Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/aBDf_KKKrDWJngZK0Sv5u-e3kaY.roa
File: aBDf_KKKrDWJngZK0Sv5u-e3kaY.roa (raw, json)
Hash identifier: Dc64nTNWcgDbO8P93Zpg16C/y5XBjRzI9EC5am2vWZ4=
Subject key identifier: 68:10:DF:FC:A2:8A:AC:35:89:9E:06:4A:D1:2B:F9:BB:E7:B7:91:A6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0188B9A8BD24A4CFEB4DE811425FBD78C4D5
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/aBDf_KKKrDWJngZK0Sv5u-e3kaY.roa
Signing time: Wed 14 Jun 2023 11:27:03 +0000
ROA not before: Wed 14 Jun 2023 11:27:03 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 21082
IP address blocks: 85.133.221.0/24 maxlen: 24
85.133.237.0/24 maxlen: 24
85.133.253.0/24 maxlen: 24
85.133.166.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:20:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b9:a8:bd:24:a4:cf:eb:4d:e8:11:42:5f:bd:78:c4:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 14 11:27:03 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=6810dffca28aac35899e064ad12bf9bbe7b791a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f6:94:6f:90:dd:5c:2a:f7:ea:3a:26:dc:98:
ee:ed:aa:58:27:08:e3:f8:43:d2:27:25:68:98:be:
4b:3d:11:ba:d4:df:e6:3a:11:a8:e7:ec:78:31:30:
c1:82:ec:eb:a4:b5:d5:25:a9:67:50:63:2d:c8:88:
b1:74:e0:e4:5f:35:59:42:40:14:25:eb:72:a3:33:
15:34:85:aa:f0:a9:65:48:5b:59:a3:82:1c:0d:ab:
10:d7:5b:e3:49:5f:a3:19:f8:fd:86:d9:36:cd:fa:
b2:a6:97:42:26:42:3b:34:ee:b5:ec:eb:d9:79:8b:
06:2b:73:a8:8b:ef:a4:54:72:3f:25:b4:d3:99:aa:
95:f3:fd:f8:d9:f2:e0:4e:59:c8:db:c5:34:6d:36:
fc:0c:99:64:fb:5b:7f:8e:a0:44:25:36:cf:f7:15:
e5:a0:0e:08:01:16:f3:4a:dd:d1:2f:ef:2a:66:b7:
6d:54:fd:cb:ee:6e:78:26:02:5c:c5:2e:dd:79:9d:
b7:e9:8c:ca:da:f8:ac:ad:ba:4b:86:2b:9f:3e:f6:
04:57:ed:85:46:86:45:ad:b0:a4:8f:29:bb:62:7a:
1f:41:1e:6f:81:58:c7:d1:2b:5d:b5:ae:a3:de:fb:
3d:1c:18:b4:4e:44:8a:38:29:7c:bc:01:1b:8e:9d:
76:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:10:DF:FC:A2:8A:AC:35:89:9E:06:4A:D1:2B:F9:BB:E7:B7:91:A6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/aBDf_KKKrDWJngZK0Sv5u-e3kaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.166.0/24
85.133.221.0/24
85.133.237.0/24
85.133.253.0/24
Signature Algorithm: sha256WithRSAEncryption
79:78:57:a0:98:84:64:92:8a:52:3b:29:ca:a6:79:aa:02:d1:
9b:0e:19:0d:ec:f6:c6:fb:82:05:cd:e3:b2:2c:ff:2b:34:a6:
fb:67:73:2d:67:7d:d7:fc:97:b8:90:c6:56:f4:95:82:68:ba:
7d:4f:0e:c9:fe:4b:bc:34:39:af:41:36:50:30:96:9c:71:82:
56:bf:37:53:6d:01:f6:e3:ed:fd:dc:fd:be:4e:1b:df:a7:c2:
26:dd:3c:20:82:e9:0a:ba:dd:10:64:fc:bb:7e:26:df:91:4a:
42:7b:1d:75:24:80:10:91:09:b3:64:56:cb:42:f6:ec:07:f4:
15:0f:67:38:77:c1:0c:bc:f2:ab:b0:9b:9e:86:ce:14:a5:e4:
6e:57:5d:de:40:65:09:12:cc:69:8e:88:c8:c0:98:87:82:1d:
0e:1c:48:b6:70:6a:bd:5f:67:7b:eb:a6:63:ca:e0:d4:a2:6c:
66:27:b1:be:89:5e:a8:eb:52:b1:ff:92:9c:e0:bf:8b:5f:0a:
79:27:d5:9e:2f:1b:23:37:84:c3:c8:d9:17:7f:ce:7a:ea:eb:
4d:cb:7a:70:33:8d:c5:c3:43:ae:00:fa:f4:64:c0:38:30:54:
8e:8b:0b:44:d6:08:1d:ab:c2:91:84:84:9c:df:84:48:45:0a:
b5:f0:15:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org