Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ioL9s9WTw7Q75RVQ5s3oocbWLYk.roa
File: ioL9s9WTw7Q75RVQ5s3oocbWLYk.roa (raw, json)
Hash identifier: rsx4pI29pYY0n5K8tQB+65irnaFY6on4fb1xgkETZUw=
Subject key identifier: 8A:82:FD:B3:D5:93:C3:B4:3B:E5:15:50:E6:CD:E8:A1:C6:D6:2D:89
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0191664EC0806DAC3C4265140802365B7DF0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ioL9s9WTw7Q75RVQ5s3oocbWLYk.roa
Signing time: Sun 18 Aug 2024 16:25:22 +0000
ROA not before: Sun 18 Aug 2024 16:25:22 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 42337
IP address blocks: 85.133.208.0/24 maxlen: 24
85.133.225.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.240.0/24 maxlen: 24
85.133.247.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 03 Sep 2024 07:49:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:66:4e:c0:80:6d:ac:3c:42:65:14:08:02:36:5b:7d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Aug 18 16:25:22 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=8a82fdb3d593c3b43be51550e6cde8a1c6d62d89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:1d:c8:bf:be:40:21:f9:76:0f:88:a0:3f:00:
f5:af:3a:87:3c:3c:53:4b:58:3f:13:a7:57:2a:df:
26:8a:60:59:62:39:af:82:7d:6e:12:9d:4e:9b:f9:
7a:e8:a9:39:0a:f6:5c:a1:bb:c1:af:19:c3:d0:5b:
62:20:6a:32:aa:08:eb:ec:04:8c:b7:8c:a8:48:99:
5e:ac:18:cd:43:10:23:0e:6f:11:dc:60:5a:5c:c7:
20:33:10:42:ea:bf:49:38:78:2d:3c:29:d9:7d:80:
4d:d2:24:45:ad:ae:31:89:6a:bc:04:12:15:eb:87:
d6:8f:4b:5c:d9:dc:f3:c6:3b:21:fe:18:f2:15:bb:
61:43:26:32:53:1d:7b:bf:4f:04:47:7e:d7:bd:0f:
23:55:5d:66:fb:cb:19:fd:e2:67:98:5a:99:32:b1:
54:f1:df:f3:e7:61:0c:3c:30:c3:d2:e6:55:17:81:
89:2c:3e:1b:f9:e5:ec:38:b0:48:4a:09:a9:67:2c:
80:b5:91:d7:d1:8d:2f:d7:d5:b5:90:86:97:e4:c6:
ea:46:98:7a:ef:a3:f8:64:77:b5:dc:7e:18:0c:d9:
eb:94:dd:4f:0b:29:e6:87:87:1c:8f:ef:29:fa:e7:
fe:6c:ad:db:92:d5:67:a0:46:8a:32:a7:17:be:52:
70:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:82:FD:B3:D5:93:C3:B4:3B:E5:15:50:E6:CD:E8:A1:C6:D6:2D:89
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/ioL9s9WTw7Q75RVQ5s3oocbWLYk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.208.0/24
85.133.225.0/24
85.133.227.0-85.133.228.255
85.133.240.0/24
85.133.247.0/24
Signature Algorithm: sha256WithRSAEncryption
54:b5:be:9f:e7:55:5a:8b:b1:d7:d0:4c:59:da:ad:b4:bc:90:
76:5f:59:20:dc:5a:1f:16:7e:a7:28:e0:6a:bf:31:50:a2:a9:
d2:f6:3e:91:46:06:3a:b6:50:cd:b8:9b:f9:8c:59:57:dc:d0:
da:f2:1c:c0:2a:2f:d6:71:0a:a8:a9:76:bb:74:9e:b4:8a:f6:
7a:0f:24:b8:2a:95:63:29:e3:f1:71:03:56:be:db:ff:41:55:
06:0d:0f:71:0d:28:b6:26:1d:2e:b4:de:9b:55:6e:02:0d:f0:
e7:73:7e:1a:7b:b2:f1:62:69:c6:06:c1:fa:e8:c9:b4:69:b9:
d0:4d:74:62:e8:61:25:9e:6e:e0:ec:fe:de:4b:13:84:56:ad:
9f:41:f2:3e:f1:13:82:4c:92:bb:bd:4c:7c:db:e8:6b:cd:c4:
19:bd:9b:5a:bd:5f:60:a7:5c:d0:69:c9:a4:de:41:06:ac:3d:
37:64:f6:b8:2d:ef:3e:84:6d:dd:8f:d9:bf:b4:19:69:b3:f9:
45:75:f9:df:79:fd:bf:36:67:c2:2a:84:6a:5d:85:ef:56:96:
ec:85:d1:66:45:55:ba:3f:52:97:39:72:ed:02:d6:44:a2:a2:
99:ee:b5:f5:b1:0a:89:24:eb:9b:9b:ac:12:fc:c8:56:87:a7:
fc:38:6d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 3 09:41:53 2024 by rpki-client on console-fra.rpki-client.org