Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Dfnxg9-3lTWKpcRRfKnY8IkszSI.roa
File: Dfnxg9-3lTWKpcRRfKnY8IkszSI.roa (raw, json)
Hash identifier: WpCXEOQcNdiN05/BhOmfizOrV6ae/a3nL7mwlYlKgFg=
Subject key identifier: 0D:F9:F1:83:DF:B7:95:35:8A:A5:C4:51:7C:A9:D8:F0:89:2C:CD:22
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0192C022286A8648A7B3206CDA9154E82226
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Dfnxg9-3lTWKpcRRfKnY8IkszSI.roa
Signing time: Thu 24 Oct 2024 20:05:16 +0000
ROA not before: Thu 24 Oct 2024 20:05:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 3320
IP address blocks: 85.133.193.0/24 maxlen: 24
85.133.214.0/24 maxlen: 24
85.133.254.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 25 Oct 2024 09:06:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:c0:22:28:6a:86:48:a7:b3:20:6c:da:91:54:e8:22:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 24 20:05:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=0df9f183dfb795358aa5c4517ca9d8f0892ccd22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:3c:aa:59:ab:74:10:2d:58:22:e5:9d:02:
db:25:b0:d9:6c:81:4d:30:4e:6a:1e:86:20:28:af:
cf:80:f3:48:93:93:e9:6e:de:02:4d:bd:4f:d0:68:
12:39:52:01:9c:14:98:fe:71:de:12:d2:9b:83:3b:
91:ea:a8:83:23:d1:6d:32:b6:e8:f8:49:39:83:fc:
a5:28:a2:c0:47:6c:29:44:24:7f:a5:ac:98:a0:bf:
23:c2:d4:5f:c7:6a:eb:53:0d:c2:af:c6:01:ef:ee:
cb:49:5e:8d:97:b3:19:da:25:61:b1:ec:e5:8b:72:
d1:f6:44:d7:f9:dd:f5:24:15:64:10:63:d3:6c:89:
c8:67:33:c4:16:1c:a1:ea:a7:5e:3b:f0:8e:12:75:
62:4f:ff:ac:df:3f:e2:b4:ef:b8:26:e7:a8:56:58:
fd:35:83:3f:83:cd:8b:f1:3e:42:bc:97:e2:3f:ed:
50:29:bf:7c:4e:b0:fc:39:50:e3:2f:75:fe:d6:a5:
23:af:bb:84:83:e6:20:f3:d4:9c:58:cf:b1:0e:48:
0a:98:89:56:db:7c:01:93:04:08:6e:05:39:92:26:
72:e6:7b:e5:3e:73:c4:d2:c4:7b:f3:78:7a:15:1f:
31:48:35:b2:52:27:65:bf:d6:3a:36:64:73:9b:d3:
f6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:F9:F1:83:DF:B7:95:35:8A:A5:C4:51:7C:A9:D8:F0:89:2C:CD:22
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Dfnxg9-3lTWKpcRRfKnY8IkszSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.193.0/24
85.133.214.0/24
85.133.254.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:f4:31:0d:64:26:8b:81:fe:f3:53:22:41:c2:99:23:94:a5:
4e:d2:3e:45:f2:c8:b8:1d:ee:62:0b:24:e4:c2:5d:55:26:c1:
e6:81:66:18:c2:b6:d3:97:ee:a9:54:9f:c4:0b:01:e2:e1:50:
a2:b6:0e:d6:99:ae:8f:01:95:93:03:a2:4c:29:7c:08:ba:e1:
48:3b:bd:1e:aa:ee:85:7f:17:18:03:6e:c9:d1:ab:1e:7f:c9:
a1:01:f5:29:42:b6:b1:31:57:ae:29:6a:4f:ac:73:33:82:f3:
a3:10:4e:c3:6f:03:38:38:9e:86:58:29:ac:53:16:08:86:33:
03:23:ae:07:0d:28:ca:ed:d3:1d:83:3b:92:1a:e5:f5:77:d1:
69:fb:17:62:0d:18:bd:96:0e:fa:a0:cf:df:6b:f4:3c:d1:c3:
82:d5:b9:3e:76:fe:29:6b:ed:23:35:d0:5b:a6:cb:f7:dc:98:
d6:6a:7b:53:fd:df:ea:70:9a:b6:3d:44:79:70:69:3b:8a:03:
c1:5c:d0:5e:cb:bb:3f:22:2e:78:90:14:31:d7:78:61:6b:87:
98:7c:ca:22:12:91:fc:77:08:fd:96:bd:59:35:8f:60:63:67:
83:1c:91:15:ed:a2:e0:3c:6b:f4:06:c0:f5:23:4d:33:85:cd:
f6:27:78:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 25 12:38:02 2024 by rpki-client on console-ams.rpki-client.org