b2:1c:e8:82:b9:f1:
d7:92:24:db:6e:84:56:98:66:76:4f:af:8a:73:f8:
3e:53:d1:66:1b:f2:77:66:b1:8b:b9:0d:43:96:46:
e0:8a:e8:54:b3:3a:86:53:28:fa:34:1c:a5:78:a8:
eb:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:48:1E:A1:9A:7B:84:30:2F:21:28:80:05:79:9F:7D:DC:07:DD:1B
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/8kgeoZp7hDAvISiABXmffdwH3Rs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.161.0/24
85.133.205.0/24
85.133.208.0/24
85.133.233.0/24
85.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
82:2e:6e:9d:cd:97:b8:8f:f6:b9:31:ea:31:cc:03:40:c2:c1:
66:47:f9:e3:cc:f5:c0:9e:f4:70:ed:50:4a:05:c8:21:41:40:
6d:36:e4:87:f4:d4:d7:fb:db:69:e9:54:e6:8f:ea:35:90:9c:
db:9a:ba:7e:6a:12:3d:28:f8:ed:57:41:b1:21:ba:6a:75:f4:
97:4a:7c:df:58:55:ea:62:55:2f:a1:6e:35:bd:77:bd:7b:a4:
9c:ff:ee:73:15:a8:f0:29:d0:ef:3f:49:16:60:f6:8e:ea:70:
17:62:ad:d9:39:79:40:2d:5c:df:39:9d:57:2b:01:04:46:e6:
1c:79:4f:8a:d4:16:5b:8d:57:0b:ca:22:78:09:70:7f:32:da:
f2:9c:5b:5e:95:e3:dc:21:0e:41:a7:be:e0:0c:11:b5:2f:ff:
ef:0d:f7:27:27:f8:d8:80:22:40:08:83:71:c6:3c:54:a1:35:
ff:44:e2:3a:6e:ba:77:33:96:65:84:2f:37:c2:4c:97:62:e8:
e9:e1:eb:3a:ae:91:6b:2c:4a:16:18:df:0e:08:49:57:3b:58:
6a:58:b0:45:84:94:d6:ee:40:8c:83:45:7d:86:ff:8a:8e:51:
94:b7:dd:61:7c:34:42:0f:f5:3f:5e:35:4c:81:94:ed:91:06:
cd:d1:a9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 20 00:06:15 2023 by rpki-client on console-fra.rpki-client.org