Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d8rPNXWMmtl5eQv9Hes5xAihOtw.roa
File: d8rPNXWMmtl5eQv9Hes5xAihOtw.roa (raw, json)
Hash identifier: oVCYVQy7fcbyBxhzCZcsQvUVSboqFC3M7nm276qYheE=
Subject key identifier: 77:CA:CF:35:75:8C:9A:D9:79:79:0B:FD:1D:EB:39:C4:08:A1:3A:DC
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018AF0968860893D640561E4EA0BED730C38
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d8rPNXWMmtl5eQv9Hes5xAihOtw.roa
Signing time: Mon 02 Oct 2023 13:31:51 +0000
ROA not before: Mon 02 Oct 2023 13:31:51 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 47216
IP address blocks: 85.133.225.0/24 maxlen: 24
85.133.224.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 24 Dec 2023 12:23:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f0:96:88:60:89:3d:64:05:61:e4:ea:0b:ed:73:0c:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 2 13:31:51 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=77cacf35758c9ad979790bfd1deb39c408a13adc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c2:36:f6:68:d2:93:da:6c:4c:fc:9a:f1:43:
f1:40:8b:3a:d1:6a:03:d4:c3:d3:f3:42:9d:58:ae:
b2:14:b9:68:22:d6:53:84:1c:6d:73:15:49:29:a5:
8f:03:4d:50:94:a7:94:77:b7:af:35:1e:a7:20:35:
53:c8:4a:f2:38:cc:82:59:f8:a2:4e:16:9e:1c:07:
fa:08:f9:4c:0d:6f:ba:37:c4:7c:b5:fc:c3:db:33:
16:31:94:50:ea:5f:f9:1b:01:2c:48:87:b2:d2:45:
81:67:4b:1a:78:f0:32:35:cc:09:ff:9d:62:0f:81:
34:6b:eb:74:d2:49:27:c2:b7:f6:16:e5:44:1c:f8:
b3:81:d5:8e:c4:c7:3a:76:44:c1:8b:32:80:93:ae:
5d:3b:32:c5:0e:fe:dd:48:34:e1:e4:09:e9:64:9d:
4e:8c:f3:99:25:a7:9c:cc:3e:ba:da:4b:c9:5d:69:
cb:37:34:cc:31:42:d8:27:39:5a:05:d9:af:85:06:
7e:16:b2:53:3b:d5:0d:69:01:e7:ce:ae:1c:c8:59:
44:f6:27:a7:1a:94:23:1d:e1:ba:cb:d4:f0:27:88:
bb:58:d0:d0:83:8d:31:e4:1e:f6:8d:64:c6:63:37:
43:b7:36:9c:0f:b2:d6:c4:7d:cf:c1:c8:94:39:11:
92:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:CA:CF:35:75:8C:9A:D9:79:79:0B:FD:1D:EB:39:C4:08:A1:3A:DC
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/d8rPNXWMmtl5eQv9Hes5xAihOtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.224.0/23
Signature Algorithm: sha256WithRSAEncryption
61:2e:8a:97:69:9d:f8:9c:07:49:92:7e:98:f6:31:01:d1:9b:
39:8c:ed:98:cf:16:09:8e:d2:ec:17:16:7e:23:f8:29:14:cf:
bd:42:5e:94:a3:d5:01:b3:42:0e:64:2d:64:6b:fd:7b:51:6e:
d5:13:98:68:a4:27:82:e9:0f:4f:0b:66:36:fb:96:08:65:43:
e9:fe:84:5d:77:6b:47:e6:2a:ce:28:07:99:7a:b0:c4:e2:b5:
c9:3a:41:9d:19:55:41:05:c1:7a:ea:e1:0d:12:25:c5:71:88:
64:6c:94:ee:81:ec:72:e6:bc:bd:41:b5:89:cd:22:94:1f:b9:
9c:50:60:ef:b1:9b:ba:41:c0:75:dc:24:5e:77:49:8a:d1:e9:
df:50:f2:cc:cf:07:a4:5f:48:49:e4:cc:b4:b3:32:29:89:ce:
af:b7:fd:00:79:cf:5e:09:f9:dd:e1:f6:55:61:3d:54:4e:91:
4c:a7:3f:b0:f2:79:2c:31:8b:60:ad:32:9e:60:6c:0a:b2:b6:
d1:4d:e0:7b:cf:2c:22:15:27:a7:35:89:27:ea:99:b3:9c:f4:
6c:46:48:c7:54:af:05:bc:c9:be:b7:52:7e:9a:9f:5b:d8:e7:
84:18:72:c7:13:6d:c6:44:79:52:ee:8c:02:4d:74:24:83:68:
59:a5:e2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org