Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fw8aiLnCArH_7VUCS_aAVHTIbxo.roa
File: fw8aiLnCArH_7VUCS_aAVHTIbxo.roa (raw, json)
Hash identifier: Fmvkorn8E+eWF2p5GH6phgA4ioM75PABVvBbtd0Ztvk=
Subject key identifier: 7F:0F:1A:88:B9:C2:02:B1:FF:ED:55:02:4B:F6:80:54:74:C8:6F:1A
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018CC793F373C6E75C360C99A18E8FF8E6CA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fw8aiLnCArH_7VUCS_aAVHTIbxo.roa
Signing time: Tue 02 Jan 2024 00:30:11 +0000
ROA not before: Tue 02 Jan 2024 00:30:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 209638
IP address blocks: 85.133.222.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 04 Feb 2024 16:54:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c7:93:f3:73:c6:e7:5c:36:0c:99:a1:8e:8f:f8:e6:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 2 00:30:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=7f0f1a88b9c202b1ffed55024bf6805474c86f1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:86:3c:bd:b5:65:4b:5c:35:01:ed:df:2d:de:
66:34:c8:91:15:60:b5:4c:29:14:fb:43:02:3c:c2:
e6:29:1c:90:00:36:1d:3b:ec:85:3f:8a:85:0e:75:
50:d4:97:d7:69:26:6f:28:4f:1f:71:bd:52:80:f7:
55:7d:74:6c:34:d8:ee:aa:73:3a:cd:3f:ae:5b:1b:
c9:ae:b9:49:29:92:5b:d8:46:3a:74:e8:17:bd:59:
fc:93:05:e1:d3:4d:54:17:6e:4f:10:de:9d:58:5a:
25:5a:df:fa:6c:8b:a1:3d:76:b4:1d:e7:8c:e1:41:
41:86:b4:cb:b2:78:db:3d:43:8f:27:64:38:e6:ad:
d2:04:b0:d2:ac:cd:aa:d3:9e:3d:94:89:75:a5:0a:
40:cc:18:df:d7:40:e2:b8:ab:a4:14:ff:0e:6e:a6:
a3:86:fa:35:b5:3b:86:62:59:86:ab:e1:89:ea:26:
1b:04:bb:5a:51:b3:9d:cd:1e:93:c1:b8:a3:0e:92:
9d:23:7e:a9:d7:63:4c:8d:02:9d:38:ad:12:d8:23:
56:36:57:64:2f:f2:8e:50:5f:ce:b5:9d:54:b6:2d:
db:ff:4d:20:e3:bd:af:61:6e:6c:ab:5a:b6:aa:4f:
46:c2:00:46:26:e8:aa:3a:6b:90:e3:9a:7e:30:5f:
c4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:0F:1A:88:B9:C2:02:B1:FF:ED:55:02:4B:F6:80:54:74:C8:6F:1A
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/fw8aiLnCArH_7VUCS_aAVHTIbxo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:ff:b5:42:04:7d:5f:69:64:d1:d8:03:a1:4d:7e:6b:47:30:
27:0f:4d:8b:81:7a:cd:7d:6f:82:80:e9:e5:96:36:de:e2:8b:
57:9a:5d:47:91:8e:14:79:6a:a2:9a:ff:79:0e:3a:4e:f2:b1:
24:83:77:41:55:8e:68:b7:b9:66:2a:ff:c0:dd:9b:04:97:bc:
58:3a:f9:6b:af:eb:50:03:bb:6d:93:56:ef:04:d0:6f:4d:66:
f5:4d:cf:be:eb:aa:47:9a:76:2e:5c:cd:52:6d:dd:11:0b:66:
e7:46:99:7d:cd:9c:51:38:d3:1c:c0:8e:68:ff:b5:18:a6:d8:
6a:e8:bb:03:28:da:3d:31:a1:ea:99:8d:80:3e:fb:7d:d6:27:
f5:39:61:14:42:22:af:6e:e1:0f:b2:c3:4c:42:32:e4:a7:22:
75:1d:10:d4:45:5c:fa:1b:0e:b9:f3:29:0f:34:7f:14:6a:2b:
34:06:b0:26:c5:fa:30:4f:94:34:be:70:2a:f2:d4:39:77:18:
85:aa:51:20:3c:07:e1:f8:5e:a4:ce:1e:62:09:3e:33:2a:56:
f2:9b:b1:7a:9b:23:4b:ce:1d:bd:d1:b3:0d:63:a1:67:0b:62:
e9:42:45:70:bc:9f:af:d5:2a:2e:04:64:92:ce:dd:24:34:56:
d2:5d:0c:30
-----BEGIN CERTIFICATE-----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Generated at Sun Feb 4 20:18:58 2024 by rpki-client on console-ams.rpki-client.org