Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9buPoP3lYHe8aDGBPim53WyQK3A.roa
File: 9buPoP3lYHe8aDGBPim53WyQK3A.roa (raw, json)
Hash identifier: kLeyzV5Zj3ug4gp5SUzB2bUFm4clC/9F4Ug7urjQZdc=
Subject key identifier: F5:BB:8F:A0:FD:E5:60:77:BC:68:31:81:3E:29:B9:DD:6C:90:2B:70
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018CC793F2E3AB20D13168C121EAA4F3488A
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9buPoP3lYHe8aDGBPim53WyQK3A.roa
Signing time: Tue 02 Jan 2024 00:30:11 +0000
ROA not before: Tue 02 Jan 2024 00:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204104
IP address blocks: 85.133.194.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 24 Jan 2024 10:21:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:f2:e3:ab:20:d1:31:68:c1:21:ea:a4:f3:48:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 00:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f5bb8fa0fde56077bc6831813e29b9dd6c902b70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a3:7d:21:c9:aa:f6:eb:41:3b:0c:ef:56:06:
e1:19:32:53:d8:6b:9f:93:1a:e6:68:16:16:25:1b:
ea:a6:6a:6e:e4:37:75:f2:4f:0a:7d:d4:02:ad:16:
7b:01:8c:ae:f4:52:5e:d3:ea:08:c6:11:a5:b2:e4:
ea:bf:1f:7d:71:45:5f:4b:47:8f:7f:2f:58:b5:12:
24:aa:a3:16:62:29:c0:f9:cd:54:50:c3:d1:dd:c8:
cc:28:7b:e9:86:02:15:a6:c6:01:85:43:8f:e1:18:
15:f0:b4:df:1d:78:80:73:fa:0d:b1:52:32:ca:1d:
9e:b6:e1:8a:a2:e8:a0:9d:0a:e4:a1:0b:5b:40:4f:
32:e2:d7:93:7e:14:a3:d8:9c:2a:8a:a4:8c:80:42:
d8:92:50:cf:97:dc:3d:f5:3e:28:3c:ee:b8:5b:a5:
4b:c7:cf:69:86:4a:84:e9:75:2f:71:28:15:a5:00:
59:e6:da:71:a9:9e:84:32:19:e5:f1:51:cd:db:30:
92:49:14:8c:54:bd:d3:26:c1:2f:36:0a:3d:ad:da:
9b:0a:ae:c8:62:2c:02:94:35:7d:7c:67:9b:d0:fc:
78:a7:ee:c4:25:65:11:e4:b1:e3:8b:9d:a0:36:9a:
d9:cc:b8:9c:3d:a6:69:af:7e:66:39:75:26:94:3d:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:BB:8F:A0:FD:E5:60:77:BC:68:31:81:3E:29:B9:DD:6C:90:2B:70
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9buPoP3lYHe8aDGBPim53WyQK3A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/24
85.133.166.0/24
85.133.194.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:27:e7:22:ef:16:de:ab:87:9b:e1:c6:ed:e7:6e:52:10:e5:
c4:5d:8b:34:7f:dd:ac:1c:06:05:c9:27:28:40:74:22:09:0f:
2f:b3:05:33:7e:3e:69:ca:6a:4f:63:f4:3e:00:f3:12:dd:26:
6d:11:d6:d1:b5:4e:d1:9b:d9:ae:0b:6a:27:9e:14:f0:4b:c3:
fd:53:49:7d:38:e9:d9:42:85:87:8b:e2:10:bc:a0:7a:e1:b1:
f3:d2:06:5f:15:a1:32:ae:af:25:30:e5:af:42:dc:de:59:88:
cb:e1:71:a4:5d:82:33:a0:2a:a4:a8:dc:e8:40:81:7b:ae:5e:
ed:2a:81:c7:a7:16:ac:aa:61:48:c8:38:81:6e:da:11:af:56:
b7:1e:df:60:7e:63:e7:b8:e9:90:4c:78:9e:ac:92:6d:32:c2:
c2:48:70:42:68:bd:ba:08:d7:79:cc:49:3e:7a:78:10:07:c2:
34:5a:2e:0d:41:9d:3c:58:be:48:60:ba:16:1c:a0:48:34:05:
c2:d4:f8:4c:d2:74:31:8e:47:1f:07:39:f6:63:2f:c3:eb:28:
0a:70:5e:fa:12:84:61:c0:c7:03:5c:69:f9:c2:08:73:7c:19:
0e:1d:de:29:ef:4b:dc:2f:a0:c0:08:d2:82:54:fc:81:9e:a1:
37:80:69:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org