Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tHUcqRlDmlOvJIZZdR2y4xmGTeA.roa
File: tHUcqRlDmlOvJIZZdR2y4xmGTeA.roa (raw, json)
Hash identifier: ggFhagEltSNnE3wSibPytfB2nHV5IM9bfq+g+yAcAv8=
Subject key identifier: B4:75:1C:A9:19:43:9A:53:AF:24:86:59:75:1D:B2:E3:19:86:4D:E0
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018DA16279973BD147D76D6337578BED4297
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tHUcqRlDmlOvJIZZdR2y4xmGTeA.roa
Signing time: Tue 13 Feb 2024 07:33:21 +0000
ROA not before: Tue 13 Feb 2024 07:33:21 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 34412
IP address blocks: 85.133.156.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 29 Mar 2024 13:06:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:a1:62:79:97:3b:d1:47:d7:6d:63:37:57:8b:ed:42:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Feb 13 07:33:21 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=b4751ca919439a53af248659751db2e319864de0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:1b:d1:70:75:8b:95:5d:49:64:67:36:61:03:
1e:cf:4e:54:aa:e7:ea:cc:d1:24:5b:e3:8b:0a:90:
14:45:99:6e:34:c4:a9:f5:27:34:eb:45:9d:f7:7a:
aa:32:c3:6e:ab:ba:1c:03:da:c1:fd:9d:8d:96:29:
f9:26:12:c5:d3:be:16:13:d9:da:57:a5:d4:79:f6:
99:71:0c:19:e0:a2:f3:02:a6:9e:90:1f:c3:68:f5:
90:6f:63:fc:e7:50:cb:4c:80:91:57:54:5e:fb:ad:
fc:25:7c:1a:a0:ae:b2:6b:d6:54:54:5a:bd:80:cf:
b2:2a:94:08:b1:e9:31:92:24:af:3b:9c:8c:9f:3a:
0b:ab:5c:04:27:5c:56:63:79:49:2b:94:3d:ab:00:
2e:60:a4:f9:41:ab:bc:9d:c5:0b:35:db:55:54:0c:
af:d7:4f:85:1c:d6:f4:a4:68:71:d6:ec:82:50:55:
50:17:d2:e0:18:57:d6:35:19:f9:d2:87:af:0c:ca:
da:5d:b3:ca:20:62:60:03:96:91:ff:3f:dd:53:49:
c9:fc:bd:bb:48:dc:b5:d8:43:c8:ca:00:0e:ca:4a:
63:00:a6:f3:e6:87:dd:0c:53:db:47:c7:df:6e:2d:
b9:aa:91:15:c8:0a:aa:4d:e1:67:eb:cd:6e:0f:31:
28:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:75:1C:A9:19:43:9A:53:AF:24:86:59:75:1D:B2:E3:19:86:4D:E0
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/tHUcqRlDmlOvJIZZdR2y4xmGTeA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.156.0/24
Signature Algorithm: sha256WithRSAEncryption
12:e3:3d:07:f9:a9:45:ab:ce:6d:b3:76:88:14:33:5d:7c:94:
74:6c:e1:de:96:2f:77:47:20:c1:11:8f:87:3c:8e:c2:e1:92:
eb:37:bb:96:64:f1:5c:73:8d:de:87:86:56:64:d9:24:a0:18:
6f:6a:eb:3f:de:ab:fa:8b:18:86:9d:86:93:48:fe:69:64:01:
e3:46:bc:cc:99:b6:79:93:13:49:a6:db:c5:c0:2b:0f:fb:d7:
3f:2f:22:7c:c2:06:9e:2c:d2:a7:ad:45:0f:26:18:3f:de:fd:
89:ac:4f:16:49:ce:75:6f:45:12:ae:bb:03:27:43:93:f7:13:
5d:92:07:f3:bd:44:d9:d3:27:96:42:40:c4:20:a0:f5:ae:2f:
0f:b3:8f:70:25:b4:62:a3:77:c2:50:fe:1d:0e:a8:ef:32:f0:
24:0a:af:b1:0a:e6:ea:7c:bb:07:47:ce:d4:e9:2f:37:89:78:
38:c4:10:d0:0c:d9:81:12:ed:20:36:23:6d:e2:93:84:2c:1c:
0b:59:9a:5b:89:c1:f2:a9:52:88:63:7f:09:77:40:7f:be:60:
2e:e0:e5:87:91:5a:bc:f4:dd:16:51:80:c2:f5:64:9a:b8:73:
93:60:3a:a6:70:cc:9a:2f:33:18:5c:85:80:4a:db:10:ec:b4:
9b:fa:26:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:52:02 2024 by rpki-client on console-ams.rpki-client.org