Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jV02aT6uGdbmYAOZ32U6wj8GyNM.roa
File: jV02aT6uGdbmYAOZ32U6wj8GyNM.roa (raw, json)
Hash identifier: vT8hhvkoOStHSwCwPCd+cabcbWn7805tka1oMMWbzpY=
Subject key identifier: 8D:5D:36:69:3E:AE:19:D6:E6:60:03:99:DF:65:3A:C2:3F:06:C8:D3
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B8AD76EE1048C785678FA1252BC64F6AC
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jV02aT6uGdbmYAOZ32U6wj8GyNM.roa
Signing time: Wed 01 Nov 2023 12:24:16 +0000
ROA not before: Wed 01 Nov 2023 12:24:16 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 49217
IP address blocks: 85.133.174.0/24 maxlen: 24
85.133.178.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:8a:d7:6e:e1:04:8c:78:56:78:fa:12:52:bc:64:f6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Nov 1 12:24:16 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=8d5d36693eae19d6e6600399df653ac23f06c8d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9c:91:fa:3e:68:1c:a7:ee:60:93:1a:e1:08:
67:92:c0:51:4e:47:07:8e:7b:a9:bd:ba:79:6f:28:
96:e4:a7:0f:e3:c1:91:f3:53:ef:2a:1a:2e:11:23:
e1:1a:e3:ba:77:44:7c:72:f7:61:27:cf:cc:d2:3a:
9b:fe:e3:bc:05:9f:ad:f8:ee:2d:b8:d9:e4:6d:d6:
9d:f7:6c:67:d3:25:54:7f:3f:c0:1b:8b:c6:39:ee:
ec:52:d5:98:93:51:72:d2:0b:c4:03:01:32:17:e8:
d5:1d:4d:be:01:40:e5:3e:37:af:4a:9a:f9:98:1f:
50:49:07:9b:9b:00:57:3d:52:9a:d4:86:f7:1e:b1:
af:81:47:8c:a9:b8:5f:db:8b:db:02:cd:db:18:f9:
8d:6c:a0:81:de:b3:75:87:28:65:fc:12:ab:87:4f:
ab:a7:4d:3c:41:57:fb:cc:10:02:6b:a6:b8:79:6c:
07:7f:29:a4:2a:f6:4a:ef:42:93:73:3a:c6:f4:48:
54:3b:36:77:93:01:9f:b8:1f:ed:92:42:bb:35:2d:
34:a5:85:58:4e:68:a0:c9:2c:2c:38:fb:44:eb:55:
9b:63:ee:8c:11:d1:98:f8:4b:64:a8:ff:95:d1:df:
93:77:03:42:71:a5:aa:67:ae:f9:de:45:e1:76:7c:
0e:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:5D:36:69:3E:AE:19:D6:E6:60:03:99:DF:65:3A:C2:3F:06:C8:D3
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/jV02aT6uGdbmYAOZ32U6wj8GyNM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.161.0/24
85.133.174.0/24
85.133.178.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:69:4a:ac:40:23:db:c9:49:1c:d0:28:69:27:41:33:1f:b5:
a4:cd:a4:51:a2:bf:e3:44:0d:58:07:bc:1d:d7:6f:61:c6:54:
bd:41:73:69:be:a6:e0:27:5f:e4:d2:36:e5:50:31:d2:db:8c:
e4:be:84:8f:ad:75:06:20:69:a1:1e:89:d3:f4:cc:0a:39:68:
17:6c:82:a2:4f:33:bd:e7:97:dd:1e:4f:0a:4c:53:39:8a:d7:
b0:c4:1f:e2:5c:31:84:b3:27:4b:10:43:f8:53:5c:11:cf:d0:
56:27:14:46:37:8b:11:db:40:fa:53:0f:35:59:44:10:23:77:
eb:14:4b:d6:d2:aa:25:ee:40:e1:bf:5b:d8:8b:a3:6f:2c:e5:
0e:29:bd:a1:b9:51:b5:f7:3a:f9:8c:18:06:ce:d9:de:67:de:
8e:13:16:70:a8:9c:ec:42:3b:91:29:09:33:bc:53:c6:ce:fb:
1c:68:cb:f5:52:51:d9:3a:0a:9f:c9:30:f7:f0:d8:aa:49:79:
ec:d2:98:4b:6b:23:4e:bb:92:02:69:27:b2:1d:49:1e:4a:39:
af:70:92:58:4c:6a:fa:39:1a:b2:44:6a:06:e8:60:ed:01:30:
94:34:45:61:82:ef:9f:c4:17:af:25:3e:5e:f5:2a:af:c5:40:
35:7a:31:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 4 10:42:40 2023 by rpki-client on console-fra.rpki-client.org