Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/co4sqcs3zlwdGux2hHRy6YHWOdo.roa
File: co4sqcs3zlwdGux2hHRy6YHWOdo.roa (raw, json)
Hash identifier: TqWxCxWwSrNrjEnljB4RrO0tosfuva483t2X8un3jpc=
Subject key identifier: 72:8E:2C:A9:CB:37:CE:5C:1D:1A:EC:76:84:74:72:E9:81:D6:39:DA
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0187B31F8B8329C75A5628C26C78F2D283CD
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/co4sqcs3zlwdGux2hHRy6YHWOdo.roa
Signing time: Mon 24 Apr 2023 11:56:41 +0000
ROA not before: Mon 24 Apr 2023 11:56:41 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.216.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 18:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:b3:1f:8b:83:29:c7:5a:56:28:c2:6c:78:f2:d2:83:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Apr 24 11:56:41 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=728e2ca9cb37ce5c1d1aec76847472e981d639da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a3:d9:2d:10:71:c2:7f:f1:1a:ea:aa:04:a8:
3f:90:f3:69:d5:55:5d:33:3e:c0:2a:ab:07:fc:dc:
1f:b2:e6:ce:4e:ec:62:1d:81:bb:46:6d:be:87:eb:
c0:a7:da:be:29:15:65:6e:de:17:38:c8:dc:c7:67:
e9:e9:78:ce:93:c6:54:b5:dd:dc:dc:cf:9c:4a:03:
b4:d6:93:55:e0:74:7a:f5:06:1f:84:5c:36:be:6e:
c9:e7:61:c9:cd:8c:85:a6:4d:b8:2d:0d:a4:3a:cb:
49:aa:bf:ce:d2:db:a0:68:0a:67:b8:43:93:1e:f1:
8b:f7:9a:db:23:af:0e:a0:b0:df:50:cf:0a:47:e3:
02:bd:8c:e9:32:42:a6:d9:fe:16:20:85:e3:d6:2a:
9a:9c:6f:7a:96:5d:76:6b:f1:0b:cc:39:9d:73:31:
b0:3e:1c:f6:27:0d:5c:f7:2f:cb:96:2b:de:9d:ae:
bd:e2:9f:44:66:69:96:29:3c:26:c0:9f:42:99:7a:
64:08:99:56:b8:b5:05:05:69:0f:ba:f1:28:cf:97:
39:1c:d4:b3:43:f5:15:41:30:21:af:89:c6:1e:eb:
af:12:9e:00:f0:a2:fa:91:51:d1:fa:e8:87:13:e2:
05:ae:68:fb:ba:8e:34:7e:2c:f1:2f:00:0a:58:c7:
af:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:8E:2C:A9:CB:37:CE:5C:1D:1A:EC:76:84:74:72:E9:81:D6:39:DA
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/co4sqcs3zlwdGux2hHRy6YHWOdo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.216.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:10:7d:1b:74:a6:80:2b:88:07:1d:b5:2c:08:78:ed:ea:93:
92:68:5c:b0:68:97:ae:b9:cd:e8:c1:c8:77:2a:78:89:54:32:
dd:82:10:a0:2f:e7:26:b3:59:b0:44:02:54:70:a0:db:74:c3:
42:94:20:39:56:56:cf:c8:db:6d:ae:7b:6c:a1:97:3e:14:93:
d1:e1:2b:90:d2:06:e9:f6:11:74:39:d3:91:62:0b:cc:c7:cf:
da:9d:fa:06:98:c4:e2:3f:90:63:69:27:4e:ab:9f:05:76:e4:
10:06:1e:66:e4:1f:84:db:b1:ac:d7:10:21:5b:14:85:5f:0a:
89:5e:65:96:f8:28:49:7f:c1:b6:ec:fc:dc:a5:a8:f5:da:d7:
09:4f:ef:47:24:85:5a:21:de:57:c6:4d:14:88:04:d4:62:81:
16:0e:f2:2a:6f:1a:c4:73:8d:b3:cf:00:44:da:45:71:ee:e0:
80:89:0c:c7:c5:89:83:df:c9:eb:a7:e6:3d:bc:50:0d:a9:cc:
26:76:ea:d4:67:dc:74:12:26:e0:a5:34:32:47:60:a7:2c:a9:
e5:14:0b:1c:67:81:e0:ea:7f:73:35:a4:42:37:48:e7:75:47:
00:1d:8d:42:54:66:27:bc:7c:ad:68:8b:63:b7:dd:38:af:78:
c1:51:31:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org