Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa
File: xVU-upMRFCGYFNTgw9SRm2JMRWI.roa (raw, json)
Hash identifier: cxcVrIGNNTBPqOumybfBtNrGc5wS+BFxJC+Y0+aC+rg=
Subject key identifier: C5:55:3E:BA:93:11:14:21:98:14:D4:E0:C3:D4:91:9B:62:4C:45:62
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 0189067414FA4C4510E1D2F55F892B29C2F0
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa
Signing time: Thu 29 Jun 2023 09:20:18 +0000
ROA not before: Thu 29 Jun 2023 09:20:18 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207084
IP address blocks: 85.133.199.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 15 Jul 2023 12:14:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:06:74:14:fa:4c:45:10:e1:d2:f5:5f:89:2b:29:c2:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Jun 29 09:20:18 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=c5553eba931114219814d4e0c3d4919b624c4562
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:94:7c:d8:82:6a:48:b5:48:6a:ad:04:19:74:
06:d3:7b:75:8b:79:04:38:85:b4:09:2a:d1:5a:98:
40:af:8f:6b:77:44:f8:96:75:c3:2b:2b:6b:5f:d9:
ea:26:d0:36:f4:8e:e5:ed:c2:83:f4:e9:7c:cb:30:
64:ba:75:0c:67:e5:24:84:77:91:42:43:b7:08:91:
e7:1f:74:e1:e5:30:79:d0:1f:52:76:f6:4d:86:df:
9f:87:9e:59:53:87:d3:a9:45:23:b0:72:43:13:25:
33:e6:58:5e:ac:40:67:bd:c4:86:ab:d4:cb:bb:b8:
c6:47:44:3d:c0:62:ec:0b:e0:88:f3:7c:de:3a:ff:
10:52:cc:3f:4f:98:0f:41:53:d7:d5:92:a6:cd:55:
c0:06:54:d6:24:f5:3a:2c:34:a1:ca:e1:f7:11:e6:
d4:7d:ed:fb:bd:f9:56:11:50:36:4d:b1:58:0b:65:
5a:5a:2e:8e:8e:a7:37:9e:16:7a:6e:c5:0d:b6:00:
7b:61:07:b3:6f:5e:a1:b9:50:4a:3d:3c:26:31:ee:
47:43:47:c5:dd:52:c2:70:3f:93:c3:17:35:86:04:
d8:b4:ef:00:39:9b:ac:75:8c:1d:bd:e7:c4:f2:9c:
86:9e:8e:1f:a8:03:a2:4c:ce:bf:15:be:ed:fd:6b:
cc:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:55:3E:BA:93:11:14:21:98:14:D4:E0:C3:D4:91:9B:62:4C:45:62
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/xVU-upMRFCGYFNTgw9SRm2JMRWI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.199.0/24
Signature Algorithm: sha256WithRSAEncryption
43:67:98:b7:50:d1:81:f6:16:0d:7d:26:78:ac:54:7c:e1:03:
94:f3:6d:cf:68:24:3e:ca:32:df:36:c0:bf:fd:38:80:70:01:
c5:58:1f:a7:50:6f:c1:6f:f2:2f:1e:a8:e7:d8:86:72:d6:37:
f4:b8:74:7c:a0:18:da:ba:2c:0f:ad:db:26:0a:a2:88:1c:aa:
0d:44:a7:97:22:c3:f0:2e:8c:11:a6:33:5d:07:60:50:2d:4c:
f4:d1:97:02:82:12:2c:ca:de:6c:e2:f3:4c:ad:be:5e:7f:fa:
9d:98:da:16:5e:cb:7c:8c:77:90:d8:e1:43:cb:c9:76:e6:d0:
67:72:2a:ad:eb:50:23:e4:36:0e:a0:fd:9a:54:62:e8:00:c2:
b9:0a:fc:3e:bb:2b:92:0a:4f:dc:87:39:e6:69:97:f8:99:ad:
2b:61:0d:f7:22:88:2b:ea:a7:e4:a7:f8:03:47:6a:08:f9:cc:
8f:08:73:b9:39:38:29:b3:6a:1e:fa:31:58:b5:33:7a:54:e0:
2b:12:31:5c:81:8f:14:f1:8d:9e:0e:e8:42:03:de:80:de:2b:
d3:df:e2:dd:7b:8c:ab:a6:6b:ad:d8:f3:d4:ef:77:45:bb:0c:
ce:af:47:0e:8c:46:bd:de:f2:81:1f:30:19:0b:b9:a9:19:64:
25:86:d2:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org