Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/khdvvGU82T8F7RdVeKmVXMC0Je4.roa
File: khdvvGU82T8F7RdVeKmVXMC0Je4.roa (raw, json)
Hash identifier: rj9s0Yw9uWRZAbCq+9SdNHDGtMpxgewSmYI0/WzL4gA=
Subject key identifier: 92:17:6F:BC:65:3C:D9:3F:05:ED:17:55:78:A9:95:5C:C0:B4:25:EE
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018972091D03205377F45281B4D22CB17165
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/khdvvGU82T8F7RdVeKmVXMC0Je4.roa
Signing time: Thu 20 Jul 2023 06:42:27 +0000
ROA not before: Thu 20 Jul 2023 06:42:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 85.133.199.0/24 maxlen: 24
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:72:09:1d:03:20:53:77:f4:52:81:b4:d2:2c:b1:71:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 20 06:42:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=92176fbc653cd93f05ed175578a9955cc0b425ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:53:b6:b6:ac:cb:74:8f:54:e7:b9:3e:4e:1d:
c3:ed:7f:63:c7:04:76:3a:8c:28:45:5f:67:7d:5e:
b4:9f:0b:26:66:66:ab:ec:e3:87:af:e2:95:51:7d:
47:c2:bc:82:5d:85:c1:ec:5e:80:a8:2c:76:f0:74:
53:11:8d:71:b7:7e:c8:6f:39:9d:b2:d1:02:cf:c9:
74:12:c8:c4:ae:6d:41:53:80:00:77:1e:79:49:e0:
73:9e:2e:eb:0f:b5:5d:cc:68:a9:82:8e:d5:74:70:
7f:5b:cb:c3:b5:fb:79:f4:ac:d6:68:e2:44:ef:77:
90:d2:1d:78:7f:cd:73:5e:d1:a3:44:0a:79:6b:24:
0e:34:bc:37:48:4b:56:85:96:3c:30:6a:7d:b9:c5:
8c:3c:5a:0b:98:ef:1f:92:d1:eb:9c:b9:fc:24:16:
d5:e1:0e:0b:1a:49:b0:32:85:be:1c:ee:50:b5:a8:
c1:cb:98:48:24:ad:32:58:12:80:f8:ff:09:2e:52:
90:a5:c6:39:e5:70:97:5d:07:7e:c2:eb:c4:79:28:
3f:db:0d:ee:b2:50:c8:00:bd:f5:bb:0c:36:5e:e9:
4e:3f:ff:af:05:ed:28:8d:40:b9:c5:99:b9:db:a0:
ea:74:0f:35:0e:d9:c0:4e:8d:d8:1d:84:f4:54:29:
c5:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:17:6F:BC:65:3C:D9:3F:05:ED:17:55:78:A9:95:5C:C0:B4:25:EE
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/khdvvGU82T8F7RdVeKmVXMC0Je4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
Signature Algorithm: sha256WithRSAEncryption
34:f8:b5:7f:be:0a:3f:f5:c1:32:17:48:74:da:c9:5e:2a:2c:
f0:06:7f:2d:94:c1:06:8d:41:22:a1:70:11:78:b1:bf:32:c7:
7f:e7:61:f6:7b:c0:77:1e:4d:84:97:c4:ff:46:b4:ff:71:94:
59:52:51:ee:a9:01:7b:5d:8e:80:0c:69:6e:f7:8b:33:34:0d:
fb:54:cf:6e:fa:bc:92:a7:3b:41:42:c3:0e:84:e2:1e:a1:9e:
24:1a:4d:de:33:1f:1d:0e:5d:c1:45:bb:f3:ce:1e:03:86:a0:
e2:8f:52:d7:0d:86:3f:c9:8b:fc:53:cc:0e:6b:62:b2:fb:e4:
70:e2:2e:97:12:cf:a8:3e:4c:c7:35:0d:e6:54:9e:29:75:ed:
22:e5:9b:e8:be:98:07:12:18:a9:43:b2:63:2d:8c:bd:80:c2:
c4:5e:5f:30:81:0d:54:43:56:0b:51:b8:9d:cb:16:4b:6a:3e:
6b:5e:f0:00:da:27:04:c4:85:84:c8:1b:f9:64:4d:72:8f:73:
a9:4e:f5:65:c1:61:eb:90:5e:50:52:77:1d:e9:ce:44:60:5a:
12:68:16:85:05:e0:fc:8b:d2:fa:46:b5:29:cc:16:84:9b:2c:
b9:01:f3:33:3c:a9:6a:38:f5:0b:03:98:80:68:cb:dd:84:cf:
d7:8e:6b:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 15 08:38:58 2023 by rpki-client on console-ams.rpki-client.org