Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Q-eLM8zk_54BOZC0CwKaBzDj19k.roa
File: Q-eLM8zk_54BOZC0CwKaBzDj19k.roa (raw, json)
Hash identifier: sZ3o2Hm1PFgso3FJZOrd1OMr4WbVbHBMwiAZnXRNcEM=
Subject key identifier: 43:E7:8B:33:CC:E4:FF:9E:01:39:90:B4:0B:02:9A:07:30:E3:D7:D9
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189D43FCEF178BA74885D85BB1CDA341D64
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Q-eLM8zk_54BOZC0CwKaBzDj19k.roa
Signing time: Tue 08 Aug 2023 08:24:58 +0000
ROA not before: Tue 08 Aug 2023 08:24:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 200436
IP address blocks: 85.133.222.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:d4:3f:ce:f1:78:ba:74:88:5d:85:bb:1c:da:34:1d:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 8 08:24:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=43e78b33cce4ff9e013990b40b029a0730e3d7d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f2:ba:63:27:08:12:b7:98:de:24:84:3f:4a:
e5:20:d0:30:db:15:82:60:bc:79:a6:83:c8:69:c1:
fe:85:e4:a1:9b:b9:72:4f:b8:1e:04:1a:6c:2f:08:
50:23:3c:12:4c:8d:aa:a7:41:a5:6d:76:d9:83:80:
1e:b1:7d:51:28:c9:98:50:1a:ac:89:e5:42:2e:1b:
b7:e7:08:6d:22:5c:f9:9b:0c:2f:11:1e:93:1c:60:
d5:d2:00:16:e6:ee:27:df:3d:d7:f7:05:88:d7:6f:
31:6d:07:9e:e8:f4:2d:4f:65:49:ff:a0:9e:ea:aa:
69:f7:ab:c6:72:d8:57:31:d6:25:8c:7e:6f:20:6e:
3b:9e:01:62:01:c2:42:11:0a:8e:1d:b0:32:ba:11:
f2:a4:00:d5:75:11:ca:55:88:7f:40:40:19:8f:59:
c7:11:ac:ff:55:67:99:c4:c2:c3:50:8d:de:31:e1:
4f:57:ef:2a:98:c5:d8:93:4a:99:fc:e0:e2:ea:9e:
0e:2e:57:ac:7f:ce:f6:66:ca:ac:77:d5:9d:de:7e:
5b:03:3e:6c:f9:f1:ab:f5:b7:b5:4b:78:53:e8:6f:
58:83:cc:7a:10:72:98:93:45:45:36:cc:b0:bb:a4:
67:7a:01:a5:65:58:cf:b4:fa:b0:6e:40:0d:5b:42:
aa:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E7:8B:33:CC:E4:FF:9E:01:39:90:B4:0B:02:9A:07:30:E3:D7:D9
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Q-eLM8zk_54BOZC0CwKaBzDj19k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.222.0/24
Signature Algorithm: sha256WithRSAEncryption
86:f5:a6:62:08:38:a3:74:c5:ca:8d:eb:23:47:6f:bf:f2:e3:
fd:d4:a9:c2:61:e3:cb:dc:31:d9:80:44:6f:a5:4c:6d:db:a7:
6a:84:45:10:b7:1b:2e:03:31:32:a9:00:ec:08:27:ed:57:f2:
72:07:ac:d6:ff:81:98:e1:6d:aa:40:33:5a:41:bb:55:44:2b:
66:3e:dd:a8:d7:70:c2:0f:81:c1:96:67:e1:78:7a:7b:aa:27:
f3:93:5a:d7:66:ed:f8:20:46:7b:37:b9:03:55:ed:03:6d:af:
30:c2:22:a7:08:07:1e:d3:18:b8:14:83:e2:c3:9d:b7:b2:48:
fe:28:38:66:57:42:59:02:1e:3b:cf:4e:b7:c7:54:68:66:4e:
0a:03:60:ef:f2:c8:e8:db:36:51:7c:4e:f0:98:f5:6a:23:ae:
53:eb:0c:be:61:43:e5:8f:ca:af:54:c4:e0:21:f4:12:07:5e:
e7:5f:33:6d:f6:17:fc:6c:a9:4e:30:63:61:4f:87:f0:98:11:
97:13:cb:d2:16:7c:e1:6c:8f:a3:3c:de:60:0e:bf:6c:e1:ee:
83:10:d5:fe:63:b8:38:8b:46:8b:af:77:c4:61:f5:0a:b4:3c:
fa:39:1f:f4:71:87:c3:a4:7f:54:2f:d0:36:47:cf:36:34:0b:
0e:ae:12:d8
-----BEGIN CERTIFICATE-----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Generated at Wed Aug 23 06:44:05 2023 by rpki-client on console-fra.rpki-client.org