Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zDuQFjyDiKftW7rHF28Sty0cEbI.roa
File: zDuQFjyDiKftW7rHF28Sty0cEbI.roa (raw, json)
Hash identifier: qByhQq9wVR5ZIlfLtcPFeMYz0sLVBO9pukiPaDBIW6Q=
Subject key identifier: CC:3B:90:16:3C:83:88:A7:ED:5B:BA:C7:17:6F:12:B7:2D:1C:11:B2
Certificate issuer: /CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Certificate serial: 018B803B0E8591AC8E25857A158F21AEECEA
Authority key identifier: CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zDuQFjyDiKftW7rHF28Sty0cEbI.roa
Signing time: Mon 30 Oct 2023 10:57:15 +0000
ROA not before: Mon 30 Oct 2023 10:57:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 43260
IP address blocks: 85.133.146.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 30 Oct 2023 11:36:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:80:3b:0e:85:91:ac:8e:25:85:7a:15:8f:21:ae:ec:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd5e39658a3ef6f13ca21cc11a4e33ebcd946702
Validity
Not Before: Oct 30 10:57:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=cc3b90163c8388a7ed5bbac7176f12b72d1c11b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:2a:76:2a:43:bb:6a:d4:dc:c1:80:8d:cc:7f:
96:1d:50:ad:bb:da:fa:48:5a:c3:5f:33:7f:cb:ee:
b3:63:9b:1f:ba:43:61:de:67:78:e9:a5:ff:b7:1e:
65:4a:90:2f:f2:77:4d:2c:30:28:c6:ef:6d:d6:26:
89:5a:3f:20:29:ba:54:22:47:dd:69:fc:36:fd:82:
9f:51:7c:90:3d:33:9b:0c:1d:e0:4e:81:62:df:6c:
cc:c6:a6:b2:c2:12:be:ba:b3:d0:1b:48:7f:dc:27:
bb:a1:1d:2b:62:d9:30:93:ad:19:d1:b5:b8:18:b8:
a2:12:06:0d:16:e0:81:94:e0:21:8f:65:f2:0e:a1:
19:66:8c:eb:87:51:0c:ac:68:ff:11:97:ba:81:46:
81:fe:29:80:15:cb:29:56:fb:5e:ab:d6:e3:05:12:
c5:72:29:f6:d5:c2:46:28:08:81:92:3e:16:38:0f:
e7:93:03:5b:17:5c:95:db:63:12:e1:72:21:99:e2:
be:0b:52:3c:95:8f:cf:ec:4d:23:58:4b:9c:a5:42:
35:58:72:f2:9e:81:63:68:55:7b:d8:87:86:a4:c2:
1d:ac:75:db:13:8c:e4:8e:76:37:f2:c5:5b:54:26:
7c:48:e8:67:ae:c8:7b:b7:a5:a0:d2:e9:40:5e:42:
9a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:3B:90:16:3C:83:88:A7:ED:5B:BA:C7:17:6F:12:B7:2D:1C:11:B2
X509v3 Authority Key Identifier:
keyid:CD:5E:39:65:8A:3E:F6:F1:3C:A2:1C:C1:1A:4E:33:EB:CD:94:67:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zV45ZYo-9vE8ohzBGk4z682UZwI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zDuQFjyDiKftW7rHF28Sty0cEbI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ef536c-03d3-4ac5-b125-5d1fa66c363b/1/zV45ZYo-9vE8ohzBGk4z682UZwI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.133.146.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:d6:63:a2:45:eb:6f:b9:42:5d:f4:60:70:63:af:a6:36:3d:
3b:d7:7c:64:49:b1:a4:9d:74:0e:72:be:c2:7c:57:e4:86:52:
bb:48:cb:be:83:4a:e9:52:d3:11:03:24:8c:74:16:29:91:3b:
17:35:0a:73:1a:30:51:7a:3e:dc:1e:f2:51:8d:6d:78:d4:ca:
79:f7:90:ec:cb:50:bc:07:26:f5:b8:7c:2e:c1:c3:b5:39:1b:
1e:24:42:cf:fe:00:70:8e:8e:4d:ee:c7:27:8b:32:f0:2a:1c:
fe:4b:bb:ba:7c:25:b1:bc:2a:7d:8c:e8:8d:42:66:97:d4:e4:
bf:2d:62:3d:cd:e8:61:b3:2e:a1:fa:b9:d8:14:71:c9:e3:c3:
c3:69:ee:e6:5e:d4:2a:eb:89:00:d5:c8:09:0e:f1:10:14:b2:
d6:65:19:84:46:37:74:de:90:ca:fc:23:b3:ac:95:de:4b:06:
ef:9e:ee:09:09:8a:36:b2:bf:09:2c:e0:94:e4:ae:ec:ae:c9:
4a:9e:34:e0:ab:8b:17:32:37:6b:ef:d2:f7:41:2b:5b:94:67:
b2:50:c8:04:c1:f4:b1:9e:9b:c4:ee:15:4e:83:5b:2d:88:ce:
0e:35:94:e2:07:95:63:96:ba:8c:44:67:57:fb:0a:0f:49:ef:
51:79:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:59:13 2024 by rpki-client on console-fra.rpki-client.org