Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Wr41uH3yOWAa9NDPLpWz1ApMycw.roa
File: Wr41uH3yOWAa9NDPLpWz1ApMycw.roa (raw, json)
Hash identifier: hsFDzjQGWW6K+9xjBTGmVw+eTxMKq+W2dMTQ9OJqUIQ=
Subject key identifier: 5A:BE:35:B8:7D:F2:39:60:1A:F4:D0:CF:2E:95:B3:D4:0A:4C:C9:CC
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01857271051CE6634704C4D5BC8CD723058B
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Wr41uH3yOWAa9NDPLpWz1ApMycw.roa
Signing time: Mon 02 Jan 2023 12:24:47 +0000
ROA not before: Mon 02 Jan 2023 12:24:47 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 17447
IP address blocks: 85.133.202.0/24 maxlen: 24
85.133.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 21 Jan 2023 07:21:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:72:71:05:1c:e6:63:47:04:c4:d5:bc:8c:d7:23:05:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 12:24:47 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=5abe35b87df239601af4d0cf2e95b3d40a4cc9cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:da:5d:e6:73:93:8a:51:86:d0:d3:11:cc:67:
83:55:4d:e3:4f:de:b0:03:e9:4e:50:81:78:d3:ff:
f8:19:1e:31:0d:4e:4a:6e:f4:94:dc:f5:90:fd:d1:
d4:e1:7b:a3:24:47:71:88:25:2f:8a:3e:aa:7a:76:
a2:21:b7:c4:e6:66:6f:15:68:7f:24:0a:82:2e:15:
40:f4:38:85:73:27:2d:a4:88:ca:a2:55:aa:1f:6e:
4f:9e:d7:8b:57:33:c5:f1:e6:cb:36:f7:0e:bc:c1:
de:21:41:73:3c:8a:a9:3e:7d:34:58:fe:98:36:89:
65:cf:77:31:de:8d:df:29:f4:74:2c:1f:be:53:2d:
8d:0a:b1:30:8e:07:03:7e:87:a1:2c:17:ca:61:f5:
f8:10:e6:b1:8c:2f:78:8b:c1:a6:eb:60:74:f6:58:
87:6d:3a:2a:d7:7a:f6:e6:af:27:ce:71:eb:38:2c:
24:12:b2:c6:4a:e2:3c:a5:a1:88:81:d2:f3:83:e4:
ba:56:69:98:cf:87:8d:a4:aa:18:61:1e:5a:0a:4c:
81:3c:39:89:e3:1f:f2:f5:d3:4f:9f:d3:11:60:58:
ef:17:96:43:79:dc:ec:23:70:d0:68:0f:18:8d:3f:
a6:d6:59:4f:14:c5:b4:68:63:90:7a:09:3c:9d:bd:
47:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:BE:35:B8:7D:F2:39:60:1A:F4:D0:CF:2E:95:B3:D4:0A:4C:C9:CC
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Wr41uH3yOWAa9NDPLpWz1ApMycw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.156.0/24
85.133.202.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:71:cf:86:64:fc:cf:19:d3:bd:0b:62:b5:38:a9:39:ba:9d:
11:70:8d:11:a4:e6:35:2f:92:31:04:3d:89:1e:33:51:b2:28:
62:7a:c6:ab:43:30:70:16:81:a6:ee:82:0e:2f:db:6a:77:e8:
5e:49:2b:54:82:23:2c:56:70:cf:d8:9e:af:4a:0c:e0:40:2f:
79:d0:df:5d:05:62:88:ee:ec:04:23:ef:cc:72:06:fd:99:b6:
80:85:95:64:c9:7f:5c:2d:48:b6:7c:76:76:59:96:73:c5:f4:
fc:bd:d6:eb:9b:15:3c:ae:89:98:60:8e:13:32:61:85:4d:68:
da:f4:db:c0:ab:b2:f7:9a:4e:de:b7:a9:30:97:23:43:0c:5f:
20:b9:e2:08:80:33:41:0e:2f:0e:d1:6a:65:1e:ac:a0:62:ec:
67:57:1c:2d:69:36:89:16:b7:c0:f8:13:ab:9d:f4:d3:fb:8f:
be:f9:63:52:06:29:7b:6b:37:71:95:19:f7:70:d2:50:e2:73:
e8:65:53:ab:e3:2f:0e:a8:e7:02:a5:2c:f1:3b:f6:e0:28:59:
64:08:d8:28:23:04:00:0d:28:2c:6a:4d:4d:ac:bb:32:12:19:
b9:ca:7b:d3:03:32:60:c0:35:d8:0b:99:19:92:3a:d8:fa:3d:
3a:83:9c:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org