Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ORDu3u8c-3l7WT909rwPpD4q5U0.roa
File: ORDu3u8c-3l7WT909rwPpD4q5U0.roa (raw, json)
Hash identifier: zlEZx3Gv+/rMtO3iswvJ9H347hf2Md60Qc23yGam9cU=
Subject key identifier: 39:10:EE:DE:EF:1C:FB:79:7B:59:3F:74:F6:BC:0F:A4:3E:2A:E5:4D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189D43FCF42AAB95FB144E51A9999BF2324
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ORDu3u8c-3l7WT909rwPpD4q5U0.roa
Signing time: Tue 08 Aug 2023 08:24:58 +0000
ROA not before: Tue 08 Aug 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 203916
IP address blocks: 85.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 12 Sep 2023 16:03:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:3f:cf:42:aa:b9:5f:b1:44:e5:1a:99:99:bf:23:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 8 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3910eedeef1cfb797b593f74f6bc0fa43e2ae54d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f6:fc:af:4d:38:ec:d1:18:5a:fa:aa:cf:18:
4d:1d:78:6b:0c:f9:c8:a8:64:33:73:ec:90:27:48:
92:e5:86:6b:ad:5c:62:f1:f8:15:6a:5b:31:05:41:
c0:92:be:64:f2:cb:11:76:34:15:dd:9b:2c:65:b7:
98:37:75:a4:98:b5:40:ac:61:92:7e:b3:e5:8e:0b:
ca:7e:02:d9:5e:b7:8c:af:e9:cb:7c:54:2f:c5:9c:
ff:d5:60:71:f5:88:90:ae:1c:3f:f9:1c:3e:0e:d8:
f7:eb:3e:ab:1e:c2:40:6e:48:a3:d8:fa:4c:5f:27:
50:1c:8e:2a:c7:53:c5:e9:b2:de:5a:9f:4e:d3:66:
16:dc:57:e7:eb:2b:88:7f:b2:91:73:fd:84:60:29:
fe:2e:a2:a5:18:81:87:88:3d:ad:fa:33:a3:08:58:
03:5a:45:5f:a5:3d:b6:fb:d8:57:e4:82:3f:03:61:
89:88:5a:55:e1:1e:8c:9f:ce:65:ea:ce:81:76:8a:
66:6d:53:88:3f:9e:4e:5a:4b:9f:c5:98:d8:66:14:
43:a0:42:63:e0:27:ce:55:b4:65:4c:22:70:d9:bf:
0e:37:fd:e1:df:54:cd:39:27:69:cb:c6:1b:5a:72:
6b:7f:28:0a:75:c9:8b:5c:d7:ed:f2:8b:1c:41:26:
4c:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:10:EE:DE:EF:1C:FB:79:7B:59:3F:74:F6:BC:0F:A4:3E:2A:E5:4D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ORDu3u8c-3l7WT909rwPpD4q5U0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:31:e4:7e:a2:57:7d:2e:95:3c:29:47:12:9d:b7:fa:67:b1:
67:20:6b:ba:49:aa:b0:ba:52:e3:90:d3:84:2e:d4:81:1f:ac:
ac:49:2a:0f:37:23:a8:cf:6f:a5:31:cf:13:93:c5:1d:f0:97:
85:09:3f:90:39:73:37:22:a4:11:b9:53:d2:f1:cb:81:81:57:
d8:9a:07:c0:ac:01:d6:ef:fc:ce:32:e8:a7:f2:23:37:d1:51:
cf:9e:f4:67:d4:b5:51:ce:8e:45:61:2e:0a:cf:2e:48:87:f4:
3c:f5:04:5b:5b:5b:e8:11:5c:df:93:83:ef:cc:9d:e0:35:96:
6b:4a:c9:4e:54:c2:69:d1:5c:92:77:e6:88:08:e7:b9:6b:e1:
ad:e0:35:85:d6:3a:c5:89:0a:bc:2e:f6:0b:cf:df:6b:0d:d9:
59:ff:c7:ea:03:cc:d2:52:8b:53:1a:6f:23:ef:fb:9e:76:a5:
1b:20:bd:ea:e7:a6:79:41:0d:9d:1a:f5:b4:d6:04:d1:88:11:
7c:8a:8c:d5:e5:aa:a1:a4:1c:26:17:60:cf:77:23:ce:90:04:
c4:e6:ca:77:87:97:92:8f:de:5e:17:9a:75:f5:b3:7f:df:e5:
c5:25:57:ce:de:e0:d8:c4:85:99:f5:0d:82:f8:4e:6f:a5:46:
6b:46:aa:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org