Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vU81f5KHkHjkdAhXQqHOUoTQ5V8.roa
File: vU81f5KHkHjkdAhXQqHOUoTQ5V8.roa (raw, json)
Hash identifier: B+xYCKVdeitRd8nO/YEime77KwFCFojgyG/74CsVSiI=
Subject key identifier: BD:4F:35:7F:92:87:90:78:E4:74:08:57:42:A1:CE:52:84:D0:E5:5F
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 01881FD1035327EE29010A1B6362513BEE16
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vU81f5KHkHjkdAhXQqHOUoTQ5V8.roa
Signing time: Mon 15 May 2023 14:29:31 +0000
ROA not before: Mon 15 May 2023 14:29:31 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.219.0/24 maxlen: 24
85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Tue 16 May 2023 17:23:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:1f:d1:03:53:27:ee:29:01:0a:1b:63:62:51:3b:ee:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: May 15 14:29:31 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=bd4f357f92879078e474085742a1ce5284d0e55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6c:d3:0b:a0:2b:e2:8e:e9:f8:18:b6:37:7c:
7e:42:08:17:10:68:27:ed:df:78:47:24:d4:ca:73:
9b:91:c9:45:45:96:8a:b0:0f:69:2c:24:34:a5:23:
ed:96:47:4c:77:85:d2:60:a5:de:84:cd:a6:cc:43:
57:41:ec:fc:df:4b:e0:67:c3:11:ba:86:00:b1:d2:
ed:0c:ba:8f:6a:eb:77:1b:c3:ef:06:42:cb:68:89:
d6:ed:f9:54:e3:6f:f2:ee:3a:5d:5d:61:11:05:99:
18:18:8e:e2:14:85:32:85:4b:34:9d:b0:31:e9:be:
b3:be:0c:c9:72:5b:b8:31:05:74:30:d3:66:00:e3:
b4:9c:48:86:87:ba:6a:29:a3:29:ce:f2:2f:4d:ec:
39:b7:17:35:23:92:51:87:82:18:1b:fd:6d:d1:65:
6b:4a:cd:f7:7a:b5:d9:f7:40:7d:46:d4:91:38:6b:
cb:d9:37:2d:ba:d1:73:0b:bd:42:90:87:9d:4f:1b:
13:78:c5:06:6e:2d:5c:33:4c:eb:b2:8b:f6:5b:ad:
2a:b5:45:92:35:37:81:03:76:8b:01:0f:87:09:82:
24:f5:ae:dc:d6:43:90:69:9f:3a:b7:91:ef:cf:11:
b6:4b:b0:07:04:68:a5:09:b5:87:bd:0b:53:60:4d:
c7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4F:35:7F:92:87:90:78:E4:74:08:57:42:A1:CE:52:84:D0:E5:5F
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/vU81f5KHkHjkdAhXQqHOUoTQ5V8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
85.133.219.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:78:fa:ef:95:66:d9:f2:07:c1:5f:b9:93:19:0d:1f:3e:ef:
bd:dd:b3:c7:f9:12:9a:af:ee:42:ab:7f:ee:c8:42:8a:02:9a:
c3:d4:dc:06:56:a6:22:ad:32:6d:aa:b0:05:fb:9d:9e:da:2f:
d7:a7:82:c5:23:9e:2e:67:be:32:f7:f2:a3:ae:95:02:54:d2:
94:74:d4:8e:1b:51:30:a7:b5:4e:30:ee:48:32:31:fe:0f:f9:
ee:72:82:96:fd:15:eb:0f:8d:2b:ad:bb:38:14:f7:41:cf:61:
70:0d:98:e6:db:71:75:6b:95:f9:2f:e8:b9:68:86:02:6c:95:
07:b5:06:40:0c:6b:bd:e3:ac:65:b8:98:c4:83:d3:de:bd:fa:
77:ce:fd:8e:09:e8:9f:61:b2:26:25:e2:c1:2f:2f:51:eb:a4:
15:ba:2e:63:21:47:20:e3:ea:16:22:a5:6c:67:78:28:dc:07:
a3:9b:69:57:53:60:b5:93:93:17:a0:e1:1e:24:c2:3b:d3:07:
cb:38:ac:8d:45:82:83:46:ae:73:94:6f:30:55:76:ee:7c:19:
b0:3c:3c:23:0a:36:51:c3:13:0a:61:0e:63:be:3e:62:96:1e:
b3:9b:da:56:ca:7b:9f:65:ca:a2:24:df:ae:e2:3b:6e:91:84:
37:4d:2a:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org