Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l3-6if8wKhpW8v2wYumMsVBnqkQ.roa
File: l3-6if8wKhpW8v2wYumMsVBnqkQ.roa (raw, json)
Hash identifier: bh/R8yMhP8GAri3QjE5DHDw6d3ogWwQeaXBYt6F2Vp8=
Subject key identifier: 97:7F:BA:89:FF:30:2A:1A:56:F2:FD:B0:62:E9:8C:B1:50:67:AA:44
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01888AE7438535C8A1AC5225AD3677F042E1
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l3-6if8wKhpW8v2wYumMsVBnqkQ.roa
Signing time: Mon 05 Jun 2023 09:33:11 +0000
ROA not before: Mon 05 Jun 2023 09:33:11 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207279
IP address blocks: 85.133.205.0/24 maxlen: 24
85.133.208.0/24 maxlen: 24
85.133.233.0/24 maxlen: 24
85.133.242.0/24 maxlen: 24
85.133.161.0/24 maxlen: 24
85.133.160.0/24 maxlen: 24
Validation: Failed, certificate revoked on Thu 29 Jun 2023 09:18:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:8a:e7:43:85:35:c8:a1:ac:52:25:ad:36:77:f0:42:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 5 09:33:11 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=977fba89ff302a1a56f2fdb062e98cb15067aa44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:23:02:16:a0:36:be:e1:06:54:c4:2e:9d:
7b:08:e1:0f:f8:da:3a:fb:2c:c6:4a:79:b3:8b:26:
bb:b0:e6:38:4b:84:35:7f:c5:b2:8c:de:32:52:f2:
bf:4e:fd:bb:b4:21:ba:9b:10:05:a9:1d:92:95:f2:
bc:da:c7:71:64:0a:55:13:03:9a:00:f6:7a:27:4e:
c9:29:24:51:cd:ac:75:1e:86:12:c5:60:17:50:3b:
b5:94:fd:84:e1:05:08:fb:59:17:96:48:cc:09:04:
8a:90:ac:5e:fe:dd:21:d9:00:d6:e8:62:f6:1f:db:
99:7f:6e:3d:f5:0c:7f:0b:fd:2e:7c:ef:60:42:4d:
5f:79:8d:b2:e6:09:ff:e9:50:84:0c:cf:d9:6a:ba:
93:25:b8:22:bb:1c:58:10:01:b3:f2:2d:0f:7a:82:
f8:ef:2f:4d:a7:08:a1:9c:17:1d:53:28:b4:3e:fc:
37:02:8d:3f:05:24:fd:8f:c3:4d:95:6d:15:99:5c:
91:72:07:3f:eb:c5:b2:6c:1d:ec:97:3c:3c:4a:57:
49:88:69:22:23:ce:74:d3:ba:f1:e4:96:fc:45:9c:
02:ad:15:d4:e7:1d:c6:a1:36:e8:cb:9b:91:d7:f8:
73:e4:e2:e8:99:59:a4:b4:98:4b:4a:5a:ff:47:17:
3b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:7F:BA:89:FF:30:2A:1A:56:F2:FD:B0:62:E9:8C:B1:50:67:AA:44
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/l3-6if8wKhpW8v2wYumMsVBnqkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.160.0/23
85.133.205.0/24
85.133.208.0/24
85.133.233.0/24
85.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:cf:c4:d2:b9:fd:15:bd:68:fc:07:e2:4f:7a:51:cf:45:ad:
7f:b7:9f:1f:82:4a:57:56:5b:42:be:3b:91:10:a3:c4:89:ab:
27:1f:28:3d:f8:4b:a6:78:91:5d:a3:9a:41:2e:3f:6c:61:4c:
42:ad:33:a4:5f:e2:35:b3:62:a4:2b:25:72:0a:f8:11:57:45:
51:af:9c:0a:17:1e:f0:9f:ae:68:c5:2f:30:7f:f8:6b:56:15:
cc:d3:ee:db:e2:d5:d8:69:63:71:8d:dc:d1:5c:e9:71:ad:3e:
c8:fe:c4:98:b6:62:9d:48:27:d7:c7:fc:a0:3c:71:fe:33:fb:
ee:28:75:d6:e4:b6:4d:af:5b:06:70:60:23:d3:d1:30:50:c0:
5d:0f:a3:37:57:dc:95:c3:af:51:e4:6b:5a:11:ca:a3:fd:3e:
de:2e:0f:8f:63:8f:41:1d:ca:e6:ae:33:b5:76:ee:0e:68:fd:
4c:29:35:c2:42:b4:ba:32:c0:9f:f2:4f:45:a0:45:b2:a5:51:
2b:fc:b3:f8:bb:af:86:80:15:4e:5a:c1:8b:37:85:57:3d:34:
9b:cf:5c:c9:27:70:9a:7b:68:0c:e2:c8:eb:9e:4c:74:98:5e:
f0:79:ed:12:4b:04:7c:9c:42:0a:9e:41:88:42:b6:39:9e:9a:
88:1f:f7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org