Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s_c-GMmvwHJLPhzXUJulJkOq80E.roa
File: s_c-GMmvwHJLPhzXUJulJkOq80E.roa (raw, json)
Hash identifier: cHlJzMLbUbB25ooxHw+xv5sa3aY5jaeBGDUefr1e11U=
Subject key identifier: B3:F7:3E:18:C9:AF:C0:72:4B:3E:1C:D7:50:9B:A5:26:43:AA:F3:41
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0190FD16BF8181500D7DD8CC7218D8CBE774
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s_c-GMmvwHJLPhzXUJulJkOq80E.roa
Signing time: Mon 29 Jul 2024 06:04:04 +0000
ROA not before: Mon 29 Jul 2024 06:04:04 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 204203
IP address blocks: 85.133.206.0/24 maxlen: 24
85.133.217.0/24 maxlen: 24
Validation: Failed, certificate revoked on Wed 31 Jul 2024 07:41:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:90:fd:16:bf:81:81:50:0d:7d:d8:cc:72:18:d8:cb:e7:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jul 29 06:04:04 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b3f73e18c9afc0724b3e1cd7509ba52643aaf341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ae:7c:71:9c:ec:fe:53:13:fc:90:3a:87:aa:
22:b7:fd:a9:d5:05:f1:91:f7:0c:c7:ba:aa:86:47:
09:55:12:63:d7:67:1a:a4:aa:8f:c3:75:d5:11:1d:
77:68:b8:c3:04:34:79:45:8e:40:2d:6d:ea:ed:3e:
11:41:57:c6:71:92:63:8d:b8:f0:71:27:c5:b2:bc:
48:05:59:1f:5f:88:76:06:67:62:29:72:92:54:36:
1e:ac:47:89:5f:05:fb:e0:9b:9f:e3:cf:38:27:58:
a8:55:55:64:19:af:96:3c:cb:f6:c0:bb:2e:98:22:
d1:71:2a:49:94:2b:9c:73:76:64:59:4e:e7:ca:54:
b2:e1:f3:42:5e:9f:ba:02:0f:64:69:66:e4:eb:fb:
ae:8a:aa:26:42:77:b1:c5:e0:a0:e5:8e:c3:7e:37:
8c:ba:2e:06:f0:14:d3:04:7f:6f:ba:1f:ab:1a:85:
e8:d7:29:4c:c8:3e:ed:9e:1d:d7:e4:0f:a7:01:d0:
63:b5:12:c1:a8:7a:36:95:a0:0b:ad:fa:48:e8:81:
3e:8a:f4:0c:39:f6:8d:1a:04:82:2e:03:fa:4c:dc:
fd:18:d6:78:08:06:0d:1b:b7:cf:5c:48:92:64:2f:
dc:d1:65:69:eb:86:5f:be:a1:ce:88:ca:70:cc:dd:
4c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:F7:3E:18:C9:AF:C0:72:4B:3E:1C:D7:50:9B:A5:26:43:AA:F3:41
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/s_c-GMmvwHJLPhzXUJulJkOq80E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.206.0/24
85.133.217.0/24
Signature Algorithm: sha256WithRSAEncryption
35:5d:64:fc:91:26:55:20:9e:64:aa:c3:7b:ae:a8:c3:db:54:
95:52:01:58:33:3b:39:eb:61:c3:c4:c6:be:34:f6:c9:07:58:
a6:d8:5c:4c:7a:fa:9e:fd:11:74:07:d8:2b:2b:73:10:ce:c9:
68:fb:1a:87:3c:2d:27:2d:b8:3f:2b:2d:52:87:e4:cb:de:2c:
68:e3:1d:52:32:2a:ce:4f:86:f9:4b:06:2d:a0:28:f8:e3:8d:
c3:9e:83:82:fc:23:96:38:1d:2b:31:27:4f:3f:d6:6a:3a:85:
08:f1:62:6d:66:83:ca:2b:0a:05:e6:56:a9:09:ce:62:95:f4:
77:0c:46:bc:84:37:e6:22:ad:46:81:52:73:56:2b:18:70:93:
ab:39:ed:b6:f9:4d:8a:6e:b5:d6:cd:9b:d5:0d:71:ff:a8:88:
c5:08:88:4b:04:24:78:57:f4:0a:32:39:63:22:8d:29:ac:58:
ef:58:02:6a:30:df:64:eb:fe:a0:ac:bf:23:fb:af:40:c7:5d:
1c:2e:d2:bb:a1:2d:e2:60:ad:ec:c1:d7:80:e7:17:38:5f:fa:
81:91:e6:bc:cd:04:ba:ba:a5:35:94:c1:22:9b:2f:93:43:9f:
5c:c5:d1:1c:50:3d:90:3f:48:ec:56:34:90:ef:8f:bd:2d:15:
db:11:7b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 31 10:33:50 2024 by rpki-client on console-fra.rpki-client.org