Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/iq2GYvCFU6MlbzeQ6FHtORycKbA.roa
File: iq2GYvCFU6MlbzeQ6FHtORycKbA.roa (raw, json)
Hash identifier: 0IGA8a7QACrAlZOXDfoG6stT5Vn+4G5bY6Gcnz+8PJo=
Subject key identifier: 8A:AD:86:62:F0:85:53:A3:25:6F:37:90:E8:51:ED:39:1C:9C:29:B0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B61F9B29B870B083FDFC98212CFA3FF24
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/iq2GYvCFU6MlbzeQ6FHtORycKbA.roa
Signing time: Tue 24 Oct 2023 13:57:15 +0000
ROA not before: Tue 24 Oct 2023 13:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49581
IP address blocks: 85.133.199.0/24 maxlen: 24
85.133.205.0/24 maxlen: 24
85.133.202.0/24 maxlen: 24
85.133.219.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
85.133.221.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.227.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 08:35:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:f9:b2:9b:87:0b:08:3f:df:c9:82:12:cf:a3:ff:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 24 13:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8aad8662f08553a3256f3790e851ed391c9c29b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:55:30:59:20:2b:94:d3:c5:88:5e:ff:49:b8:
20:20:cb:83:45:31:a3:64:d5:7d:2d:40:3b:6c:35:
c8:94:77:cc:17:5c:21:c5:5b:09:6c:c2:bc:6a:2d:
52:50:6e:7c:6f:09:1f:de:4d:cd:69:a1:5c:ab:01:
a9:f6:8a:31:2a:90:ed:29:b4:7b:b0:94:e9:62:8c:
54:9d:9f:1a:bb:af:69:54:9b:d4:d5:a2:aa:fb:2f:
81:4c:cb:8e:a8:a1:58:96:32:81:6f:51:14:29:76:
8f:7e:78:47:c6:46:70:5d:49:8e:05:0b:1d:ab:43:
62:e8:72:f1:14:2b:03:6e:1f:56:95:dd:4f:37:65:
ea:a9:2d:c9:54:65:a7:55:c0:f8:47:56:23:ff:8d:
92:74:16:5b:0a:f4:f6:9f:c8:96:ba:4d:20:14:2e:
f8:11:65:8c:9b:2a:5d:eb:7b:fe:a9:40:7e:3c:b4:
a5:de:ed:1a:18:51:3a:e4:2a:a1:f4:0a:03:42:d6:
3c:97:ce:67:2d:b3:48:8a:9e:a8:92:0b:c1:07:25:
c1:0e:c6:aa:a6:d3:a5:2d:7d:c3:db:2f:28:71:be:
7c:2e:80:4e:78:3e:b4:60:46:79:18:ab:7c:ae:a2:
bf:a1:c6:1e:a7:ff:6b:2e:05:3a:1c:ff:eb:c8:65:
cd:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:AD:86:62:F0:85:53:A3:25:6F:37:90:E8:51:ED:39:1C:9C:29:B0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/iq2GYvCFU6MlbzeQ6FHtORycKbA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
85.133.202.0/24
85.133.205.0/24
85.133.217.0/24
85.133.219.0/24
85.133.221.0/24
85.133.227.0-85.133.228.255
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
53:1b:df:5e:a5:85:f0:12:9e:92:4f:2a:c0:55:f5:23:55:d9:
e9:74:46:24:b8:ba:31:8d:5d:f3:6b:f5:8b:14:0c:7a:6c:83:
c1:61:00:28:ee:25:0f:f9:fd:b6:53:ec:2c:b6:22:b1:0a:af:
3b:12:96:3c:76:ab:81:20:6c:f9:3c:da:5b:dd:69:c7:11:4a:
9c:0a:54:89:81:d9:55:09:80:5a:b1:df:4c:98:b9:bf:ea:60:
3a:41:3a:2a:7c:c7:45:71:24:ef:e5:f3:81:5b:f3:41:81:6c:
60:7f:dd:0a:6d:af:12:0d:51:1d:df:dd:95:30:94:2f:e6:87:
fd:39:6d:2f:05:9c:d7:50:e8:7e:19:c0:a6:c4:a1:81:5e:f3:
25:5c:0c:a7:10:40:32:4e:f9:58:0a:fa:7e:79:3c:8e:a7:5f:
e3:63:25:0c:1c:e2:86:9d:15:94:7f:9c:2a:4e:c6:71:4c:d0:
f9:87:45:c9:c4:77:3b:73:b2:29:eb:5a:61:05:39:ff:cb:7f:
37:dd:66:90:ec:5c:90:e8:18:95:c1:b2:19:32:85:cf:9f:5d:
31:35:6f:5d:4c:af:50:5b:3a:9d:d8:32:1b:5b:82:39:77:e6:
0d:5e:54:4f:7e:b6:5a:42:a8:c6:98:ce:18:48:5a:c5:68:7c:
ae:4f:d1:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org