Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qdEi1Y_LEt0HaEzroHZ9aCn8BXw.roa
File: qdEi1Y_LEt0HaEzroHZ9aCn8BXw.roa (raw, json)
Hash identifier: TUOmlgk0OInb6OAGFroYafiZiMjm076GjDX4q0d0hHk=
Subject key identifier: A9:D1:22:D5:8F:CB:12:DD:07:68:4C:EB:A0:76:7D:68:29:FC:05:7C
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018D3B01856EF8EB1D1847A2E43B66A2219C
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qdEi1Y_LEt0HaEzroHZ9aCn8BXw.roa
Signing time: Wed 24 Jan 2024 10:26:11 +0000
ROA not before: Wed 24 Jan 2024 10:26:11 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204834
IP address blocks: 85.133.242.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 28 Jan 2024 18:48:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:3b:01:85:6e:f8:eb:1d:18:47:a2:e4:3b:66:a2:21:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 24 10:26:11 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=a9d122d58fcb12dd07684ceba0767d6829fc057c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:35:9b:09:03:54:d3:79:a4:e4:b7:bd:d2:81:
f5:10:b2:a5:45:34:47:a2:a9:05:5a:7f:07:0e:93:
e9:4d:27:2b:c3:f0:fa:c7:8e:21:3b:b3:46:a6:f4:
49:49:91:3a:20:de:b5:ab:73:6b:6a:61:25:17:67:
75:8e:44:d6:a3:d5:6c:07:43:b0:59:ee:ee:d6:ee:
2a:72:d3:c8:3b:5d:e2:fc:0b:26:c6:1f:b2:6e:eb:
3e:37:48:21:8d:38:c6:80:db:b9:a9:c9:08:da:d1:
74:1c:d7:32:0f:8a:10:aa:29:8b:81:10:3e:0e:dc:
9f:79:9c:36:5e:01:a4:e4:2f:7c:f7:43:46:17:3d:
1c:ed:f7:64:c2:f6:0b:83:37:11:64:85:87:b5:d2:
c0:3f:34:67:0a:34:61:50:53:77:6f:62:83:7d:7e:
57:74:55:da:73:54:f3:db:c6:f5:96:b9:7e:29:4b:
eb:71:e4:d4:e4:40:2f:db:b4:b6:3c:22:d7:99:e8:
4e:2a:f7:63:fd:e2:cf:e5:61:58:3e:76:ed:31:86:
0c:66:23:ba:4d:ab:cf:6f:6a:fd:cf:cb:26:e3:e1:
cb:4c:a1:92:c7:a7:29:32:8b:63:d7:7b:95:3f:6c:
87:4b:cc:c0:1d:80:09:f6:1a:66:88:9b:cb:0b:9f:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D1:22:D5:8F:CB:12:DD:07:68:4C:EB:A0:76:7D:68:29:FC:05:7C
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qdEi1Y_LEt0HaEzroHZ9aCn8BXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.242.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:5e:54:57:79:24:64:e4:b4:33:9a:1a:ef:a3:21:00:08:a0:
a1:db:79:97:4d:99:e7:94:2d:32:1d:fb:5a:de:ae:96:39:32:
64:c6:f5:63:1d:56:a7:98:e8:63:ea:38:7a:ae:2d:26:18:aa:
bd:fc:97:47:31:eb:df:d1:fa:d2:a5:f0:c2:e1:d1:ef:9a:39:
3f:be:a5:25:0a:9c:4f:5b:9a:e5:71:97:4f:38:0d:23:14:ba:
3a:93:9e:02:6c:28:75:29:d0:c2:cd:97:89:1d:11:00:92:0d:
7b:7b:04:ea:de:b5:4e:f5:c6:aa:dd:ac:4f:02:3c:c1:65:20:
34:4a:93:99:d0:08:0e:99:24:34:b7:9a:44:06:aa:9b:d7:0d:
2c:db:a1:97:73:8c:db:7e:f9:99:9a:92:ae:82:c7:de:eb:b9:
63:8e:43:19:9b:29:38:10:b2:7e:77:12:29:97:ec:4a:3a:4f:
b2:8a:07:86:91:82:56:bd:d8:e6:57:7e:59:a8:41:19:f4:c7:
bf:db:ee:9c:9c:cb:65:4a:eb:d8:7d:57:ef:69:67:c0:d6:4c:
82:8d:62:54:ab:76:a0:d8:cd:b2:79:6a:24:30:a3:dd:d5:42:
d8:9b:c1:85:39:43:0e:c4:f7:3d:81:e8:17:d6:62:77:14:19:
ec:cc:0e:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org