Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yu0K-vFu3H1JeWK1vmHUkU_Yw3Y.roa
File: Yu0K-vFu3H1JeWK1vmHUkU_Yw3Y.roa (raw, json)
Hash identifier: nJpdcglei55AlBAEQGsEkBNWE+m3klK3Igh1HmLXqho=
Subject key identifier: 62:ED:0A:FA:F1:6E:DC:7D:49:79:62:B5:BE:61:D4:91:4F:D8:C3:76
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B8ADFAB7C1239AA09431F8A108C64AEF1
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yu0K-vFu3H1JeWK1vmHUkU_Yw3Y.roa
Signing time: Wed 01 Nov 2023 12:33:16 +0000
ROA not before: Wed 01 Nov 2023 12:33:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 216169
IP address blocks: 85.133.194.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Dec 2023 16:51:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:df:ab:7c:12:39:aa:09:43:1f:8a:10:8c:64:ae:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 1 12:33:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=62ed0afaf16edc7d497962b5be61d4914fd8c376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:28:94:19:fa:a1:24:19:7b:d5:e8:69:a9:91:
a4:e7:20:49:38:0a:dc:9b:70:15:5d:00:55:b2:70:
5d:74:21:51:52:9e:bf:9e:ff:7b:7b:20:b2:04:82:
50:c4:cb:2c:a4:95:87:79:f7:cd:98:56:19:c7:e6:
8b:c1:75:28:ac:28:ce:f7:78:07:fe:ec:9f:21:6b:
28:39:6b:8b:90:85:76:b1:35:a3:21:4b:97:e8:23:
86:30:bf:96:e8:00:41:d3:49:17:fc:04:97:e1:2e:
c4:c8:88:a4:e1:92:94:78:4b:0b:80:cd:c6:e2:08:
8d:ea:c4:c3:16:53:2c:91:b2:85:e6:b2:7a:9a:4c:
cf:a5:66:58:2d:31:87:ef:09:56:19:23:95:01:dc:
64:31:75:78:16:83:64:69:2b:4d:42:1b:9e:b2:5c:
e4:ab:91:51:ab:24:aa:90:ea:ec:04:1f:17:51:ee:
4e:07:82:ed:d3:03:b0:47:fb:da:ea:cc:56:93:c8:
11:dc:1c:1d:ac:60:d1:cb:67:2d:fa:a5:9d:bf:bb:
d6:ce:b2:2d:45:db:34:c4:e2:9e:be:04:30:4f:21:
80:c1:0b:50:81:39:8b:88:69:4e:8e:89:1b:4b:d6:
fa:e2:6c:d5:fe:3e:ed:25:7d:cd:72:93:eb:3c:0a:
1b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:ED:0A:FA:F1:6E:DC:7D:49:79:62:B5:BE:61:D4:91:4F:D8:C3:76
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/Yu0K-vFu3H1JeWK1vmHUkU_Yw3Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.194.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:1f:4b:bf:48:0d:ca:8a:c6:5f:f7:e0:2e:e6:bd:08:d3:37:
ec:cc:fc:06:39:ea:16:23:7a:ed:5d:0b:2d:0f:b8:18:96:50:
45:62:5e:43:c3:c0:a6:2e:4a:1e:41:58:3c:fc:f7:70:0c:be:
82:1f:fb:5b:b1:59:bf:de:00:5e:a0:83:56:f0:11:41:58:22:
80:c7:42:58:72:0f:00:ce:f1:3d:57:26:31:9f:9b:25:9a:e4:
0b:90:e8:52:fa:a8:ec:ca:a7:90:38:e3:dd:cb:6c:15:5e:83:
b9:eb:e9:8a:05:a8:6a:1d:e9:91:3a:ba:91:5a:47:1d:86:78:
2d:d9:b8:c3:55:13:49:6c:b8:c6:dd:f0:c3:f3:43:28:e2:9f:
6a:e1:5e:0e:3b:40:26:4e:f1:d9:88:c6:19:ac:34:8c:99:d0:
10:68:90:47:d9:c8:45:0b:1f:99:35:6f:70:94:7f:22:46:55:
14:4f:36:5d:61:68:74:a1:fd:f1:57:55:35:6a:a3:a6:41:e4:
a5:03:48:c5:b9:58:65:f1:b3:39:d6:47:b7:0a:79:a4:2d:f5:
52:35:32:d1:4d:f0:a7:6e:9d:ee:72:5a:3b:f7:1b:9a:64:2f:
e3:2e:53:f2:46:c4:f0:4a:d9:c9:2c:4d:3e:ae:e0:5a:7a:b2:
41:8b:62:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org