Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JoYiNeDvguYhQcgQtGaz-T0tksc.roa
File: JoYiNeDvguYhQcgQtGaz-T0tksc.roa (raw, json)
Hash identifier: psG/YPlIYgABUpB4xWrbxMpnbuZwARTql4C9h8wnm9I=
Subject key identifier: 26:86:22:35:E0:EF:82:E6:21:41:C8:10:B4:66:B3:F9:3D:2D:92:C7
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01896E2C57B3544635896F0E5C2C3834A99C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JoYiNeDvguYhQcgQtGaz-T0tksc.roa
Signing time: Wed 19 Jul 2023 12:42:27 +0000
ROA not before: Wed 19 Jul 2023 12:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 25098
IP address blocks: 85.133.202.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.136.0/24 maxlen: 24
85.133.164.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 12 Aug 2023 10:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:6e:2c:57:b3:54:46:35:89:6f:0e:5c:2c:38:34:a9:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 19 12:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=26862235e0ef82e62141c810b466b3f93d2d92c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d6:7e:cf:30:9a:86:5e:da:17:34:2a:a9:ad:
c4:23:94:ab:25:e3:f9:91:6e:4e:ec:43:b4:ad:e5:
b1:6b:c2:cf:76:a2:d4:6b:82:97:5c:1c:85:3a:0f:
ab:b1:20:82:68:41:c0:e2:11:2f:8b:7f:c3:a2:57:
f9:ee:fa:9e:de:21:14:38:4a:f6:f5:56:ae:76:d6:
bc:38:4f:2c:12:84:53:91:ce:4e:cf:d1:e9:2f:89:
c0:d5:de:42:a2:d7:89:6c:6c:ef:4e:44:fa:00:f0:
e2:89:a0:a3:5f:1a:11:f6:15:d9:fb:91:06:af:24:
85:53:b1:b6:b8:a4:ee:6a:c2:51:f1:cc:d1:a9:b0:
63:18:7c:6b:1f:a2:7c:78:b8:c8:7a:88:a2:5d:56:
76:12:92:6c:50:a8:03:e4:c1:3d:dc:b8:6d:d3:5f:
13:85:95:9b:4b:26:27:d3:3e:a3:87:6a:12:2f:6d:
f7:ff:28:fb:b9:c9:b5:9f:ec:f9:7a:eb:0c:69:2f:
a6:83:97:bd:5d:c9:59:35:04:c3:8c:c7:19:43:2e:
c1:ab:2d:00:f2:33:ba:fd:e3:96:d1:fe:d2:e8:dd:
f5:a5:f2:35:4d:80:78:42:b3:75:b0:31:e0:94:2c:
8d:19:67:1c:34:a7:9f:d8:3e:f3:46:bc:50:43:32:
70:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:86:22:35:E0:EF:82:E6:21:41:C8:10:B4:66:B3:F9:3D:2D:92:C7
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/JoYiNeDvguYhQcgQtGaz-T0tksc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.136.0/24
85.133.164.0/24
85.133.202.0/24
85.133.225.0/24
Signature Algorithm: sha256WithRSAEncryption
29:a0:a4:2c:4d:c4:96:80:58:00:78:a9:93:7d:b3:2c:ca:81:
a8:c4:ce:de:6f:f5:36:e4:da:1e:88:e6:be:98:9d:2c:ae:3f:
2e:73:e2:8a:3d:eb:1a:51:d0:df:51:0c:0e:08:ad:99:5e:cb:
4b:21:21:90:fa:f7:73:d9:51:51:cd:da:88:67:c7:31:13:eb:
0b:94:32:52:2b:b6:8f:49:77:10:c3:d9:bd:16:e8:17:5a:45:
fd:cc:97:9c:0d:97:53:7b:76:c9:df:79:6e:34:85:0a:97:3b:
e2:3e:17:36:b1:80:6e:83:d3:08:73:e1:d6:aa:a6:7e:a5:24:
f6:c3:e5:bb:9d:06:e5:71:3b:9f:d0:3b:0c:e7:3a:58:35:07:
36:54:05:26:dc:21:2f:4f:dc:33:46:07:69:50:b3:54:75:b4:
c9:2d:a7:8d:11:af:6a:f7:f4:9d:31:b8:56:46:2d:c9:92:64:
6d:fb:b5:ec:90:ca:a4:64:ac:82:2c:26:d5:61:f8:96:81:d0:
6f:65:c8:7e:fc:0b:9a:8b:1b:4b:d9:91:f9:b4:b7:03:aa:11:
fc:f3:f8:22:63:55:8b:e6:9e:4c:6a:83:0e:34:4a:d1:98:2a:
98:e6:33:b0:57:28:76:3b:0d:44:67:96:aa:98:ae:49:40:45:
b2:40:27:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org