Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yg055NvTp5M1b3ZA_FIDAv3jZvs.roa
File: Yg055NvTp5M1b3ZA_FIDAv3jZvs.roa (raw, json)
Hash identifier: qVhT5hPMbUnujmWcD7G/QXBo1E1Xr8Q+3Vt6p9apbcY=
Subject key identifier: 62:0D:39:E4:DB:D3:A7:93:35:6F:76:40:FC:52:03:02:FD:E3:66:FB
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018F8C7C429539F337D2C8817949E8236862
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yg055NvTp5M1b3ZA_FIDAv3jZvs.roa
Signing time: Sat 18 May 2024 16:15:04 +0000
ROA not before: Sat 18 May 2024 16:15:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 28 May 2024 08:39:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:8c:7c:42:95:39:f3:37:d2:c8:81:79:49:e8:23:68:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 18 16:15:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=620d39e4dbd3a793356f7640fc520302fde366fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:16:2d:74:50:65:2c:fd:d5:8d:a5:39:82:0e:
6f:83:f8:97:7b:5c:61:08:d5:99:fa:ef:83:1b:7c:
f8:35:bc:54:99:34:05:77:e1:ae:e0:a7:d9:97:67:
c1:b8:2b:64:81:fe:38:49:16:47:9c:48:11:12:e8:
99:a9:f5:16:b4:48:98:ad:05:6d:fb:e4:a6:7b:3a:
c8:4f:ed:32:e1:f3:73:2e:7f:b5:6f:ed:61:42:e9:
b6:d5:48:52:dd:8b:68:73:a3:fa:fe:92:7a:ff:49:
2b:51:2f:6e:a8:dc:1d:10:ba:1f:86:c7:a3:33:09:
3f:45:40:69:8f:00:52:ce:a8:e0:41:4a:03:f8:49:
68:f8:ce:f6:0c:50:3d:9e:af:2c:d7:f2:c1:05:28:
c8:56:93:ce:76:fb:2f:38:de:7b:78:1e:f4:47:e1:
91:07:84:18:16:9e:00:16:0a:1e:86:73:f3:f2:08:
ef:a0:f3:ee:8e:a7:7d:ee:f0:73:77:85:4c:4c:22:
8d:b4:87:87:70:89:33:99:a3:7c:5f:a9:0b:9c:d0:
9e:60:fc:3c:13:f5:f2:c7:97:15:82:80:c7:e8:3e:
af:11:61:f6:9f:66:d4:e7:2f:ef:94:2f:08:31:40:
91:28:54:78:76:d6:81:5d:aa:de:96:2a:c1:e5:54:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:0D:39:E4:DB:D3:A7:93:35:6F:76:40:FC:52:03:02:FD:E3:66:FB
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yg055NvTp5M1b3ZA_FIDAv3jZvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.203.0-85.133.204.255
Signature Algorithm: sha256WithRSAEncryption
99:87:9f:4d:13:31:c0:f0:9f:68:00:87:78:11:ae:a3:92:57:
d4:89:64:67:06:6d:95:36:db:93:88:03:56:9a:f9:16:14:dc:
95:33:41:78:5c:3f:be:c4:d5:25:e0:8d:ee:99:dc:2b:88:88:
85:19:d5:4b:2b:91:8c:82:07:a6:ff:6f:1e:90:1b:09:59:1a:
ce:87:0c:3b:66:50:ab:01:9a:34:a1:75:47:bb:3d:ed:40:79:
e6:7d:c0:19:20:15:58:5c:e2:08:06:75:0f:29:e8:55:e8:76:
37:4a:c9:b6:b5:4a:9d:99:32:94:1f:4a:5c:f7:bb:a3:83:8c:
8b:68:b1:d1:3a:00:48:09:c9:45:c9:0f:f7:58:b3:38:a6:97:
fc:a6:4f:92:08:5d:93:65:53:73:2d:c2:f1:c3:0f:a5:c1:81:
68:b7:d0:4e:7f:99:ed:4b:b1:e1:6c:0c:ed:63:8d:10:4b:ee:
02:0d:d7:65:44:59:88:8a:3e:32:42:7a:eb:7a:17:1b:da:8a:
2b:c2:b6:78:26:8e:86:ff:2c:14:c1:5a:3b:58:9d:ee:7e:89:
74:e3:b4:98:b8:65:7b:b8:6a:25:30:fa:46:05:a3:69:f0:c2:
09:aa:e8:a7:5a:57:c8:0e:47:c5:f3:53:bb:08:8a:ec:15:b8:
5d:db:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:01 2024 by rpki-client on console-ams.rpki-client.org