Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sh6TfWu7pwkNpUE8d1nCbpnj44A.roa
File: sh6TfWu7pwkNpUE8d1nCbpnj44A.roa (raw, json)
Hash identifier: 43vPP2W/MQ8FKZJPiOaCjlPoalARv8Tsgc3BETASItk=
Subject key identifier: B2:1E:93:7D:6B:BB:A7:09:0D:A5:41:3C:77:59:C2:6E:99:E3:E3:80
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0186DF9FF5CDCADC523283A458D1F81FA677
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sh6TfWu7pwkNpUE8d1nCbpnj44A.roa
Signing time: Tue 14 Mar 2023 10:17:27 +0000
ROA not before: Tue 14 Mar 2023 10:17:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 400377
IP address blocks: 85.133.236.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sun 14 May 2023 18:35:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:df:9f:f5:cd:ca:dc:52:32:83:a4:58:d1:f8:1f:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Mar 14 10:17:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=b21e937d6bbba7090da5413c7759c26e99e3e380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:05:88:ea:c7:e6:55:c9:fd:61:f0:a4:6a:e5:
4d:ac:a6:f9:68:b4:21:c1:fa:fb:1b:e2:47:bd:ac:
63:2f:3b:23:e2:65:b3:37:8b:a8:ef:f1:a1:78:13:
45:e2:22:dc:bc:58:2a:d1:4d:d2:ca:b5:86:96:69:
7e:ca:d3:f5:41:e2:08:8d:a8:b5:31:40:03:08:bb:
f8:66:98:2b:fe:a1:09:47:da:c0:c1:e0:53:14:a6:
a9:4b:dd:52:1a:33:3f:34:b9:a9:f2:5b:9b:51:3e:
cb:8f:8f:4b:22:d0:fa:50:df:dc:3a:f4:cd:23:84:
8d:22:f5:53:5a:64:7f:e8:af:80:33:57:fe:54:a4:
4d:1f:9a:f1:33:f1:0a:a1:4a:4d:3a:fe:50:84:f8:
c0:da:6f:73:02:b5:48:82:d0:c0:86:02:44:4e:0a:
0b:ad:e5:78:4b:70:68:81:83:af:8f:cf:7b:ef:9d:
58:9e:86:b4:6c:4f:ff:3a:a2:3f:43:12:ee:6a:dc:
f5:18:d1:80:9e:52:f0:7c:25:d4:4b:95:8b:04:e8:
a5:5e:55:73:72:42:33:8d:de:36:3c:a2:c2:66:93:
12:ba:30:36:37:ec:73:aa:36:b2:27:b6:71:93:81:
6f:4f:c1:9c:12:d3:c7:93:cb:fe:84:a3:54:bc:ab:
d6:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:1E:93:7D:6B:BB:A7:09:0D:A5:41:3C:77:59:C2:6E:99:E3:E3:80
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/sh6TfWu7pwkNpUE8d1nCbpnj44A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.236.0/24
Signature Algorithm: sha256WithRSAEncryption
68:c4:c5:95:26:28:ba:fe:6c:a7:3d:d0:8e:ff:dd:31:c5:61:
23:8e:a8:d9:fd:81:21:6f:8a:c9:3f:b5:68:4b:2d:83:70:2c:
6b:0d:81:31:9c:da:b5:70:4e:01:1f:14:f5:56:17:59:ac:3f:
98:2d:01:4f:31:f4:02:f3:d6:f3:5f:4c:e2:52:d3:2e:18:f7:
d4:bc:69:62:b9:91:fd:df:39:86:51:29:9b:84:6f:81:19:bf:
01:29:db:a5:2c:19:e5:0e:65:79:78:fe:b1:fd:cc:79:26:b8:
c7:54:5d:45:8c:ff:5f:59:d2:e0:9a:8a:c7:86:d2:21:48:53:
0b:ed:b7:d1:f3:05:cc:1b:1f:45:f0:cf:d5:32:78:d0:c2:7b:
24:b4:66:81:fe:b2:84:7e:4e:b1:a2:56:d7:09:88:24:0d:23:
eb:e6:d7:bf:bf:d9:27:21:9d:1b:f9:00:8e:bb:89:db:30:3d:
e3:b4:6a:a8:4c:44:d6:34:3c:70:08:5f:b9:d7:d1:58:30:50:
a6:78:ac:33:7d:c4:f9:57:da:86:13:9f:fd:08:8e:3f:62:5e:
32:12:c6:08:1b:09:79:ab:2f:27:1c:d2:01:7f:69:bb:b4:d7:
dd:37:3d:53:59:52:e4:36:3c:b6:28:8d:f1:ac:e7:02:4b:e2:
f4:36:96:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org