Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f4ZzO8yOe-yfb0hw2ysD7h3mSug.roa
File: f4ZzO8yOe-yfb0hw2ysD7h3mSug.roa (raw, json)
Hash identifier: SlRESgwD8+5s9rI7a1iyi5U2g4S5GoUHNClDoNzzBV4=
Subject key identifier: 7F:86:73:3B:CC:8E:7B:EC:9F:6F:48:70:DB:2B:03:EE:1D:E6:4A:E8
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018FEEA8C0E45456B59E65D1D8C838310BFC
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f4ZzO8yOe-yfb0hw2ysD7h3mSug.roa
Signing time: Thu 06 Jun 2024 17:46:27 +0000
ROA not before: Thu 06 Jun 2024 17:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 214922
IP address blocks: 85.133.201.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.203.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 16 Sep 2024 08:11:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:a8:c0:e4:54:56:b5:9e:65:d1:d8:c8:38:31:0b:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 6 17:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f86733bcc8e7bec9f6f4870db2b03ee1de64ae8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:d0:e0:d4:04:ac:ba:47:fd:18:53:f2:15:42:
1c:21:f7:84:09:5d:7e:45:ae:75:f0:bb:fe:00:84:
c8:5c:71:35:04:c4:c0:57:93:d4:20:1c:5d:ae:8d:
a4:3a:fa:7c:7a:a3:8e:09:17:52:59:a8:ad:5a:29:
31:1c:2a:e5:63:b3:32:80:b8:8c:4a:fa:ff:13:2b:
ba:43:62:07:6a:b2:83:e0:ad:c2:df:a6:71:5b:5c:
82:97:69:11:e4:bc:91:7f:f3:4a:61:2f:d2:b9:36:
ea:e5:c1:f3:f8:18:46:ee:e6:5b:56:39:5c:c1:9c:
f0:1a:46:36:c4:5c:31:eb:83:03:f1:fa:20:02:d4:
20:e6:18:a6:bc:a9:c1:9a:26:95:5b:b0:fa:f3:70:
22:50:a1:28:ee:55:e1:0d:e7:8e:de:a0:76:ce:a1:
62:33:22:0e:20:2f:58:bf:3c:fc:b0:6d:6a:91:0a:
c7:76:d9:89:1f:8f:70:e6:e1:6a:7d:19:b5:b0:c0:
ce:da:01:4b:73:69:20:4c:b0:c5:ee:f0:38:32:be:
95:ea:32:8c:e3:aa:f0:51:a1:3a:92:2a:b7:de:c9:
71:d1:13:99:e1:2a:60:5e:f7:62:b4:44:6f:c3:20:
03:09:66:67:9c:f0:51:7c:f8:63:11:fe:a5:56:91:
f1:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:86:73:3B:CC:8E:7B:EC:9F:6F:48:70:DB:2B:03:EE:1D:E6:4A:E8
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/f4ZzO8yOe-yfb0hw2ysD7h3mSug.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.201.0-85.133.204.255
Signature Algorithm: sha256WithRSAEncryption
08:db:01:75:ba:5a:a5:65:eb:66:92:c7:61:be:c3:fd:9b:bc:
5b:3c:c1:0a:89:0c:6c:11:0b:88:46:bf:61:3c:ab:b8:b2:97:
cd:79:f0:18:24:4b:02:0d:62:85:ec:c4:db:46:42:8c:b8:5c:
a0:7e:d5:a1:ea:97:3b:ed:84:1c:98:5a:09:bf:38:d8:a2:53:
18:94:d6:2b:ea:b4:78:78:ac:4d:ed:6d:dc:88:d7:fa:39:88:
30:cc:06:a7:94:cb:bd:1a:af:63:9a:43:8d:1f:e8:18:39:1a:
4c:05:6a:44:60:5b:63:2d:7e:6a:86:17:11:02:61:06:ac:a4:
09:37:ed:06:b9:2b:64:3a:34:5f:cf:6e:98:30:75:2b:48:01:
cb:58:3b:65:2d:9b:d9:94:e6:7d:68:ad:f2:1d:ca:f2:3e:ef:
48:3b:5f:64:5b:b0:5d:81:5e:0b:63:bf:40:33:f8:d8:0a:d3:
63:63:d3:8a:3d:8c:bf:40:8c:79:de:25:00:7c:bd:a5:52:73:
2d:20:52:67:3b:18:3b:13:11:af:99:ae:f2:ba:9f:de:71:41:
93:98:4a:66:9d:21:4c:8a:06:6a:1c:8d:e7:f8:6a:f2:de:33:
9c:92:bc:21:60:62:0d:90:e2:65:95:5e:17:b3:04:10:fb:a5:
5e:58:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 16 11:17:36 2024 by rpki-client on console-ams.rpki-client.org