Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EYdiIsUCV16A88782bVFpzuI4NY.roa
File: EYdiIsUCV16A88782bVFpzuI4NY.roa (raw, json)
Hash identifier: ybBwoRnKzd0F/rO281biy5Pg6RVPFPVMbTCVuERToF0=
Subject key identifier: 11:87:62:22:C5:02:57:5E:80:F3:CE:FC:D9:B5:45:A7:3B:88:E0:D6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B8ADFAB2EC9AAC6798956ECFF4637D0FA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EYdiIsUCV16A88782bVFpzuI4NY.roa
Signing time: Wed 01 Nov 2023 12:33:16 +0000
ROA not before: Wed 01 Nov 2023 12:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 211056
IP address blocks: 85.133.216.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.238.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.236.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:df:ab:2e:c9:aa:c6:79:89:56:ec:ff:46:37:d0:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 1 12:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=11876222c502575e80f3cefcd9b545a73b88e0d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:00:dc:25:97:f1:da:92:87:2e:40:35:33:1a:
e7:04:61:27:7b:88:24:19:26:a0:f4:a4:f6:f7:62:
7a:0f:9d:c7:77:cd:dc:c9:6d:b2:87:32:d3:fd:c1:
d3:96:f4:f0:b8:bc:bc:0b:93:8d:78:6e:c0:41:83:
a6:59:6a:3d:70:ec:0e:fe:54:b6:e2:fc:6a:9b:f7:
ac:91:fd:3a:0c:a9:4f:3f:a8:78:64:04:39:bf:9d:
37:dd:9a:16:ce:56:95:79:a6:f4:e7:49:4d:7e:37:
de:8e:83:39:83:85:82:b4:ff:7b:a1:5a:c9:ed:1a:
55:b3:95:21:8b:84:e4:09:75:da:f4:0b:aa:c9:aa:
6e:59:99:99:7e:bf:4e:e9:86:d2:a8:99:a7:45:74:
b6:44:25:5e:13:49:f0:99:57:c1:56:70:30:96:24:
c1:f6:b5:2e:f6:b7:24:36:27:eb:7d:0b:7b:e6:2c:
76:ad:d6:65:07:23:9d:9b:bc:2a:cf:68:71:24:7c:
bb:21:cb:32:b2:39:ca:af:87:4e:a6:0d:5a:b1:95:
34:cd:f8:94:6e:12:9b:73:46:ce:ee:71:b9:f1:a2:
db:61:e4:ca:81:eb:b7:58:cf:55:8d:a3:fb:80:de:
10:7c:43:92:60:70:e9:39:46:2c:11:02:05:c6:f8:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:87:62:22:C5:02:57:5E:80:F3:CE:FC:D9:B5:45:A7:3B:88:E0:D6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/EYdiIsUCV16A88782bVFpzuI4NY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.216.0/24
85.133.233.0/24
85.133.236.0-85.133.238.255
85.133.241.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
31:96:96:43:86:c4:18:5f:19:f7:fc:42:7f:79:a5:bf:4a:f4:
6f:f0:83:a9:bc:f9:18:a7:ab:bc:3f:38:94:ea:8b:da:1a:a1:
97:da:e7:e5:12:ff:fc:bc:51:5d:a8:0c:72:fa:44:8b:3a:77:
4b:94:35:92:04:35:b6:b1:4b:60:2c:93:a2:3c:11:03:5d:a1:
48:f2:42:df:4a:83:5c:84:dd:bd:49:86:41:9d:f9:9f:87:94:
72:08:e6:8f:ae:97:35:86:cb:4f:52:96:55:b1:1d:0d:10:e4:
3a:82:8c:b1:83:39:94:32:73:11:45:05:3f:85:88:7d:62:e3:
c3:41:15:6e:8a:e5:8b:4c:8b:54:bd:d7:75:e6:e6:0d:a1:63:
ea:70:49:34:60:b6:d1:b6:2f:c5:92:00:d0:ca:c8:df:af:99:
bb:36:85:01:be:06:c6:fc:1f:3c:32:dc:0e:0f:f9:73:57:1e:
ba:f7:ed:25:46:73:51:8e:54:d0:31:44:3b:60:7e:2b:fb:83:
a7:63:13:23:50:c6:1d:ef:b3:54:ad:d3:f7:05:5f:4b:fe:f6:
11:37:0a:72:45:7b:07:66:cc:c9:e4:53:58:d6:c5:42:87:a4:
0c:47:04:98:1e:94:05:e2:53:74:19:19:b9:0e:e2:1f:07:8f:
2c:69:57:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 14 10:04:50 2023 by rpki-client on console-fra.rpki-client.org