Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-SdPQBKxA_5Ud7ZH_QuGpS5xPHo.roa
File: 1-SdPQBKxA_5Ud7ZH_QuGpS5xPHo.roa (raw, json)
Hash identifier: lUaaY9neqgwG3fsf/80eErGBFZcLoJr6hwg54QJ4QlI=
Subject key identifier: F9:27:4F:40:12:B1:03:FE:54:77:B6:47:FD:0B:86:A5:2E:71:3C:7A
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 018B61D8BD2A63C13E4EC6A02B8F4B242EB3
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-SdPQBKxA_5Ud7ZH_QuGpS5xPHo.roa
Signing time: Tue 24 Oct 2023 13:21:15 +0000
ROA not before: Tue 24 Oct 2023 13:21:15 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 64267
IP address blocks: 85.115.209.0/24 maxlen: 24
213.145.75.0/24 maxlen: 24
Validation: Failed, certificate revoked on Sat 04 Nov 2023 09:47:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:61:d8:bd:2a:63:c1:3e:4e:c6:a0:2b:8f:4b:24:2e:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Oct 24 13:21:15 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=f9274f4012b103fe5477b647fd0b86a52e713c7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c4:3d:a9:79:79:bb:82:52:1c:d6:19:f8:74:
8d:ee:20:96:f7:ce:bb:50:e0:a5:65:31:54:df:36:
f7:7a:72:0b:75:d3:c3:0c:34:8e:78:eb:a9:69:0a:
2d:d1:09:30:cf:3f:24:b2:22:ef:1a:65:85:22:44:
51:65:79:cf:99:16:72:9a:41:8d:32:aa:fc:6f:af:
5d:77:52:85:29:35:d5:29:c4:55:2f:b6:15:77:5b:
5d:b1:2a:2d:3b:6e:f7:66:ee:74:31:53:2d:97:ae:
c5:fc:d1:cd:73:c6:19:75:3c:c1:32:f0:81:62:e1:
42:ac:af:bf:8b:37:96:a1:e6:47:e9:3e:53:d6:8e:
2c:4e:10:33:d2:31:a1:aa:f1:9d:74:ed:b9:75:1a:
16:48:89:a3:90:10:51:57:9e:b3:b3:84:8c:bf:57:
43:cc:01:22:e0:c7:86:3f:89:8a:6f:76:11:c6:19:
44:68:09:a1:f4:ba:fb:2c:62:50:16:3a:c4:12:7e:
f3:50:39:f8:f5:1d:1f:bf:7f:1e:a9:cc:3c:03:d1:
9a:d2:cb:53:a6:c2:3a:2b:f0:ae:0f:5f:0e:76:fa:
ac:fc:a7:b9:3e:08:38:c3:6a:87:f4:03:6e:0c:a1:
73:eb:4b:48:66:a2:10:64:b8:ff:14:2b:58:af:fe:
46:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:27:4F:40:12:B1:03:FE:54:77:B6:47:FD:0B:86:A5:2E:71:3C:7A
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/1-SdPQBKxA_5Ud7ZH_QuGpS5xPHo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.209.0/24
213.145.75.0/24
Signature Algorithm: sha256WithRSAEncryption
de:32:1e:a6:eb:3b:1d:fe:5b:13:1d:19:6d:33:89:a0:33:df:
e5:fa:e5:0a:60:fd:f0:e0:5e:4c:04:ac:72:1a:10:cf:02:fb:
10:83:92:1a:cd:2f:a3:e0:79:1a:84:19:3b:8f:44:fe:42:0b:
64:05:d4:bf:29:a2:10:8b:fe:0f:dc:2a:6e:ae:b7:49:41:6c:
24:2e:f6:58:63:9e:bd:b7:f0:11:b4:96:22:35:3f:88:31:bd:
7e:af:e6:39:8b:fe:47:7d:6e:9b:d3:49:f8:1c:1a:11:79:02:
80:ae:04:34:27:3f:f1:4a:f2:e7:55:e1:9a:07:d1:b9:5f:11:
e8:9e:5f:de:d6:6d:c8:a9:47:a7:f2:27:38:3b:d0:07:7a:e4:
35:ac:c3:33:1f:84:64:10:c5:f7:16:15:2a:8f:4d:00:bf:85:
a5:e6:6e:40:0b:32:ff:e0:5e:9e:f0:56:1b:4d:9c:3e:1e:35:
98:ef:d0:ce:6e:43:81:e3:0b:9e:d6:87:78:a4:ca:ff:91:1f:
2f:09:ea:1c:cd:ed:29:ae:b3:84:33:78:c2:35:04:d3:c3:49:
a9:da:d1:16:aa:15:ce:1c:5b:8a:1c:e8:77:54:23:7c:2f:c1:
33:4a:38:46:1b:9f:47:88:5f:b1:9b:50:94:a8:66:37:10:56:
5d:d7:c0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 18:00:06 2024 by rpki-client on console-fra.rpki-client.org