Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VZrAuyQrfsl9WVdAgY3CLw3bR6o.roa
File: VZrAuyQrfsl9WVdAgY3CLw3bR6o.roa (raw, json)
Hash identifier: WEgXb+Od4SQrBi1CwBapSEjAZpov9O2ZQYJxmRhBMuc=
Subject key identifier: 55:9A:C0:BB:24:2B:7E:C9:7D:59:57:40:81:8D:C2:2F:0D:DB:47:AA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018972091B979B4F785006E0CFA1402C00CD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VZrAuyQrfsl9WVdAgY3CLw3bR6o.roa
Signing time: Thu 20 Jul 2023 06:42:26 +0000
ROA not before: Thu 20 Jul 2023 06:42:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 85.133.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 30 Jul 2023 09:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:09:1b:97:9b:4f:78:50:06:e0:cf:a1:40:2c:00:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 20 06:42:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=559ac0bb242b7ec97d595740818dc22f0ddb47aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6e:45:af:1a:3b:9f:a4:82:fc:45:11:e7:cb:
ae:55:fe:5b:20:bf:f2:ce:83:27:1d:e2:39:4e:9a:
5c:29:89:13:19:35:ad:ec:97:5a:e4:f1:cb:8a:b7:
78:80:30:57:80:bb:a2:f9:0d:81:45:38:c6:2e:f0:
11:a8:6d:ca:13:d1:c6:52:a3:4c:78:48:50:8d:35:
f0:be:b4:18:23:c0:81:73:a9:85:3d:3a:55:88:a8:
18:61:92:3d:e0:13:e4:05:8f:24:34:be:49:61:76:
30:2e:d8:46:6b:85:01:c9:f8:44:8c:f7:0b:b0:34:
a9:c3:31:4a:3c:55:d2:b8:63:04:55:21:cd:99:89:
07:a7:7c:f4:db:b0:2c:ad:90:98:94:8e:56:76:9c:
27:58:36:a8:99:9e:55:40:18:af:09:b6:a0:3e:6a:
14:74:c9:7e:88:6c:7a:1a:4d:bf:3f:19:ff:ca:b3:
7a:c0:ac:6d:85:38:35:b1:bd:3d:76:91:a8:c9:fc:
35:8f:aa:d9:5b:34:c4:1c:ae:c4:44:5e:68:6e:7f:
d9:4d:af:c2:88:ec:6a:28:c4:6a:14:72:7b:31:2a:
0f:84:98:00:07:84:62:0c:84:6e:2b:6d:f7:17:0f:
c4:0e:d3:16:f1:cc:cf:05:9d:2d:a7:ee:3f:59:e6:
80:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9A:C0:BB:24:2B:7E:C9:7D:59:57:40:81:8D:C2:2F:0D:DB:47:AA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/VZrAuyQrfsl9WVdAgY3CLw3bR6o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.221.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:e6:21:71:93:11:2b:10:e9:fb:41:2c:01:04:21:54:bb:f1:
fa:7a:bd:a7:38:a0:e9:45:ba:17:c5:02:ff:96:13:4a:63:41:
c3:dc:2c:23:16:94:82:ea:cf:1c:e9:27:b7:17:29:c2:66:d4:
56:6a:fa:a5:ed:69:c0:bd:41:61:6b:7e:d8:89:7f:86:16:9a:
64:12:67:4d:f6:9f:79:dd:29:39:e1:f5:09:57:13:22:f5:f7:
a6:e0:95:2e:c0:82:72:f4:04:bc:3e:2b:1e:82:b9:84:e4:13:
c1:9e:49:ed:6f:d3:60:41:66:3d:6c:c7:f0:07:23:76:59:02:
82:e5:96:1a:eb:a5:89:6e:f7:76:09:36:78:25:e2:b2:44:56:
43:e3:1f:70:c3:c3:a4:e4:0f:cd:9f:e1:ad:2e:cd:b0:41:e3:
c4:9f:70:27:f5:d9:8d:b0:0b:e6:81:d1:57:6e:f6:46:6c:46:
83:52:e8:e5:f1:2d:f5:83:c9:0f:39:31:fd:5b:ae:fb:1b:d2:
91:b8:b9:bb:3b:4b:f7:cb:78:ee:cb:ff:85:37:42:e1:75:1f:
9c:f0:e9:9c:7d:78:71:5e:ef:f3:f5:b1:c8:df:df:35:d3:83:
3e:be:d2:e8:d5:ed:35:d7:81:47:93:79:08:8b:78:38:48:dd:
58:e9:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org