Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bLJO4MHsi42ykh5FkXCQFXLvK48.roa
File: bLJO4MHsi42ykh5FkXCQFXLvK48.roa (raw, json)
Hash identifier: yHYWBEnoQTSA6PZ2+ZX85JrvkrNhGmEFq5HjODAmxTk=
Subject key identifier: 6C:B2:4E:E0:C1:EC:8B:8D:B2:92:1E:45:91:70:90:15:72:EF:2B:8F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D6E8E0147077C5EDCF0178756D1B40AF2
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bLJO4MHsi42ykh5FkXCQFXLvK48.roa
Signing time: Sat 03 Feb 2024 10:40:16 +0000
ROA not before: Sat 03 Feb 2024 10:40:16 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209636
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 16:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:6e:8e:01:47:07:7c:5e:dc:f0:17:87:56:d1:b4:0a:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 3 10:40:16 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=6cb24ee0c1ec8b8db2921e459170901572ef2b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:9b:35:da:dc:73:8e:36:1e:57:70:7a:bf:75:
9a:da:f4:1e:44:7e:d9:9e:25:55:a1:8b:94:91:0a:
8f:57:ef:9f:81:7f:40:ab:c4:c4:e8:43:d8:3f:65:
db:f6:2c:31:9e:29:e3:28:70:ca:9c:1d:42:ee:3a:
2d:a7:cd:b9:dc:e7:79:f2:4f:7c:7b:81:f2:bb:a6:
02:62:47:d0:04:c3:fe:9c:15:94:e2:4c:81:61:20:
1d:50:1c:29:f8:df:2d:25:77:9f:3e:34:4a:b8:5e:
7b:e9:ce:2a:8e:b4:c5:c6:1e:14:89:71:67:62:9f:
eb:63:a1:38:f6:fa:11:37:b6:e0:ce:3b:38:24:13:
71:a7:f3:77:c1:ed:6d:86:9f:a6:eb:30:12:f3:2b:
eb:c1:c0:f0:59:1a:21:c1:4d:eb:e6:a3:ef:10:59:
79:31:a4:e1:a3:83:1c:6a:ac:b5:88:c8:d5:26:40:
1f:b3:d6:a4:52:97:f5:1e:5e:bf:13:a3:33:03:de:
b0:9e:1f:49:f3:c9:a4:2f:8a:cb:3e:26:6b:25:2e:
96:e9:89:22:f5:b9:68:73:aa:07:7c:de:94:bc:2f:
fb:a4:c0:e3:7e:74:aa:f0:86:2c:d1:11:be:52:b3:
0e:1f:f5:6f:81:99:c7:83:7a:47:a0:15:96:6c:79:
32:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:B2:4E:E0:C1:EC:8B:8D:B2:92:1E:45:91:70:90:15:72:EF:2B:8F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/bLJO4MHsi42ykh5FkXCQFXLvK48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.221.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ef:e1:b4:f5:8b:65:7f:46:6b:27:db:96:6a:10:4b:12:f6:
a3:c5:b2:99:d3:1c:b1:f2:ff:06:73:64:84:ff:73:44:7c:58:
40:57:ff:6f:de:6f:8e:7e:e2:a2:9f:69:f6:d4:28:12:93:95:
7a:ae:a3:25:7b:48:cd:71:17:76:d9:ed:b9:79:4f:a0:c2:e7:
47:0c:2b:8a:28:48:40:e5:7b:e6:ab:b3:19:08:1d:0a:7a:83:
de:1f:aa:fd:70:70:66:e4:66:67:cb:06:94:da:bd:2c:c4:2a:
32:53:d9:52:75:03:c4:f8:a2:95:a1:cc:c2:5f:a7:07:92:4b:
45:8d:79:19:db:db:1f:1f:9f:33:7f:94:08:6d:f4:71:80:1e:
ca:26:4a:97:a8:f6:5b:a4:de:8f:45:2a:84:e1:4c:7c:83:d0:
ee:a2:a2:d6:7f:77:60:cc:fd:c5:a8:28:b5:cd:5f:a4:09:ff:
d3:c0:14:b9:78:03:51:48:b2:1f:3b:19:b2:aa:6d:1c:16:95:
b0:8c:c5:ea:e5:55:fa:6d:e6:fc:0b:67:0c:cb:61:51:db:50:
14:34:fa:3f:f0:e2:2d:68:69:57:a6:bb:24:4a:ce:f2:42:d9:
1e:20:1c:6c:97:ac:15:43:bd:50:25:0d:82:5b:95:61:32:64:
36:e7:c7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 4 20:01:30 2024 by rpki-client on console-fra.rpki-client.org