Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ERp8tzmmZKMdbtcJ78hDf59HNWY.roa
File: ERp8tzmmZKMdbtcJ78hDf59HNWY.roa (raw, json)
Hash identifier: /Y9w1eme3SrhWqUoNPqpgI5M0wVLTZHZ/wdSMB/iGQs=
Subject key identifier: 11:1A:7C:B7:39:A6:64:A3:1D:6E:D7:09:EF:C8:43:7F:9F:47:35:66
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01896E2C589692A34712036962A1C83E7BC0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ERp8tzmmZKMdbtcJ78hDf59HNWY.roa
Signing time: Wed 19 Jul 2023 12:42:27 +0000
ROA not before: Wed 19 Jul 2023 12:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 23 Oct 2023 13:11:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:2c:58:96:92:a3:47:12:03:69:62:a1:c8:3e:7b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 19 12:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=111a7cb739a664a31d6ed709efc8437f9f473566
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:53:c3:c2:d0:92:f4:ee:c0:47:22:a4:99:70:
5f:fe:4f:d8:6c:fd:31:03:3c:60:54:b6:9b:46:41:
b5:3e:83:71:3e:72:a7:42:e1:47:27:e0:93:b0:60:
85:6a:76:fa:10:ac:57:16:dd:c3:20:e7:7d:b0:0b:
f3:c5:fa:55:0a:53:92:e5:40:5b:46:f0:d4:63:c4:
fd:31:d5:9a:14:22:4f:b4:f3:15:5a:20:44:27:64:
ce:9d:76:52:2d:04:63:2f:df:9c:5b:ab:92:96:49:
78:07:8e:74:08:ec:2d:69:98:c3:e4:9a:74:ab:a5:
ef:b2:c9:03:02:25:6a:b0:d5:b4:5e:9c:2d:dc:a8:
3a:c3:e4:b0:05:e0:2a:f6:5f:98:5b:b5:24:bd:2a:
32:44:1e:16:e9:18:43:84:40:00:3e:78:39:10:a8:
9e:07:62:58:a0:17:cf:bf:c0:c3:94:be:32:6f:a8:
54:ab:a4:73:43:35:ff:12:6e:b3:98:d5:79:03:5c:
7a:55:21:e2:8d:11:14:c4:8a:9f:9b:96:d0:d9:2c:
82:0c:37:83:ab:12:71:19:54:b9:a2:4e:42:80:14:
b2:41:c8:0a:9d:78:fb:9c:94:a8:2a:3e:6f:8c:ae:
7a:41:8c:0a:7a:d6:a1:a7:31:05:56:bf:b5:7a:40:
ce:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:1A:7C:B7:39:A6:64:A3:1D:6E:D7:09:EF:C8:43:7F:9F:47:35:66
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ERp8tzmmZKMdbtcJ78hDf59HNWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:3e:c4:58:3e:33:16:0b:36:5f:d8:bd:61:0a:f4:61:b1:ac:
bf:91:56:bd:c4:44:7d:1e:ff:b4:c1:77:0e:d7:8d:fc:7c:09:
f9:bb:43:c3:43:4a:10:5d:48:0e:8c:fb:93:0c:a9:10:e4:21:
60:76:7e:ae:3d:87:25:fd:07:8b:4f:66:f2:e3:54:db:c1:af:
b9:ea:38:f5:3c:66:49:d0:b9:85:6e:93:c5:2a:e5:cd:e7:fd:
52:4a:93:b0:89:31:86:85:74:a4:8b:39:38:05:db:48:d1:37:
d8:ab:4e:ef:2f:19:27:82:64:77:a8:e3:32:8b:26:95:d9:f9:
e2:b3:1f:1c:84:c2:ad:f9:5c:f5:58:21:0d:71:47:dd:91:1d:
e3:42:51:18:99:5b:2a:18:27:6b:f5:92:12:b1:d8:71:2e:d7:
c4:57:e7:64:ce:13:e5:bf:78:12:c3:36:b9:d3:1a:22:ee:bf:
2e:23:ae:5f:57:58:df:ed:9b:a6:63:24:7d:0f:05:2b:44:2a:
91:87:1a:98:96:aa:7c:28:55:5c:63:d2:48:08:70:46:04:d9:
b4:f7:2e:95:50:56:18:46:18:c4:88:a9:e1:7f:91:e0:4b:99:
34:9a:86:ca:8c:c3:bc:1d:ba:12:97:d9:c1:48:03:0e:a2:02:
78:8d:eb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org