Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rBjlzwPsRlL7cvOdR3_CKasrSNY.roa
File: rBjlzwPsRlL7cvOdR3_CKasrSNY.roa (raw, json)
Hash identifier: TdankKlA9pEnkd5upJ+fVjn4k3fjlIzeJyQCg9WyMQI=
Subject key identifier: AC:18:E5:CF:03:EC:46:52:FB:72:F3:9D:47:7F:C2:29:AB:2B:48:D6
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018CDEB625A6E3BA2A66E4AC46EAF6704F88
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rBjlzwPsRlL7cvOdR3_CKasrSNY.roa
Signing time: Sat 06 Jan 2024 12:18:48 +0000
ROA not before: Sat 06 Jan 2024 12:18:48 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 201194
IP address blocks: 85.133.205.0/24 maxlen: 24
85.133.204.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 06 Jan 2024 14:37:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:de:b6:25:a6:e3:ba:2a:66:e4:ac:46:ea:f6:70:4f:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jan 6 12:18:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=ac18e5cf03ec4652fb72f39d477fc229ab2b48d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:97:5d:c1:61:13:cd:c9:01:a8:c2:88:0b:1c:
9e:73:16:98:a4:98:4e:74:bc:ae:80:0d:fc:b8:01:
5e:80:59:84:04:7a:50:d4:0b:01:5d:b9:6f:16:e4:
8e:46:6e:96:24:87:07:d2:45:4c:6d:81:09:3f:b9:
a6:3c:aa:6a:c5:96:c6:8c:8c:c3:81:41:14:e6:c2:
47:ce:71:ab:6f:9a:af:c5:84:5a:fa:19:83:e9:f1:
33:2f:6c:4e:45:30:0f:ee:45:ea:da:bf:8c:fd:2f:
3f:fb:18:ea:ed:fe:3a:2a:f7:1c:6d:ac:40:74:40:
21:9c:6e:d6:b4:c8:be:fc:08:e6:37:ea:55:86:23:
ec:6c:82:41:d4:d8:71:46:96:80:7b:04:9f:a8:60:
fc:79:b6:2b:f2:22:39:e7:9c:b3:e6:8d:8e:c4:ff:
83:88:5f:bb:b7:80:f6:51:a6:90:4e:6f:29:d7:1c:
87:85:99:a5:89:5c:93:5f:57:d8:03:b0:fa:34:e4:
8c:5c:c7:eb:65:a7:92:48:8d:e2:ae:32:d2:99:16:
6e:32:98:c8:0a:5a:c5:08:46:64:58:26:ad:e6:3a:
34:49:f3:34:0a:87:25:56:ef:24:c3:2e:b1:a1:2f:
86:4b:2b:a8:9f:d1:b5:21:6a:86:8a:db:98:ba:af:
9d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:18:E5:CF:03:EC:46:52:FB:72:F3:9D:47:7F:C2:29:AB:2B:48:D6
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/rBjlzwPsRlL7cvOdR3_CKasrSNY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.204.0/23
Signature Algorithm: sha256WithRSAEncryption
28:20:3d:89:0d:93:da:fc:a0:21:76:28:c2:72:92:07:d3:0d:
91:62:ea:4d:6c:53:29:07:95:3c:dc:94:be:16:b5:62:45:42:
3d:91:9f:ee:ff:af:6a:ce:b3:a4:29:71:ee:6e:c6:40:36:1c:
a2:08:39:e6:ec:07:24:d8:a7:c2:bb:d1:c3:dd:6b:3c:04:51:
d7:52:f7:8c:a0:97:5d:73:9e:c4:6d:00:53:8f:79:44:75:ec:
c2:85:5a:21:a3:3f:d3:cc:40:50:f0:e1:62:80:55:e3:89:0c:
06:14:74:c7:20:e5:35:36:9e:3a:fc:a8:58:fc:04:cb:13:4b:
b3:a1:1f:d7:ce:0b:c7:bb:ce:0b:15:ac:e6:dc:93:20:ff:1d:
af:76:c4:9f:09:3c:52:58:c1:fc:17:25:13:07:3a:d3:ec:c8:
1b:54:1a:96:75:88:99:15:59:42:f4:e8:5b:2b:8c:aa:be:94:
d7:1c:65:e8:28:f7:4a:f0:96:2c:d6:59:94:a1:5c:7c:8e:66:
60:8a:20:8b:ff:c7:53:58:58:4c:ad:f1:82:94:21:ab:47:ef:
e1:5a:73:06:1f:ce:92:e1:7d:a9:0c:3d:93:f4:e6:41:ed:59:
a3:71:da:f3:77:fb:96:51:a0:ac:34:38:13:ab:14:2e:c9:f5:
20:bd:a5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org