Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fob5LwZFT0iAdyJlqqALJkwNBEw.roa
File: fob5LwZFT0iAdyJlqqALJkwNBEw.roa (raw, json)
Hash identifier: 5ys3Gw8mpfymAbVK4WBGCSCwhTtQA999Y0gpfhUMLE0=
Subject key identifier: 7E:86:F9:2F:06:45:4F:48:80:77:22:65:AA:A0:0B:26:4C:0D:04:4C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B61F9B1FE96F62D984DD081C3400ED6E3
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fob5LwZFT0iAdyJlqqALJkwNBEw.roa
Signing time: Tue 24 Oct 2023 13:57:15 +0000
ROA not before: Tue 24 Oct 2023 13:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.208.0/24 maxlen: 24
85.133.215.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 10:57:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:f9:b1:fe:96:f6:2d:98:4d:d0:81:c3:40:0e:d6:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 24 13:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=7e86f92f06454f4880772265aaa00b264c0d044c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7f:65:82:94:41:5c:0d:ab:3a:df:13:b9:e0:
2a:76:55:f7:f0:23:54:f3:59:3a:2f:45:84:b4:9d:
4e:71:7a:84:83:d4:d7:43:2c:3c:53:e0:66:81:5f:
22:2d:4a:2b:bd:89:fc:aa:83:7b:65:d6:42:e1:ec:
8d:4c:08:e1:78:4a:70:9a:ee:9f:99:82:0a:fb:91:
f9:47:7c:d8:4f:f2:28:2d:6d:16:a7:80:55:98:17:
b6:78:3b:c4:37:3a:b2:76:cc:29:49:91:06:5a:1b:
e5:5d:3b:af:e0:f1:9a:2e:f6:9d:ee:11:2a:87:e7:
11:73:51:c7:d2:51:c4:28:bd:9d:5a:8f:8b:fb:ca:
f7:6b:79:87:46:0d:8f:8b:c4:42:41:5a:ca:04:71:
75:e4:bf:d3:2c:33:ca:73:d5:41:23:fc:8b:3a:b2:
e9:9c:05:8c:00:22:ea:6b:e3:1b:1a:b2:f1:c3:22:
15:7c:ad:a1:50:45:c2:7c:43:ab:11:64:1d:59:f8:
51:a5:d3:bd:ce:e7:72:66:ad:89:a9:37:16:89:79:
19:0d:3f:94:58:5a:49:7c:b0:3e:3a:9d:80:80:ef:
e6:f8:3f:cb:b3:6d:5b:e6:c6:87:a1:73:65:24:d7:
d5:22:2b:95:86:af:e7:b9:7c:a5:e3:3b:61:9a:6d:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:86:F9:2F:06:45:4F:48:80:77:22:65:AA:A0:0B:26:4C:0D:04:4C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fob5LwZFT0iAdyJlqqALJkwNBEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.208.0/24
85.133.215.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:ce:c2:70:09:e6:bb:25:ee:e0:da:3d:ce:f4:56:40:42:6d:
e6:7c:b5:3b:c5:f7:df:26:d3:f8:41:ff:e5:a8:89:a3:b0:f6:
d8:ac:e7:cb:b4:ce:11:18:9c:c0:a4:7c:a5:c5:3a:87:14:13:
30:62:24:e7:04:b0:ad:4e:32:87:b2:29:65:cb:71:41:93:84:
a8:a9:18:63:ea:ad:c3:4f:db:4f:52:fa:2c:f4:30:3b:78:40:
a0:be:11:40:df:e1:58:bb:5e:b6:79:64:81:4a:0b:4d:c5:f1:
b4:34:a2:6e:08:aa:18:82:4e:5d:40:ed:f0:e3:1e:43:e0:d1:
0b:93:1d:df:ee:8f:a9:a8:65:1b:6e:ac:74:f1:6e:b2:4b:48:
20:32:c4:2f:05:29:d6:e9:ef:76:c3:b1:0f:4e:40:3c:cc:9d:
aa:3f:d1:b2:dc:13:f4:2a:8a:bc:b0:34:97:6e:c3:38:ae:56:
16:c1:d3:8d:26:bd:b4:c3:1b:8f:44:d9:b7:9c:9e:b8:d2:36:
86:2e:8f:61:07:41:c1:8a:ad:90:20:0d:38:0c:98:23:a2:4c:
52:8b:a9:c4:44:0a:a9:33:7a:8c:23:a2:bc:3b:ad:c4:c6:c2:
5e:94:09:14:30:b4:24:c8:13:9a:68:9f:ff:41:43:c4:65:1f:
ae:fa:83:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org