Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GlxT010zuRvPRZNl1s1K66Rv-0Q.roa
File: GlxT010zuRvPRZNl1s1K66Rv-0Q.roa (raw, json)
Hash identifier: wd85QGVNS1ZX2VzHKrjA65qvPlTkrvlvGeUstXY6Jpo=
Subject key identifier: 1A:5C:53:D3:5D:33:B9:1B:CF:45:93:65:D6:CD:4A:EB:A4:6F:FB:44
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018CDEB6252DD05EE287E3A8AA85464FFDF2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GlxT010zuRvPRZNl1s1K66Rv-0Q.roa
Signing time: Sat 06 Jan 2024 12:18:48 +0000
ROA not before: Sat 06 Jan 2024 12:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 51889
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 23 Jan 2024 08:17:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:b6:25:2d:d0:5e:e2:87:e3:a8:aa:85:46:4f:fd:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 6 12:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=1a5c53d35d33b91bcf459365d6cd4aeba46ffb44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:b8:fe:9e:cd:44:28:99:6e:71:25:bf:65:88:
e6:35:f3:75:c2:4a:5d:6e:0f:9c:98:a2:f3:a4:64:
dc:ec:74:70:aa:71:a9:94:4b:08:0a:92:b0:fb:02:
b4:11:a2:65:bd:d0:47:50:24:72:78:8b:ec:63:31:
ef:76:41:8e:73:87:80:c8:11:95:c2:97:0a:ad:50:
f8:1b:83:8f:61:aa:bc:68:f5:22:6b:fd:a0:00:f1:
e6:e4:70:a8:eb:f3:7b:13:99:17:51:e4:3a:5d:9c:
a2:dd:e9:a6:5b:9d:0b:8b:57:78:eb:a4:59:2e:a4:
f8:bc:c4:8e:f0:f9:33:57:67:b2:6f:f9:5b:78:26:
e9:9d:14:27:fa:db:fb:77:c2:f1:87:d6:b7:cc:28:
2f:75:9d:1f:ae:b0:1e:41:71:38:6a:4b:d6:df:b7:
1f:3d:63:48:90:5f:a0:40:45:48:31:d5:66:66:29:
2b:b4:b8:15:35:fc:fe:ed:c3:96:57:e4:e0:12:f9:
e2:2b:96:d3:28:1d:b8:15:4a:2b:1f:32:ec:e9:e4:
41:d2:73:cc:41:b6:48:07:1f:f2:e9:4e:53:70:82:
4c:76:5b:c7:7d:79:9d:41:46:e9:a6:36:04:36:8e:
2d:79:ca:99:a6:fb:59:ce:4f:6f:15:c2:06:7a:f0:
ca:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:5C:53:D3:5D:33:B9:1B:CF:45:93:65:D6:CD:4A:EB:A4:6F:FB:44
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/GlxT010zuRvPRZNl1s1K66Rv-0Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.203.0/24
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
53:87:25:58:e8:b0:89:7f:6e:bb:35:4b:48:df:77:11:c1:ac:
7f:94:c0:1a:3c:50:c5:b4:3e:7e:23:e9:3b:14:27:93:5a:cc:
43:b8:09:6c:48:d8:ca:01:92:31:2c:e5:ae:2f:61:34:02:6f:
9c:17:5b:4d:8e:6d:5c:18:02:12:4e:e2:b1:27:9a:c7:35:0c:
e3:f8:b2:58:c3:a2:b7:30:ea:2a:38:65:9d:53:20:f1:86:d3:
5f:5e:34:13:fc:5e:0a:9f:8f:e0:6a:53:10:14:cd:8c:ab:db:
a5:e0:69:f3:c9:90:71:30:15:de:4c:f8:62:0f:dc:a3:7e:99:
ea:4f:1e:bc:da:e8:29:07:6d:62:02:64:06:b5:4a:b1:a5:be:
21:f4:bb:42:a9:47:c0:9e:f9:03:b3:92:cf:30:7b:45:6e:2a:
9f:26:1a:d0:f2:a2:a2:33:eb:ab:1c:60:fe:2a:e5:34:0e:d5:
ec:fc:8a:a1:be:aa:f3:15:6b:24:fd:13:6d:1f:52:10:64:ec:
b7:2f:ea:69:5d:8f:fa:ac:7a:ba:b1:a4:7c:16:16:fc:58:c9:
30:ee:cd:51:f9:4c:0f:a9:92:80:69:7b:bb:4a:f1:bd:ba:f1:
74:34:98:2c:bf:13:b5:40:6b:1a:a0:cd:3d:46:25:da:1a:b5:
64:28:a0:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:12 2024 by rpki-client on console-fra.rpki-client.org