Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/v2FFii4n_B7HoeiWrsrJTrLXxF8.roa
File: v2FFii4n_B7HoeiWrsrJTrLXxF8.roa (raw, json)
Hash identifier: Hwpj3JCYxbx/tBsFIwrXAfF3SXHZDuKlL6b+ExiNR5A=
Subject key identifier: BF:61:45:8A:2E:27:FC:1E:C7:A1:E8:96:AE:CA:C9:4E:B2:D7:C4:5F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018FEEA8C04892A5A5F28F37965992E70111
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/v2FFii4n_B7HoeiWrsrJTrLXxF8.roa
Signing time: Thu 06 Jun 2024 17:46:27 +0000
ROA not before: Thu 06 Jun 2024 17:46:27 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 48147
IP address blocks: 85.133.137.0/24 maxlen: 24
85.133.153.0/24 maxlen: 24
85.133.178.0/23 maxlen: 24
85.133.241.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 03 Aug 2024 17:48:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8f:ee:a8:c0:48:92:a5:a5:f2:8f:37:96:59:92:e7:01:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 6 17:46:27 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=bf61458a2e27fc1ec7a1e896aecac94eb2d7c45f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:6e:60:41:94:9d:13:b8:ed:8c:fc:57:53:26:
cd:e7:21:28:6c:0e:54:12:65:cd:de:5d:a7:2f:e0:
e0:da:f4:73:bf:14:b3:a6:0e:5d:2e:b7:ba:90:69:
4d:61:e2:d7:c2:a5:8e:a1:f5:47:63:de:5f:fc:2b:
31:a1:e3:f5:d1:21:f3:f4:63:c9:20:d7:ea:fe:27:
92:6e:14:9d:9c:84:09:45:d0:0a:55:1c:ad:aa:49:
b5:cf:19:75:b1:cb:e6:9d:c4:a5:be:6f:5f:b1:79:
16:35:cf:c0:54:7f:66:6d:42:b6:3c:5c:df:25:ba:
64:ac:9f:4b:d1:0c:54:5a:8a:57:cd:32:14:01:a0:
bf:7a:51:d3:90:3b:3b:18:30:aa:1a:a8:5c:98:19:
86:f5:01:36:58:2b:83:9c:e9:d6:5d:2b:b1:04:e9:
c0:99:32:3b:0b:de:7c:e4:f7:14:b6:90:1c:7d:62:
52:f3:8a:1f:54:2d:d4:db:7e:6e:a8:0c:d8:46:f0:
62:db:de:f8:02:5c:11:5a:85:90:6f:4e:7e:53:64:
77:60:41:d8:3c:0b:30:bf:a6:3f:55:5a:df:56:47:
4b:4f:a7:a8:80:5f:04:ad:b5:ef:32:4a:b5:65:52:
77:c6:9f:e3:70:fe:ee:3c:19:8a:e9:c3:35:de:f4:
1e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:61:45:8A:2E:27:FC:1E:C7:A1:E8:96:AE:CA:C9:4E:B2:D7:C4:5F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/v2FFii4n_B7HoeiWrsrJTrLXxF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.137.0/24
85.133.153.0/24
85.133.178.0/23
85.133.241.0/24
Signature Algorithm: sha256WithRSAEncryption
50:da:82:0a:e9:b9:28:ec:56:79:40:16:76:a1:c0:1a:03:d8:
30:bb:9c:39:a1:48:27:80:19:4b:f5:91:cf:c3:00:87:0c:89:
3f:14:c3:c4:b5:0b:ad:b1:d7:bc:ab:da:0c:98:fa:23:89:90:
f9:f6:7c:a7:40:9a:b6:c6:ba:4e:56:7e:ff:e8:d0:5e:8a:57:
47:5b:31:9f:b5:c2:37:e7:39:f4:53:0b:b9:72:3c:3a:99:8b:
a1:5b:38:3c:b7:f9:f0:36:ce:42:e1:39:0d:28:f4:93:96:3a:
31:50:e5:91:b3:5c:22:72:d7:04:ac:99:ce:08:f9:d4:c0:a7:
c0:27:23:ec:f5:b7:5a:d6:41:af:73:47:00:fd:f0:2d:6e:8a:
d3:47:f4:06:09:52:97:bd:e5:1d:ad:41:42:91:59:24:e8:f0:
f8:f8:25:c3:f6:db:66:65:8a:d4:27:ae:2e:10:37:44:d9:83:
71:22:23:a4:39:b2:11:28:5e:40:1d:4b:fd:37:2a:71:55:9e:
06:d1:a7:ef:0a:09:20:07:b3:ba:3a:4c:41:46:65:9d:8f:77:
17:50:65:d8:b0:0c:58:c6:02:ad:f6:03:30:a7:59:b2:b1:80:
e5:df:ba:cd:73:dc:7b:4d:ee:f5:47:69:a9:6e:dd:61:cc:55:
4e:4c:17:28
-----BEGIN CERTIFICATE-----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Generated at Sat Aug 3 18:59:18 2024 by rpki-client on console-fra.rpki-client.org