Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/H4gGHGYQIZrj0wCE1GIFK5Nlro0.roa
File: H4gGHGYQIZrj0wCE1GIFK5Nlro0.roa (raw, json)
Hash identifier: r+XEn/W680RPwMMMzsqiek8mEGkBF32/+wMDFk6qjhA=
Subject key identifier: 1F:88:06:1C:66:10:21:9A:E3:D3:00:84:D4:62:05:2B:93:65:AE:8D
Certificate issuer: /CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Certificate serial: 01856D81C708A90F25F10D95DD4817C5A6AC
Authority key identifier: EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/H4gGHGYQIZrj0wCE1GIFK5Nlro0.roa
Signing time: Sun 01 Jan 2023 13:24:59 +0000
ROA not before: Sun 01 Jan 2023 13:24:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 210618
IP address blocks: 85.117.238.0/24 maxlen: 32
Validation: Failed, certificate revoked
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:6d:81:c7:08:a9:0f:25:f1:0d:95:dd:48:17:c5:a6:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=effdb33ee5fd522faf0a247e0579bbf1eefce4b1
Validity
Not Before: Jan 1 13:24:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=1f88061c6610219ae3d30084d462052b9365ae8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:b4:f5:39:3d:1a:f3:ae:b0:aa:79:34:ea:43:
56:d9:1d:ba:22:c1:18:f8:57:29:9c:eb:2c:f5:7b:
4f:b0:6b:6a:0d:14:39:2c:05:00:d9:c1:78:8f:08:
89:f0:34:cc:c3:9b:24:88:b3:77:87:76:4b:a9:27:
d3:0d:df:9b:2b:45:16:fa:43:cc:d2:64:f8:ae:a8:
5d:a5:8e:68:39:e9:43:00:5c:2c:58:75:99:9d:d8:
af:a0:8c:01:4d:30:0a:46:ce:45:fe:62:d4:53:68:
53:3f:8f:a7:9b:29:69:4c:6c:f7:73:73:7d:43:75:
95:8a:b9:2d:8d:3b:55:e4:b0:0f:11:a0:d9:be:ad:
cd:cd:2a:7d:55:2e:6b:7d:d0:ae:74:aa:9a:9c:18:
22:23:75:e3:5b:76:fc:5e:c8:14:57:b4:55:29:e8:
4b:9b:52:43:36:ae:62:32:b5:9f:a4:d7:fc:02:04:
de:80:a5:83:2a:76:bc:60:f7:c1:b6:67:d7:a9:f6:
a3:86:9b:e7:02:60:1b:3e:9c:41:a0:fe:5e:b5:fd:
4c:89:76:c9:30:de:9e:ba:75:f9:3a:75:d4:83:5c:
62:7d:39:51:89:44:02:ed:cd:0a:02:53:f3:bd:0c:
da:1e:93:f5:a6:c8:54:7f:60:f9:56:ec:91:ed:61:
b7:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:88:06:1C:66:10:21:9A:E3:D3:00:84:D4:62:05:2B:93:65:AE:8D
X509v3 Authority Key Identifier:
keyid:EF:FD:B3:3E:E5:FD:52:2F:AF:0A:24:7E:05:79:BB:F1:EE:FC:E4:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7_2zPuX9Ui-vCiR-BXm78e785LE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/H4gGHGYQIZrj0wCE1GIFK5Nlro0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/bd24a5-eacd-46e4-b1db-ad73abd00452/1/7_2zPuX9Ui-vCiR-BXm78e785LE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.238.0/24
Signature Algorithm: sha256WithRSAEncryption
c1:e3:e3:ac:22:35:3b:3b:2f:7d:00:ad:4f:2a:44:7a:95:29:
e1:e7:86:1e:c9:44:f3:27:56:25:83:62:bc:78:63:e6:44:c2:
12:ea:ef:92:f9:08:af:92:9a:b5:14:4e:6c:44:c1:e7:87:c2:
0b:f0:58:93:f1:06:e8:b4:69:3b:e2:e9:bf:86:c8:14:c7:7c:
2d:16:38:c8:5e:87:71:cc:38:11:40:af:51:1e:cb:dc:2b:09:
a9:8b:92:a6:b5:b5:92:09:35:69:77:66:9c:d0:8b:22:5f:5c:
cc:c7:d9:36:9f:c0:b8:ed:5e:b0:91:7e:95:6d:76:a8:24:5e:
b9:7f:8f:e6:d6:29:df:d2:95:c3:6a:3c:80:ba:a7:68:10:3f:
e0:55:5d:c7:c0:44:8d:e0:8b:f3:b1:eb:01:ee:72:b6:3f:1e:
44:6e:fc:dd:f7:cc:6b:7e:65:d9:df:5f:d9:66:0f:17:47:89:
3c:2c:4a:7d:e9:14:ef:11:dc:0c:8a:e6:97:31:95:7a:37:94:
36:59:e9:af:32:0e:02:45:8a:f8:aa:14:2d:da:97:83:64:99:
6a:94:16:05:c1:93:5f:ca:21:60:c5:0d:55:f3:cb:23:6e:ea:
65:d5:52:91:99:a1:64:bc:3b:f1:b0:bc:9e:28:c6:9f:07:d9:
f7:48:3f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jan 2 17:36:20 2024 by rpki-client on console-fra.rpki-client.org