Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qjHm2tYSl71wwil_2__g3pxifzQ.roa
File: qjHm2tYSl71wwil_2__g3pxifzQ.roa (raw, json)
Hash identifier: /sxMOjyaZ/xIw4IyMJ9WW9Xabh+3GVtw7TnMC1Q0fao=
Subject key identifier: AA:31:E6:DA:D6:12:97:BD:70:C2:29:7F:DB:FF:E0:DE:9C:62:7F:34
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018DA3129A3C54D700F0A7E16D4AD95B8D73
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qjHm2tYSl71wwil_2__g3pxifzQ.roa
Signing time: Tue 13 Feb 2024 15:25:21 +0000
ROA not before: Tue 13 Feb 2024 15:25:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 15828
IP address blocks: 85.133.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 18 Feb 2024 07:34:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a3:12:9a:3c:54:d7:00:f0:a7:e1:6d:4a:d9:5b:8d:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 13 15:25:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=aa31e6dad61297bd70c2297fdbffe0de9c627f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:80:58:32:76:cc:67:45:53:ec:9e:d2:37:55:
54:78:a0:9a:25:d5:ad:9a:47:4d:76:bf:c2:c7:e2:
f4:3d:b0:8a:0f:d5:66:07:e8:2c:61:ca:f7:fd:9c:
39:ad:76:d6:2f:44:a2:29:f6:b2:ff:c3:8e:30:42:
06:68:97:28:48:e6:85:ac:4b:d8:76:fc:14:f6:4b:
1c:d8:f6:64:07:98:36:ae:5d:4d:59:4f:58:6f:31:
62:4e:3e:c9:62:c4:15:a1:4f:7b:d1:7d:23:8b:70:
b4:98:b5:e9:81:71:1d:90:dd:06:97:01:8f:1b:2b:
e7:23:6a:17:86:da:75:e4:d2:f5:ae:b1:da:68:69:
3d:87:5e:93:fc:3b:f9:b6:a8:e3:e0:5d:df:47:02:
ea:11:3a:5e:12:bb:b4:72:a1:83:2f:7a:11:72:c2:
6a:2e:66:f9:65:94:38:8b:68:85:1d:e3:6c:d4:87:
d0:1a:0a:aa:36:7f:6c:e3:c5:16:37:64:f1:9a:7a:
f1:83:ee:d9:1f:d7:22:a0:d8:f5:fb:d2:4a:bc:e6:
d1:1a:3c:fb:96:c3:1e:f8:88:8d:b2:ee:ef:a6:a8:
14:20:9f:f9:07:8b:fe:f7:4e:12:42:84:37:f8:c9:
cd:4d:04:32:78:bf:6f:f3:97:38:4b:17:02:9a:ac:
db:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:31:E6:DA:D6:12:97:BD:70:C2:29:7F:DB:FF:E0:DE:9C:62:7F:34
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/qjHm2tYSl71wwil_2__g3pxifzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.204.0/24
Signature Algorithm: sha256WithRSAEncryption
91:fc:aa:42:c1:fe:16:03:be:18:5d:b9:c9:1c:60:a5:5d:d0:
ce:08:05:b2:13:95:38:a4:7a:c8:f7:09:ba:33:69:57:de:3e:
0c:e6:46:a0:3c:48:d8:95:49:a6:ea:65:52:33:e8:6c:21:f0:
b4:68:72:21:00:92:ac:36:b4:62:2b:c2:d5:da:33:7a:ba:1b:
e0:d3:84:87:18:03:ec:89:ab:b9:bf:ec:01:bc:14:44:56:dd:
87:81:65:17:47:03:a7:87:fe:59:96:99:6b:51:a2:d0:05:45:
f2:79:59:ae:8f:67:38:4c:db:0e:5e:30:33:7d:c6:5a:a0:3a:
a0:df:80:60:79:4d:54:8b:9a:26:24:47:ed:a1:c6:93:05:e1:
7e:4b:23:90:43:71:55:db:e6:e4:0d:fb:72:3c:ff:aa:1a:99:
47:29:fc:63:89:16:03:f8:d6:18:79:ab:3f:a3:4e:2d:50:fb:
2e:e8:31:b2:6e:c6:ba:a5:12:09:81:1a:a5:aa:ab:11:49:55:
3a:90:e1:8d:6f:ba:34:87:a3:ee:aa:be:22:27:27:c1:cf:65:
8a:a0:61:2d:48:d1:17:95:26:17:b9:20:e1:15:51:2c:f2:1e:
35:b1:cb:df:69:9f:f7:37:57:ec:fb:0e:83:ca:cb:8d:92:d4:
4e:81:58:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org