Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/P2Okc46ntOPqRO5G1hyNoJxgmfY.roa
File: P2Okc46ntOPqRO5G1hyNoJxgmfY.roa (raw, json)
Hash identifier: D0xTEOvfcz4zqYMDFg9hxrDGn6HHbhUkl9x6cwLAGMU=
Subject key identifier: 3F:63:A4:73:8E:A7:B4:E3:EA:44:EE:46:D6:1C:8D:A0:9C:60:99:F6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0185D3344A204D88468D2A6E60AD1A54B2B8
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/P2Okc46ntOPqRO5G1hyNoJxgmfY.roa
Signing time: Sat 21 Jan 2023 07:21:37 +0000
ROA not before: Sat 21 Jan 2023 07:21:37 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 85.133.202.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 14 Mar 2023 10:17:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:d3:34:4a:20:4d:88:46:8d:2a:6e:60:ad:1a:54:b2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 21 07:21:37 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=3f63a4738ea7b4e3ea44ee46d61c8da09c6099f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:7b:77:e0:a8:6c:39:40:98:84:02:8c:f5:ee:
13:a2:27:70:61:c7:60:a5:80:96:9e:db:1d:54:f0:
40:53:22:b5:d9:cd:ee:0f:58:be:a1:4f:6b:db:d6:
bf:6c:3f:81:81:1d:69:7d:73:43:a4:08:df:f3:e0:
16:c4:09:50:f2:0e:47:7a:65:00:80:de:a2:c9:1c:
cd:b7:8c:77:68:3e:d0:28:ca:e9:2c:a1:ca:5e:0a:
7f:6b:6d:fe:0a:3f:13:25:39:97:ab:31:1f:1c:33:
ea:fe:61:3a:5b:15:64:6a:5f:fa:2f:b9:3a:2d:bc:
6b:6e:1c:38:1d:59:ce:54:e2:29:f0:38:9b:36:63:
fe:c0:0c:92:07:0b:2d:c8:02:aa:4d:a7:0e:0a:2f:
03:ad:50:a5:9b:b6:62:43:fb:31:b7:95:f0:78:d3:
21:65:da:cb:6e:9b:56:98:fb:a8:cd:6c:a7:cb:58:
11:2f:36:e6:d7:2e:d3:e9:83:4e:62:7d:f1:15:14:
d9:e6:af:94:67:fd:a8:70:32:be:7e:cd:2e:e6:28:
db:24:e2:4b:3b:4b:d6:14:ea:02:bf:72:16:cf:29:
c9:34:c6:c4:c9:c7:66:4e:3b:3f:66:e3:d3:87:2e:
7c:01:f9:1f:70:53:e0:48:81:9d:25:a5:f1:9a:d0:
41:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:A4:73:8E:A7:B4:E3:EA:44:EE:46:D6:1C:8D:A0:9C:60:99:F6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/P2Okc46ntOPqRO5G1hyNoJxgmfY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.202.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:2a:b3:9c:d5:7f:e0:f9:e2:22:6b:9d:76:17:f5:d9:ae:3b:
f8:b2:44:90:1b:22:f9:21:6f:ed:ac:36:17:d5:29:0c:2d:b4:
89:ee:e3:56:a6:4d:67:d7:fa:9f:ba:1c:0f:59:1c:08:96:40:
1a:04:64:0c:20:3a:8e:3c:95:7c:1f:f5:5b:1e:9f:b5:b2:53:
ff:13:ef:9e:b5:b2:bb:ba:e4:0d:cf:3e:ec:8d:3f:dd:fd:80:
b1:9d:97:2f:c8:04:b0:03:f7:e7:22:f2:3c:49:ba:0c:d9:a9:
a5:d5:99:b1:0f:f7:7f:5a:60:24:4c:ea:c0:1d:7f:5a:b3:20:
c1:a3:b7:e2:27:4d:e7:84:c8:42:95:95:4a:bd:20:2d:9f:a4:
54:48:72:9b:e5:29:9b:f7:8f:58:80:d1:aa:68:67:7d:7c:b5:
2e:9c:a8:3c:b2:ba:51:97:a5:9b:14:fb:36:21:e0:ea:19:23:
e7:11:82:b1:4f:e5:b9:21:94:57:a0:80:83:ab:0e:1c:6f:74:
2e:14:7f:c7:fb:15:15:9f:1c:4a:e3:47:a0:86:39:c8:0a:80:
1d:6a:2e:b6:bc:e2:70:df:e3:ec:67:9e:4a:5f:85:68:9a:a3:
9e:ad:87:61:d5:53:c3:7a:f5:55:f1:df:5b:97:2d:ff:e1:9b:
91:52:47:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org