Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RxbKRWjFqc0YyYzCtT2K3pSBk7k.roa
File: RxbKRWjFqc0YyYzCtT2K3pSBk7k.roa (raw, json)
Hash identifier: PAoaqccQoXVV4yE5mD1ZnoRJ+dFapAO9cxfiawyqbzE=
Subject key identifier: 47:16:CA:45:68:C5:A9:CD:18:C9:8C:C2:B5:3D:8A:DE:94:81:93:B9
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018A20FFF72308846DD2F6FC65D868744F85
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RxbKRWjFqc0YyYzCtT2K3pSBk7k.roa
Signing time: Wed 23 Aug 2023 06:06:00 +0000
ROA not before: Wed 23 Aug 2023 06:06:00 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 209638
IP address blocks: 85.133.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 02 Jan 2024 00:30:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:20:ff:f7:23:08:84:6d:d2:f6:fc:65:d8:68:74:4f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 23 06:06:00 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=4716ca4568c5a9cd18c98cc2b53d8ade948193b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:aa:77:59:0e:8e:ee:28:dc:fa:6a:0c:35:c6:
43:a0:5f:15:8d:47:82:c7:18:df:f1:61:4c:1e:25:
c2:6a:5b:21:22:74:dd:48:3f:e3:a2:10:89:b3:fb:
5c:a6:0f:dc:6f:3a:00:dd:b0:0e:f8:49:cc:4d:94:
14:cc:5d:d0:5c:2c:79:66:a4:d9:5c:a1:5f:bb:59:
8d:ef:8a:69:7a:42:56:99:82:f1:c1:8e:7a:ee:18:
23:63:25:ae:6f:72:b2:8d:ab:0d:d7:a0:51:e5:ba:
fd:c8:87:f9:3f:48:bc:a3:30:9f:39:93:44:e1:5d:
50:05:9a:bf:e5:3e:10:55:e0:6a:0c:b2:6d:21:ff:
8c:e6:e8:63:e1:0f:38:12:82:e3:2d:d0:64:3a:b2:
9e:0c:e6:f0:3f:6b:53:a4:e7:5e:ac:46:99:20:b0:
a3:42:f4:ad:91:69:1a:bf:8b:fa:61:ac:b1:41:a2:
cc:ac:85:73:eb:61:0d:31:cd:5a:67:65:83:3b:f3:
2c:c4:a3:ba:b7:3f:73:20:f8:6c:60:08:c4:39:1a:
24:ed:48:98:59:18:7a:3a:fe:99:26:c4:dc:23:32:
c8:63:1d:31:62:9c:de:61:f1:da:a1:e5:51:a7:34:
65:0a:1c:99:8e:0a:50:45:b5:ad:ca:ac:42:57:60:
0a:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:16:CA:45:68:C5:A9:CD:18:C9:8C:C2:B5:3D:8A:DE:94:81:93:B9
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/RxbKRWjFqc0YyYzCtT2K3pSBk7k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.222.0/24
Signature Algorithm: sha256WithRSAEncryption
92:c6:b1:da:9a:5c:7b:2b:d3:05:06:d1:14:33:5b:61:e7:a4:
36:21:f5:ec:97:54:e5:25:70:8f:58:2a:8c:ce:5d:c6:62:d7:
b2:bf:1c:e1:1d:33:7e:25:8f:ec:42:7c:46:25:af:39:fc:6d:
24:15:47:a7:f6:1c:65:2c:90:8e:89:e9:78:25:24:5d:a4:a2:
f9:2b:0b:b1:37:35:f4:8f:e7:e6:b6:57:11:96:9b:76:00:2a:
2e:0c:50:32:5c:36:9e:9b:6e:b7:15:79:55:1c:e2:ae:06:4f:
ae:95:0b:73:cb:71:01:87:99:3e:d2:ff:6e:54:a8:84:c7:ca:
0d:e2:8e:e1:08:b1:39:72:53:36:08:4f:d1:63:bc:e5:10:77:
39:56:8d:0e:32:85:9a:6b:5e:6d:18:52:85:2d:ab:77:3d:be:
4b:88:0f:a3:d4:44:9f:65:aa:51:5d:cc:7d:e5:0b:49:c1:79:
d5:76:97:f3:a8:0c:d2:86:ac:2c:ae:c6:ae:f8:db:77:6a:2e:
b7:e1:4d:33:15:47:37:e9:de:00:af:0c:72:2b:c7:12:a8:03:
de:40:58:93:69:4b:58:da:29:b4:cf:e1:d6:7b:dd:d9:a3:dc:
01:08:75:16:1a:4a:b4:16:d4:87:b3:3e:47:64:f9:47:6d:49:
97:08:c2:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org