Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dyXgl4lj4ZUxP319ubakX0pjH-I.roa
File: dyXgl4lj4ZUxP319ubakX0pjH-I.roa (raw, json)
Hash identifier: qN5uoFO4TJPxvKLZaqsD72wZ4XocxAMZglx/uFdwDEA=
Subject key identifier: 77:25:E0:97:89:63:E1:95:31:3F:7D:7D:B9:B6:A4:5F:4A:63:1F:E2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018E48842B075F8984E798F08FB5ED1FE7C4
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dyXgl4lj4ZUxP319ubakX0pjH-I.roa
Signing time: Sat 16 Mar 2024 18:26:45 +0000
ROA not before: Sat 16 Mar 2024 18:26:45 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 85.133.137.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.178.0/23 maxlen: 24
85.133.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 09 Apr 2024 11:12:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:48:84:2b:07:5f:89:84:e7:98:f0:8f:b5:ed:1f:e7:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 16 18:26:45 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7725e0978963e195313f7d7db9b6a45f4a631fe2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e2:81:67:51:71:33:36:e7:84:20:2e:a4:9a:
d2:12:1c:84:bf:a5:36:a8:b9:be:49:77:e9:d4:10:
b9:cd:8a:9d:7a:7a:df:5e:99:16:f8:3b:9c:f6:19:
e6:03:a1:f2:a2:0c:b7:76:0b:da:3d:37:5b:7d:79:
5a:00:b4:60:03:90:9d:8c:82:05:96:19:b4:88:ea:
44:29:9f:c9:e0:5e:3c:92:ea:0b:b7:6d:df:e7:6a:
61:07:c7:95:ed:79:f1:80:20:d5:f2:6c:cc:8b:8b:
39:49:92:5c:5a:2e:24:67:eb:29:ed:d3:6c:eb:5b:
57:76:6f:87:c6:13:a2:c6:55:55:27:cf:37:ab:c0:
7b:5c:bf:e7:dd:e4:b4:f9:f3:47:26:6e:04:98:73:
5f:33:cf:2f:a0:ba:aa:28:79:cc:13:96:1c:0a:1b:
ac:11:f9:4b:5e:e0:e6:8e:de:2c:89:ae:1c:6d:8b:
68:99:85:13:80:fe:4e:c3:fe:34:e9:aa:22:89:c1:
8b:91:6c:bb:71:2b:cf:86:fe:d9:bf:c7:34:90:5e:
84:0d:22:28:2d:b4:29:ba:71:5a:a9:d1:2b:de:2e:
36:b9:03:a0:00:99:a8:12:05:c6:a8:25:ad:55:1d:
d0:c7:06:98:7b:ec:fe:7d:01:76:f2:44:a1:e9:dc:
2b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:25:E0:97:89:63:E1:95:31:3F:7D:7D:B9:B6:A4:5F:4A:63:1F:E2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/dyXgl4lj4ZUxP319ubakX0pjH-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.137.0/24
85.133.146.0/24
85.133.153.0/24
85.133.178.0/23
85.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:f6:85:1a:80:9f:64:6b:46:24:81:b9:b3:c4:47:fb:4f:a0:
26:57:9c:85:c5:9b:51:48:b5:8b:87:34:9e:23:69:5e:2c:28:
20:17:43:ef:e0:ac:2d:71:79:1f:8d:bd:c2:93:a6:84:28:cd:
b7:0e:2a:03:99:5b:89:88:79:73:87:f0:49:3d:b1:0f:ee:16:
a0:db:50:f3:d9:b7:49:b9:2b:88:c6:38:e2:aa:07:32:8a:ff:
3e:8c:76:7b:40:d4:14:6f:24:24:4d:21:4b:56:53:d0:90:0e:
30:74:f2:07:de:d7:4e:57:c0:48:09:b0:3c:e7:5c:64:e3:41:
89:bb:03:f9:ca:ff:20:69:05:72:1a:6e:59:8f:d5:d0:8b:3b:
0c:38:8c:e2:27:bb:22:36:ab:ca:80:8b:c9:17:e4:9a:a2:2c:
73:3a:c6:f3:c1:4f:57:ec:51:5e:bc:da:ff:2c:f3:7a:e4:19:
6b:24:e4:2c:9f:91:ff:7e:c3:c6:e1:db:98:68:04:b8:bc:54:
d5:ec:e1:d0:6f:67:af:87:60:b0:9d:63:1f:8f:e0:6e:5b:d3:
b0:f5:61:1b:86:5a:66:40:e0:0c:1a:4d:b3:ac:29:68:70:e4:
e5:9d:9c:5c:07:fe:03:97:71:a1:d9:34:b5:52:84:85:06:ab:
2e:9d:5a:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 9 14:36:30 2024 by rpki-client on console-fra.rpki-client.org