Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9pYiaRAf2SWFUNJByL-79mgExWg.roa
File: 9pYiaRAf2SWFUNJByL-79mgExWg.roa (raw, json)
Hash identifier: /+ugzfWgTs8FbRU4uwGVS3U7gL3f3H8tVMeLTAA3mpU=
Subject key identifier: F6:96:22:69:10:1F:D9:25:85:50:D2:41:C8:BF:BB:F6:68:04:C5:68
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01908D8F53C68AE8C02C2099A7923E3292B0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9pYiaRAf2SWFUNJByL-79mgExWg.roa
Signing time: Sun 07 Jul 2024 14:18:18 +0000
ROA not before: Sun 07 Jul 2024 14:18:18 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 85.133.225.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Aug 2024 16:25:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:8d:8f:53:c6:8a:e8:c0:2c:20:99:a7:92:3e:32:92:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 7 14:18:18 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=f6962269101fd9258550d241c8bfbbf66804c568
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cf:85:81:ad:77:2a:cf:a2:da:0e:6b:3f:e4:
34:97:39:fc:d1:f9:5b:57:ca:6e:32:9f:fb:39:8c:
18:10:7e:c5:61:ad:61:dd:e9:8a:01:74:b6:6e:52:
8c:9a:e0:5a:77:3f:a5:b6:19:75:c5:4a:be:f5:d9:
4a:19:ec:e0:41:ed:9d:f7:5c:4f:4f:d9:53:63:20:
00:93:81:7b:12:08:01:da:8c:23:48:a9:a2:aa:86:
b4:79:d9:b9:78:1e:cb:64:18:b9:cd:35:39:b8:61:
f9:da:bd:df:34:00:f5:71:09:2d:bf:62:db:cc:ca:
ef:67:c5:1d:30:1e:ec:39:bd:24:04:6b:c1:eb:ca:
ae:0b:0a:0f:4f:32:9b:e4:f8:ac:fd:0f:77:0a:85:
27:d0:b4:e0:16:4c:be:f0:1e:f3:62:71:c1:84:23:
3b:b2:36:3d:68:95:7e:57:51:07:7c:58:4c:92:4c:
08:05:99:4d:7d:e2:17:e7:3b:03:18:83:f5:ae:57:
71:57:f8:f4:c5:20:ed:88:02:65:9d:03:4a:a1:94:
a7:88:36:40:71:7e:88:93:e7:42:2d:2e:32:b2:bd:
ee:db:25:d4:7a:3b:14:06:0a:bb:8d:27:68:48:95:
5b:ea:58:07:c4:27:3a:4e:d1:81:98:af:a7:60:00:
4b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:96:22:69:10:1F:D9:25:85:50:D2:41:C8:BF:BB:F6:68:04:C5:68
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/9pYiaRAf2SWFUNJByL-79mgExWg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.225.0/24
85.133.227.0-85.133.228.255
85.133.240.0/24
85.133.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:37:d4:e6:31:c9:ed:3b:0a:ec:e1:64:52:10:c1:2c:a6:07:
8f:8c:47:e1:83:91:af:29:32:fd:1b:57:5a:4b:44:6f:0b:68:
93:51:f6:9a:b6:12:16:ed:cd:0f:20:d6:c7:7a:58:5e:60:d9:
06:35:d6:06:9f:49:68:6f:41:5b:8f:9c:77:f9:4a:bc:e3:1e:
68:b8:e7:eb:c5:c4:3a:c1:2b:3c:59:0f:d4:8d:92:f5:1e:75:
29:57:1e:8b:54:a6:a8:7e:69:de:4f:79:cf:29:ef:4f:ca:44:
4d:bf:08:1c:ee:ed:09:c8:1c:5a:b8:3e:e3:2a:72:ed:d5:bd:
9f:c9:59:ff:46:ea:8e:f7:55:36:fb:63:76:21:74:11:d2:ab:
4a:40:53:17:e1:a7:d6:7b:bd:85:aa:63:9f:b5:a7:1c:1c:4e:
da:0c:89:97:2a:9a:78:31:32:62:b1:b5:01:0f:19:61:05:09:
a1:67:13:cc:15:89:60:3e:74:23:99:fa:b7:79:fa:18:8a:6c:
37:e6:0e:06:68:6a:31:7f:b2:4b:fa:fe:9e:00:95:7a:03:7f:
46:c7:d5:40:fb:e0:3c:20:54:b0:30:9f:c7:e1:57:9e:b9:2a:
33:23:9e:8d:0b:6f:c5:f0:bf:84:d2:a8:00:88:e2:63:2f:6f:
df:51:33:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 18 18:53:34 2024 by rpki-client on console-fra.rpki-client.org