Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/c-5Swdzmm1um8CBf9gFUPcHJ0OI.roa
File: c-5Swdzmm1um8CBf9gFUPcHJ0OI.roa (raw, json)
Hash identifier: MW/H3iTaOsXA1khbJWgz+D8DtbG4EzTD/txy4WyprIY=
Subject key identifier: 73:EE:52:C1:DC:E6:9B:5B:A6:F0:20:5F:F6:01:54:3D:C1:C9:D0:E2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018DA76BE31BA1C4FCB35DDEBAEF37D30B18
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/c-5Swdzmm1um8CBf9gFUPcHJ0OI.roa
Signing time: Wed 14 Feb 2024 11:41:21 +0000
ROA not before: Wed 14 Feb 2024 11:41:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 200436
IP address blocks: 85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 07:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a7:6b:e3:1b:a1:c4:fc:b3:5d:de:ba:ef:37:d3:0b:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 14 11:41:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=73ee52c1dce69b5ba6f0205ff601543dc1c9d0e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:67:9a:a5:9a:f2:7c:46:9a:c5:e0:0e:fc:a5:
70:b2:b2:0e:2c:c0:cd:e0:08:8b:8b:e0:6b:fa:40:
e9:e8:8b:f1:aa:68:0b:71:44:58:5c:6e:89:ba:29:
0e:e8:36:0f:d9:f9:4b:3e:51:a4:6c:f3:f0:e0:af:
f9:88:f6:94:0c:08:2c:d6:19:01:e1:bf:8c:64:00:
63:c3:62:f7:0e:29:b7:2a:43:cd:b3:a9:46:77:c4:
5d:51:20:68:46:09:67:a6:ba:e5:ee:48:6b:1a:40:
76:d2:de:0c:d0:0d:b4:55:ea:17:ab:77:c5:c6:23:
3d:db:43:08:6e:23:b4:13:57:37:58:c5:66:33:2d:
14:ec:d3:93:fb:1e:26:54:d4:18:bb:ea:13:a6:da:
1d:50:57:5b:a4:c7:18:5f:79:c8:cd:b0:9c:92:ed:
c4:34:2c:ad:28:94:91:87:52:fd:db:62:2b:1f:46:
14:14:e1:85:de:fb:cd:1d:c8:7f:f1:37:cc:71:a9:
cf:4e:99:cf:eb:8b:2c:db:96:85:e9:05:94:a8:b3:
bc:f8:37:e2:10:89:8a:3c:57:0f:be:2b:d8:79:44:
c1:c9:94:98:03:3b:6e:65:83:18:a0:d9:69:a7:ab:
db:0d:4d:1f:96:14:bb:45:35:c7:56:df:73:98:ab:
a7:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:EE:52:C1:DC:E6:9B:5B:A6:F0:20:5F:F6:01:54:3D:C1:C9:D0:E2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/c-5Swdzmm1um8CBf9gFUPcHJ0OI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.227.0-85.133.228.255
Signature Algorithm: sha256WithRSAEncryption
b6:ea:6b:a0:e5:74:dc:e3:8f:5a:5d:73:51:1b:48:78:31:97:
fe:50:90:42:0e:8d:c1:14:6d:7c:bd:68:3b:cc:38:bc:81:8c:
41:e2:90:43:bd:73:4f:9d:4c:7e:95:90:b6:23:13:d8:e0:44:
9b:d2:ce:fd:0a:ac:1f:ff:43:5f:82:dc:f7:09:c7:7a:ef:33:
09:be:20:b3:f5:64:d0:d8:b3:9a:2c:41:8c:66:48:46:25:16:
fe:66:80:b6:d5:7e:c2:11:f5:13:ed:15:f7:92:5d:3a:7e:6d:
86:bb:08:27:c1:a2:ee:30:5e:50:a7:3c:10:cf:0f:0f:89:88:
02:bd:60:3f:5f:a0:df:6a:0e:69:52:bd:fb:46:74:e0:14:94:
ae:a7:5e:3d:44:39:83:ae:db:fa:f4:c6:19:65:0f:a6:fb:3e:
b2:83:6c:79:5d:94:ef:6c:d5:41:7b:7a:be:65:93:04:b0:ec:
c4:4d:5a:4a:64:f8:51:76:79:d6:d4:aa:f3:7a:f6:88:5f:e2:
8c:53:ca:2d:2b:04:b5:f2:5a:89:68:a8:6a:3a:c9:1d:20:c3:
26:9b:de:ad:31:11:72:44:84:23:0c:88:76:28:fc:58:19:aa:
07:a9:fe:62:a3:62:b2:96:7b:4c:0b:db:3e:09:d3:16:bd:2f:
cb:4c:05:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org