Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/o9tz6Bi9_k8Y082rri0pWrWnHB0.roa
File: o9tz6Bi9_k8Y082rri0pWrWnHB0.roa (raw, json)
Hash identifier: CXvCWGLFp7cTL6XfJ64C+IUH4ZbWjGEPlBOaEBWX77c=
Subject key identifier: A3:DB:73:E8:18:BD:FE:4F:18:D3:CD:AB:AE:2D:29:5A:B5:A7:1C:1D
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018871CE4F1BACE1AE1EC926C9F9F7B327AC
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/o9tz6Bi9_k8Y082rri0pWrWnHB0.roa
Signing time: Wed 31 May 2023 12:35:26 +0000
ROA not before: Wed 31 May 2023 12:35:26 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43072
IP address blocks: 85.133.178.0/24 maxlen: 24
85.133.228.0/24 maxlen: 24
85.133.132.0/24 maxlen: 24
85.133.241.0/24 maxlen: 24
85.133.250.0/24 maxlen: 24
85.133.151.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 17 Jun 2023 08:52:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:71:ce:4f:1b:ac:e1:ae:1e:c9:26:c9:f9:f7:b3:27:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 31 12:35:26 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a3db73e818bdfe4f18d3cdabae2d295ab5a71c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:39:a2:31:09:28:a8:06:de:de:94:8b:9b:fc:
9f:3f:4a:fe:ab:51:1a:bd:53:02:9d:99:d0:f3:0b:
84:40:e0:9a:3c:2a:ae:86:86:6e:0b:6a:63:3f:1f:
0d:ea:22:06:3d:4c:64:63:42:87:4e:8e:a4:44:af:
fe:5b:4e:c1:37:fa:9b:1d:4c:67:ab:79:55:66:3d:
a5:ad:da:f5:f2:24:f8:1e:fc:77:99:c0:1a:b5:76:
60:68:eb:a7:df:af:c2:21:db:65:4f:c0:c7:bb:3b:
92:03:c2:4a:18:93:65:a4:e9:b8:f5:9a:23:df:d0:
0c:3d:13:e6:45:f4:0c:3d:5d:c6:da:84:2f:72:41:
4b:b2:39:e3:f2:7a:cb:a4:ef:9e:d4:b9:ee:d0:4d:
d7:3b:fc:c2:18:e7:29:24:84:09:10:59:59:59:d7:
f9:d5:3e:1a:3a:83:c8:02:77:c0:5b:58:23:0f:bf:
e6:36:ae:64:2e:b8:1b:8c:0f:28:a2:b4:f3:88:9c:
00:bb:e8:95:5c:0f:af:d4:43:98:90:0a:ec:11:6c:
6d:e9:6f:f3:01:9f:04:c0:70:28:80:0e:6d:73:bf:
81:ce:e6:94:d9:ee:a6:e1:ac:63:a2:ce:a2:86:71:
49:b3:04:58:67:fc:33:be:18:50:de:22:8c:20:1f:
e2:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:DB:73:E8:18:BD:FE:4F:18:D3:CD:AB:AE:2D:29:5A:B5:A7:1C:1D
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/o9tz6Bi9_k8Y082rri0pWrWnHB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.132.0/24
85.133.151.0/24
85.133.153.0/24
85.133.178.0/24
85.133.228.0/24
85.133.241.0/24
85.133.250.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:70:cd:64:c3:0e:e8:2a:d2:bc:b9:9d:88:7e:f5:1a:3b:61:
48:c4:1e:5a:fe:82:12:a4:59:c7:6e:a6:f5:43:95:bc:cd:03:
de:d4:45:4b:e0:90:8b:86:0d:e6:f7:ed:d9:dd:c4:b6:db:cf:
9c:91:36:aa:83:f3:c1:c8:87:df:57:a6:79:e1:b3:6b:ba:0f:
53:7d:68:b1:f9:fd:a0:48:91:bb:b4:6f:e7:4f:11:f4:bc:ae:
22:96:84:e4:c6:80:71:74:ee:89:d1:36:00:4f:31:83:ac:d2:
95:18:d4:ee:2a:c8:64:46:ec:2d:3d:eb:13:23:53:2a:c5:c3:
74:40:9e:ee:d7:5b:5e:06:6b:aa:8b:3f:fb:c7:ad:f9:e5:35:
96:86:15:60:34:2a:2c:47:79:f6:c9:9d:24:c2:b4:b2:88:e8:
54:6b:3d:70:94:b1:1e:e4:06:8e:ff:74:f0:e7:a4:fb:5d:04:
e4:40:5e:1e:fa:3d:2d:60:c4:f0:34:6b:98:7d:c7:05:e5:43:
bc:02:c3:a3:b9:98:2e:f2:7e:a0:69:59:71:e7:0d:dc:c2:0b:
bd:01:01:c7:be:53:dd:c6:84:0d:90:7a:ee:d4:09:b6:6a:70:
ad:dc:68:44:21:e8:a6:ed:59:99:60:bb:8d:ad:8a:64:a5:50:
fc:5f:ec:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org